Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
File:                     RYBbVYDVFRl9GmFa1myLnUhU9eo.mft (raw, json)
Hash identifier:          ytUClJ89hOv0m/0t7ByWR/+ggonwsh24W5sqpEmb9gY=
Subject key identifier:   3E:92:70:E6:C7:36:FF:CF:B7:1E:38:4A:6D:98:7A:BE:6F:ED:54:AD
Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA
Certificate issuer:       /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
Certificate serial:       18B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
Manifest number:          18A4
Signing time:             Fri 12 Jun 2026 16:27:04 +0000
Manifest this update:     Fri 12 Jun 2026 16:27:03 +0000
Manifest next update:     Fri 19 Jun 2026 16:27:03 +0000
Files and hashes:         1: RYBbVYDVFRl9GmFa1myLnUhU9eo.crl (hash: Q8RAN3hwNWWPXUWzrDD6/yid6zp72r3vbQHqW5YLBCM=)
                          2: 94A1F97A369711EA866E381CC4F9AE02.roa (hash: S0eb6BXPdezebakxVAbsrMO/KgjOPcxO/tmX+jv5Uos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl
                          rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6320 (0x18b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA
        Validity
            Not Before: Jun 12 16:27:03 2026 GMT
            Not After : Jun 19 16:27:03 2026 GMT
        Subject: CN=6a2c3358-91c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:6c:8f:5d:68:91:2f:91:dc:be:a7:1f:47:
                    21:2e:8c:b4:95:fd:3e:1f:5f:b2:49:ad:94:bd:a6:
                    7f:67:15:ec:84:d0:ea:13:81:44:a9:fc:b1:b2:96:
                    17:71:45:a1:fa:ab:36:f5:ab:b2:d0:7d:ef:01:34:
                    eb:7c:6d:7a:36:08:b7:0b:05:48:66:a7:d2:f3:38:
                    85:ad:ef:df:02:bc:ae:ce:2f:4f:6c:0e:c4:b3:8b:
                    2c:f0:2a:a5:f8:12:94:e2:b8:45:50:49:d1:6f:44:
                    a2:1e:c6:71:e2:11:34:e5:d2:97:a8:52:b0:4c:57:
                    d8:60:cb:db:37:84:63:97:08:32:ab:bb:da:04:10:
                    c2:58:46:3d:0f:f1:67:99:92:2e:49:de:71:10:10:
                    c7:cd:ec:22:d9:6c:ff:de:0f:58:f3:95:3d:32:01:
                    6e:b6:29:7a:ce:88:cb:96:ab:6d:8b:3d:e4:e0:95:
                    a6:a9:24:aa:68:62:ee:5a:c9:ba:5b:96:35:3a:c6:
                    be:b7:41:70:e9:8a:e2:79:37:a3:b9:40:4d:71:49:
                    72:12:7b:95:1a:24:e8:88:22:7f:45:ab:40:cb:32:
                    0b:46:14:7a:16:75:fd:f4:5b:65:f8:b4:f2:48:60:
                    7f:60:8f:74:e7:74:23:f5:ae:46:83:84:e5:6a:13:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:92:70:E6:C7:36:FF:CF:B7:1E:38:4A:6D:98:7A:BE:6F:ED:54:AD
            X509v3 Authority Key Identifier:
                keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:50:bd:1d:8b:00:8a:ee:1f:ef:42:24:3b:ad:2a:12:d6:cb:
         24:5e:56:82:0a:02:bc:8c:ee:fa:22:22:c6:41:38:75:15:72:
         f8:a1:5e:78:6f:a6:60:87:f8:e3:4e:e9:bd:75:59:a0:ad:d8:
         3b:0c:78:63:ee:66:01:43:14:eb:69:c9:5e:f5:40:9d:56:41:
         87:bf:66:e7:e3:4b:45:8a:7c:b4:2c:31:48:17:32:a3:69:06:
         a5:2a:55:16:2e:2e:a8:b8:be:62:21:b9:7c:2c:d7:c9:fe:70:
         ce:10:ce:5e:77:87:39:f4:65:69:d0:cd:dd:72:16:4f:0d:a5:
         8e:16:52:15:2b:80:e5:79:88:23:df:76:79:89:ba:09:7d:59:
         b4:be:0b:4f:7e:4d:5d:e7:e2:27:7c:5c:3d:a6:29:75:ec:23:
         72:35:13:a1:63:65:bb:ca:47:ca:ff:e7:b2:1b:17:42:ab:a0:
         1f:36:e2:02:41:d6:c5:2f:78:d6:64:d5:0c:ba:3f:e0:f3:a4:
         d9:dd:8b:68:26:2a:6a:32:c8:b8:2c:9f:0e:13:a1:99:44:db:
         db:02:2d:95:b6:ed:2d:0e:e2:1d:b5:97:bc:ec:c9:0b:c5:ad:
         4f:51:4b:9d:63:8c:bd:6e:7e:b0:05:a4:6d:81:a7:fd:28:e4:
         b4:ec:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:59:24 2026 by rpki-client