Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File:                     cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier:          qbt3CehkI74N+6l1Pdo9q5bJCq/BY1sFJ1WEZEKX4bs=
Subject key identifier:   A8:87:4F:5A:FB:C6:A7:DE:8F:E7:52:2C:D1:D1:F7:6D:EF:3F:D0:9B
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer:       /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial:       0EB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number:          0EB0
Signing time:             Thu 16 Apr 2026 17:36:49 +0000
Manifest this update:     Thu 16 Apr 2026 17:36:48 +0000
Manifest next update:     Thu 23 Apr 2026 17:36:48 +0000
Files and hashes:         1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: LU4lWVlUhxQsAYG6b+p9qiaiXUI8twp5O8dRfytRfGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
                          rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3761 (0xeb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
        Validity
            Not Before: Apr 16 17:36:48 2026 GMT
            Not After : Apr 23 17:36:48 2026 GMT
        Subject: CN=69e11e31-49e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:2b:c3:72:47:40:bf:58:03:31:bd:a1:14:
                    22:eb:50:3b:83:56:75:e9:7a:7c:2e:3c:af:f0:eb:
                    ca:7f:70:ec:96:07:a8:81:27:6d:61:a3:59:7c:95:
                    ca:6a:ff:23:11:bb:40:aa:c6:e9:06:a8:02:ca:b0:
                    48:69:05:1f:98:29:0d:d9:1b:a6:86:f8:d9:87:e7:
                    6c:a7:ab:7b:b1:8c:61:71:b5:11:de:a2:8e:d9:34:
                    9f:76:d1:1b:0a:8f:43:5e:89:14:b8:9d:7b:cb:1a:
                    cb:de:3a:6e:62:be:22:b2:f1:18:24:7f:b0:cc:0d:
                    dc:6f:04:9b:64:d0:0f:6e:bb:e5:c3:68:39:ae:3d:
                    95:06:2a:7a:14:3a:5a:46:86:20:7d:cf:77:9e:c6:
                    48:72:f9:c5:05:66:6c:e2:96:39:57:7c:ec:33:d8:
                    96:0a:48:c5:da:45:d5:18:9d:bb:c8:32:60:df:76:
                    97:a5:84:d7:3e:78:b7:19:10:47:1c:ed:ef:79:61:
                    76:cf:f9:c0:31:98:eb:6e:8d:f2:6e:d8:3a:58:3c:
                    40:01:00:24:b5:e2:23:e5:65:ef:66:8a:94:3c:dd:
                    51:1f:f2:fc:eb:12:dc:23:3a:d2:ef:d3:50:e7:09:
                    ae:90:42:39:e7:13:37:2d:23:1e:46:6c:12:0c:79:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:87:4F:5A:FB:C6:A7:DE:8F:E7:52:2C:D1:D1:F7:6D:EF:3F:D0:9B
            X509v3 Authority Key Identifier:
                keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:2a:14:15:2c:bd:da:cb:22:01:e6:d8:64:fa:93:e7:0a:
         9c:5f:b1:c5:dc:db:97:34:00:04:dc:d0:4c:02:11:a6:98:99:
         7f:73:7e:8c:8c:95:7e:45:41:4e:ec:aa:13:02:b5:65:5e:ef:
         17:5a:db:fc:00:db:6b:6d:dd:46:3f:39:e9:eb:12:98:3d:a7:
         19:8e:63:7c:9f:97:49:c4:ab:c7:c8:bb:ef:9f:9c:30:c4:6f:
         49:49:63:21:a7:bc:33:5d:f7:0c:d7:9b:81:60:26:d3:b6:cf:
         81:d8:b2:78:43:39:0d:89:58:db:75:17:3c:2a:60:f8:5b:51:
         a6:ef:93:7b:46:cc:d6:3e:6f:d8:c0:94:17:db:84:49:17:a9:
         ab:7a:97:f9:36:df:a7:8f:25:15:9b:24:90:7c:f5:24:7c:b1:
         18:7c:ad:b3:d6:ac:e0:7b:67:03:2d:1e:73:9d:dc:e5:d1:62:
         98:5a:56:d5:0b:0f:01:cc:14:48:9e:9c:6d:d5:0a:8c:c2:2e:
         a9:e9:91:f0:c9:28:c2:c1:26:ce:b5:15:ec:07:5c:9c:58:66:
         5e:6a:d4:4e:e8:62:52:18:84:b9:cd:54:b5:7d:1b:97:25:f7:
         97:d0:01:b0:b1:7b:d1:03:33:04:fe:b8:5b:7b:db:0e:4a:d8:
         4a:50:1c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:59 2026 by rpki-client