Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          H49bbXukSqhDBxatfg4yflzb9bdd/7My9OxjZdcDGjU=
Subject key identifier:   56:96:1A:9C:7C:0F:92:E3:94:E8:5D:37:DD:74:E9:60:FB:37:65:66
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          0142
Signing time:             Wed 17 Jun 2026 05:27:48 +0000
Manifest this update:     Wed 17 Jun 2026 05:27:48 +0000
Manifest next update:     Wed 24 Jun 2026 05:27:48 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: cHiH9zJ7S31KNAcsABbgMtCHxOfWT9A6RHWGvyq/N3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Jun 17 05:27:48 2026 GMT
            Not After : Jun 24 05:27:48 2026 GMT
        Subject: CN=6a323054-224d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:b3:fc:3d:a0:2c:ef:1b:6d:45:ed:e1:ae:
                    de:98:f3:0d:81:ba:ae:6e:54:ae:95:15:bf:60:66:
                    09:a6:0a:16:b2:92:21:92:6d:04:e3:87:6e:08:aa:
                    54:92:cf:0a:81:9e:5c:b7:1d:d9:ae:bf:59:db:74:
                    1b:fd:21:a3:12:0b:02:5d:1e:07:71:40:fd:cd:85:
                    d6:f9:9a:32:d9:72:36:48:f3:7f:ee:84:ed:19:ce:
                    66:a9:c4:01:fd:d3:7f:30:15:f8:b3:4d:b2:47:12:
                    d4:98:98:23:c0:db:b9:42:5f:53:c5:11:64:76:52:
                    c5:1c:00:a8:fc:70:c6:64:6b:e0:d9:ec:19:6f:6b:
                    68:ed:0b:b4:58:70:39:4d:a5:f1:0f:0e:c4:91:a2:
                    75:b7:53:85:cc:0d:3d:a1:09:62:43:e1:5f:73:5b:
                    0c:14:b7:7c:bb:ba:f6:83:6a:cc:03:25:35:59:a6:
                    c3:6a:f0:0f:70:95:6d:dd:d6:88:42:8b:05:d5:fa:
                    bd:b0:4f:45:e2:91:99:84:1c:ca:36:40:46:06:cc:
                    fe:7e:35:38:cd:33:83:5b:42:26:a6:7a:ea:fc:41:
                    72:9e:a0:f8:e7:7c:17:dd:90:88:d6:98:b0:2a:52:
                    03:cb:d3:03:95:3e:45:9f:4a:b5:53:14:3c:3f:1c:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:1A:9C:7C:0F:92:E3:94:E8:5D:37:DD:74:E9:60:FB:37:65:66
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:83:fc:f5:52:dd:ea:4f:67:63:02:f3:8c:96:c2:9d:42:
         85:ba:7a:c5:11:c6:36:06:fd:aa:1a:17:4f:07:c1:29:9e:19:
         b8:20:39:91:6a:3e:4d:a5:ad:92:5c:a4:d2:c2:c2:23:5d:0a:
         10:7e:3e:fe:99:f9:f3:9b:cf:5d:23:5d:cc:d7:98:1f:85:49:
         e6:84:1c:c4:4f:81:d6:fe:03:a5:95:d6:96:92:05:c0:fe:6e:
         b8:f8:f1:3c:be:81:74:c7:6f:c5:83:67:58:4b:47:10:79:ca:
         ea:2b:f1:9a:f9:39:ba:b7:9f:83:f6:eb:4e:82:41:20:8c:a1:
         12:e5:23:dc:26:12:ae:14:53:7c:21:e7:59:78:74:c5:42:6b:
         16:e9:68:c2:15:bf:94:4a:de:35:91:2a:16:0d:ef:ed:5b:b1:
         c9:e1:bf:7e:40:c1:7f:2b:ae:5b:eb:03:7a:c1:17:5d:20:d7:
         ec:b6:f1:a8:96:6f:27:49:64:c4:23:8b:b4:cc:ad:98:3d:f2:
         24:27:a3:cf:73:b3:6c:94:15:a5:37:b4:51:8d:23:ac:d8:96:
         ca:15:ee:39:d9:b6:18:3b:fd:9f:0e:c0:88:68:9b:b5:5a:66:
         a4:0e:84:79:aa:d1:dc:54:06:97:e5:40:5a:13:cd:f0:d7:31:
         35:c1:88:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:09 2026 by rpki-client