Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
File:                     xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json)
Hash identifier:          RLvk9wv3EwxlXEqfKwHkNIassYJy+tLazt155INECBc=
Subject key identifier:   F6:5C:3A:FF:3B:9C:45:98:E2:89:A7:5F:D4:DC:C7:48:45:3A:8A:88
Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05
Certificate issuer:       /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
Manifest number:          01BB
Signing time:             Sat 13 Jun 2026 03:53:44 +0000
Manifest this update:     Sat 13 Jun 2026 03:53:43 +0000
Manifest next update:     Sat 20 Jun 2026 03:53:43 +0000
Files and hashes:         1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: 9RPm9nwM8v81wq1vxQZx2qz5b9U9jdGtR26rXX2cNFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl
                          rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05
        Validity
            Not Before: Jun 13 03:53:43 2026 GMT
            Not After : Jun 20 03:53:43 2026 GMT
        Subject: CN=6a2cd448-1951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:67:24:36:18:fb:d3:31:3e:bd:32:07:0b:
                    8b:d7:95:be:23:c7:71:35:a6:52:a8:2d:dd:03:fb:
                    92:5b:86:2e:5f:ad:04:c4:05:73:27:97:47:25:ba:
                    01:2a:1e:35:a0:70:26:db:d6:18:4b:4e:01:ac:fd:
                    f5:2c:40:f1:08:01:ab:f8:9c:74:18:71:4f:cd:cb:
                    36:7f:9a:4d:60:3f:ac:57:b3:94:7a:fb:66:69:34:
                    51:07:ae:47:50:79:7b:26:03:e9:c2:9f:16:c1:a2:
                    b4:30:35:ce:9e:8e:e4:5b:26:f2:2c:36:a3:57:cc:
                    2b:f9:5d:cc:7b:db:94:50:d2:22:67:c2:df:93:c8:
                    c9:3b:48:48:14:98:6c:60:ec:85:60:0a:73:97:58:
                    5c:6a:52:0c:02:f3:df:2f:b4:f5:1f:ef:d4:bf:7d:
                    1d:62:c8:42:4c:e3:d3:f0:2b:77:48:79:f9:44:c4:
                    3f:87:73:a2:10:3a:03:f9:74:8e:49:db:ce:27:eb:
                    cc:d5:a1:d9:bd:b4:66:67:6d:aa:8d:a1:d8:a2:28:
                    9b:88:2a:3b:14:d1:20:8b:43:78:a1:3d:c8:fe:54:
                    1c:1b:47:3d:2c:15:49:03:b2:e8:3c:ed:62:83:7d:
                    7e:0f:a2:67:32:6a:b0:ec:04:ab:5e:67:1a:2d:77:
                    15:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:3A:FF:3B:9C:45:98:E2:89:A7:5F:D4:DC:C7:48:45:3A:8A:88
            X509v3 Authority Key Identifier:
                keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:f9:ca:d3:cf:55:2f:d9:47:c8:ac:25:17:5b:cd:5a:65:
         d4:ac:79:e3:c2:d8:15:1a:a2:54:b4:16:bf:0a:33:a1:2d:8a:
         17:f1:43:c2:c9:76:2a:3f:78:f5:32:f5:d8:30:7a:58:97:97:
         ee:f9:e6:2f:04:8e:49:d3:d1:77:5a:d4:b7:64:21:f1:69:d1:
         6e:79:bf:08:1a:2e:5c:4d:58:e3:a4:91:aa:74:fa:09:10:bc:
         80:73:5b:5c:f7:27:c1:25:65:a4:fe:9c:08:cf:51:f3:e2:ee:
         a0:43:ba:5a:33:34:60:d9:01:0d:53:94:89:30:37:76:5f:e3:
         ff:f6:a8:5d:e2:da:fc:fd:1a:db:c1:31:8d:35:28:57:b7:9e:
         f4:64:c5:c2:45:fd:17:18:c2:4a:d7:dc:11:c5:4f:02:98:99:
         ec:7d:14:13:e9:d5:f6:28:88:57:ea:e3:34:c7:c7:ca:69:40:
         fd:ea:ab:09:d9:72:fe:18:70:0b:90:c4:a1:c7:0f:45:ba:f0:
         4e:c9:3d:95:9c:6d:7e:2e:df:e3:82:78:ee:47:fa:ad:d8:57:
         6e:44:86:0b:11:7d:c8:e1:ee:1f:36:59:2c:16:1f:5a:04:3f:
         09:bf:40:d4:88:d2:56:fd:bc:53:51:27:c6:a6:91:96:fe:1a:
         e1:d2:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:24 2026 by rpki-client