Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
File:                     -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json)
Hash identifier:          +Pgd7um39fg5UejqWqmiOAxLgs5v40EcE7ysWOONYOM=
Subject key identifier:   18:9D:A0:94:1F:99:7A:9E:D2:BC:74:0F:38:36:19:75:CE:33:21:9C
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Certificate issuer:       /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial:       0BB6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
Manifest number:          0BAD
Signing time:             Fri 12 Jun 2026 19:05:13 +0000
Manifest this update:     Fri 12 Jun 2026 19:05:12 +0000
Manifest next update:     Fri 19 Jun 2026 19:05:12 +0000
Files and hashes:         1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: Wt/P1rrKAwrx7cs8hqKhKvBtOuQHjkCluAHGxk5FK/Y=)
                          2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: iXniGoo5n5RRm7yftdA1yfQi+WQIkekYkk+l5cL/OWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2998 (0xbb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
        Validity
            Not Before: Jun 12 19:05:12 2026 GMT
            Not After : Jun 19 19:05:12 2026 GMT
        Subject: CN=6a2c5869-d82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:f7:8a:69:cb:64:2f:c3:13:39:a1:7e:97:
                    b9:21:51:8b:a7:ba:46:76:3a:a4:5c:19:ff:2a:1f:
                    96:2d:a2:61:7b:8f:e9:b9:94:77:2c:90:c3:95:99:
                    8d:cc:b0:24:24:b3:f9:82:98:11:13:c3:50:bc:05:
                    8c:3a:98:63:ce:98:d6:e3:8b:86:c0:ba:fa:cd:fd:
                    91:79:79:f4:6c:75:84:10:be:97:fa:95:05:2f:9e:
                    fc:64:5d:a5:c2:33:a9:19:24:3a:f0:07:0c:70:cf:
                    fc:82:5d:9d:5d:e0:07:90:97:4b:47:5d:3b:7c:88:
                    79:74:35:86:a7:bf:8b:62:8c:0e:60:3f:bf:7d:a9:
                    c3:bf:fb:8b:04:95:c6:75:eb:98:d4:4c:bb:ac:e8:
                    c4:e5:ba:eb:ee:6e:20:2f:d8:ad:c3:2f:6f:b5:3d:
                    0c:04:f3:45:70:1e:bf:da:c3:ba:0d:1a:a3:db:a6:
                    7e:98:85:e1:15:48:ca:0a:b9:0e:31:30:a8:70:00:
                    1b:1a:b5:97:4e:4c:7c:eb:f9:27:9e:d7:95:eb:ea:
                    fb:c5:18:65:46:db:55:e1:3a:64:9f:ec:d8:16:c3:
                    cd:2c:2a:2a:f3:2e:69:63:f4:02:f5:d5:27:1e:3c:
                    ff:e6:64:5f:a9:ee:04:91:56:a8:20:8e:60:a1:cf:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:A0:94:1F:99:7A:9E:D2:BC:74:0F:38:36:19:75:CE:33:21:9C
            X509v3 Authority Key Identifier:
                keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ce:da:82:f3:da:a8:23:74:eb:b4:b8:52:12:6e:3f:a2:c4:
         70:45:ed:35:2a:31:45:16:89:10:ee:66:3b:1c:5b:49:59:84:
         3f:96:ab:bf:79:32:dc:b5:e5:8f:4a:c8:7f:4a:80:53:6b:f6:
         a4:ad:88:23:51:6f:b6:78:24:82:c0:3e:8e:5c:60:13:c1:76:
         64:79:0e:99:17:8d:10:12:94:9c:34:41:e6:c2:b4:06:10:30:
         5b:19:83:e9:02:2d:df:0a:ec:70:99:59:57:2c:60:82:0b:28:
         bc:d3:54:e9:c6:0f:30:6c:92:05:84:03:96:63:ac:34:87:21:
         15:93:11:2b:e6:2a:0b:27:51:a7:10:79:3a:7b:27:0a:bf:89:
         fc:87:98:6d:53:e4:ae:96:aa:9b:56:58:e8:56:9f:bf:9f:65:
         93:e7:71:71:0a:5a:50:c6:d1:8b:90:fb:0a:6e:09:99:20:d9:
         c8:60:aa:2d:31:e3:09:34:3a:1e:8f:71:22:63:0c:d1:be:a7:
         5d:49:f9:75:b4:0e:09:f7:3f:72:1c:be:31:32:7e:4d:6d:69:
         c5:01:1f:db:de:34:18:b8:03:f7:bb:5d:09:57:b5:33:49:7f:
         2d:f0:b4:bf:40:cf:9b:0d:ae:fc:f0:8c:ba:90:10:8d:9e:6c:
         7c:98:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:22:39 2026 by rpki-client