Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
File:                     YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft (raw, json)
Hash identifier:          hwLcLKAIePiMbpP747g2SlIUwpPazWWmXfFp2Ervjcw=
Subject key identifier:   F3:90:23:0E:2D:6C:22:07:D2:94:90:B7:CB:5E:96:66:A1:90:FB:9A
Authority key identifier: 61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00
Certificate issuer:       /CN=A91C2F8C/serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
Manifest number:          0150
Signing time:             Mon 27 Jul 2026 07:04:03 +0000
Manifest this update:     Mon 27 Jul 2026 07:04:02 +0000
Manifest next update:     Mon 03 Aug 2026 07:04:02 +0000
Files and hashes:         1: YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl (hash: ukK9wP9EPDszzeA5mPVo3wrYFcRiKd0r3lwL8GmDn5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl
                          rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2F8C, serialNumber=611E1C149528F17A0EC799C39D562619C9A15100
        Validity
            Not Before: Jul 27 07:04:02 2026 GMT
            Not After : Aug  3 07:04:02 2026 GMT
        Subject: CN=6a6702e3-4023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:57:c6:08:46:12:e3:ec:ae:7c:1f:56:27:
                    ca:9f:69:f1:07:06:f6:8d:b4:3e:99:9f:93:a5:63:
                    2a:51:a3:4b:ee:09:4e:0c:aa:87:0f:f4:47:13:14:
                    eb:f7:8e:5d:81:5e:1b:de:1a:f0:86:fb:51:72:66:
                    50:3b:59:cd:67:62:20:33:d6:0d:93:45:9d:17:d1:
                    87:58:53:f1:a1:55:e0:36:6f:ac:2b:77:0a:e6:af:
                    5e:18:d7:17:14:14:3d:60:7c:11:74:f1:d9:f3:ef:
                    e5:b4:ea:f3:38:32:3a:bf:5a:bd:3e:cc:c4:01:08:
                    6a:37:40:75:ae:f2:59:bc:6c:eb:f7:55:11:38:55:
                    54:87:a0:d8:c2:37:db:26:6d:e2:12:57:29:a4:47:
                    da:81:c9:7a:26:94:78:52:90:6a:f7:eb:39:f3:59:
                    c5:9f:ae:da:75:a4:b2:06:06:bf:82:1f:22:b9:79:
                    ad:91:df:75:7a:14:3c:7c:f7:58:2b:d0:8a:26:1f:
                    4f:f4:b1:82:d3:e5:26:9a:6f:8a:50:84:e5:cc:a4:
                    b2:f8:6b:9b:2c:df:62:38:12:40:2f:d1:5d:f3:da:
                    67:92:17:b8:ca:88:cf:dc:ff:94:e8:35:ce:78:c6:
                    ce:92:59:fa:84:ff:fc:e2:b0:69:38:bd:3c:20:2b:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:23:0E:2D:6C:22:07:D2:94:90:B7:CB:5E:96:66:A1:90:FB:9A
            X509v3 Authority Key Identifier:
                keyid:61:1E:1C:14:95:28:F1:7A:0E:C7:99:C3:9D:56:26:19:C9:A1:51:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YR4cFJUo8XoOx5nDnVYmGcmhUQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5E072AFE86E011EF9B6B177EC4F9AE02/YR4cFJUo8XoOx5nDnVYmGcmhUQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c4:64:35:85:27:13:27:d8:38:51:19:3b:84:e7:2b:21:5a:
         18:b9:f5:ef:5d:90:8b:fd:3f:b0:d6:9b:be:e8:46:24:0c:81:
         64:ab:f9:93:56:b1:ac:a1:4f:38:49:7a:61:c1:16:40:65:5d:
         e6:3b:09:09:70:c5:a0:cb:5a:f0:4f:10:6d:29:68:bc:a3:2b:
         4e:04:8e:2f:61:5f:cd:b7:f7:e3:3d:84:d2:85:a7:70:11:49:
         f7:65:d1:43:2d:77:7b:a0:fa:a5:c5:6e:d0:e8:3a:98:14:0b:
         ab:18:a3:5c:a9:80:09:c3:0e:9a:19:e2:4e:07:74:ff:00:0d:
         14:24:42:03:a0:64:e5:ce:2c:77:97:7a:24:26:fb:fa:8a:07:
         99:b2:d2:23:c7:bb:de:3d:31:c3:53:14:eb:c3:8b:33:79:61:
         02:f4:02:ce:88:6d:4e:20:c6:36:18:be:61:d7:3a:21:d2:6b:
         34:fb:1d:9a:6b:1e:45:b9:9e:dc:da:1f:d2:fb:c8:62:69:2d:
         88:73:8c:fc:83:5b:bb:6c:f3:b3:0c:54:83:9b:33:7f:e1:2b:
         9d:ef:0d:0b:09:ce:2c:6c:e2:9f:50:e2:fc:3b:f7:73:62:fe:
         57:d0:77:36:7e:a9:48:91:15:d3:b3:a3:d1:da:22:9b:ab:06:
         49:66:da:63
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzJGOEMxMTAvBgNVBAUTKDYxMUUxQzE0OTUyOEYxN0EwRUM3OTlDMzlENTYyNjE5
QzlBMTUxMDAwHhcNMjYwNzI3MDcwNDAyWhcNMjYwODAzMDcwNDAyWjAYMRYwFAYD
VQQDEw02YTY3MDJlMy00MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16xXxghGEuPsrnwfVifKn2nxBwb2jbQ+mZ+TpWMqUaNL7glODKqHD/RHExTr
945dgV4b3hrwhvtRcmZQO1nNZ2IgM9YNk0WdF9GHWFPxoVXgNm+sK3cK5q9eGNcX
FBQ9YHwRdPHZ8+/ltOrzODI6v1q9PszEAQhqN0B1rvJZvGzr91UROFVUh6DYwjfb
Jm3iElcppEfagcl6JpR4UpBq9+s581nFn67adaSyBga/gh8iuXmtkd91ehQ8fPdY
K9CKJh9P9LGC0+Ummm+KUITlzKSy+GubLN9iOBJAL9Fd89pnkhe4yojP3P+U6DXO
eMbOkln6hP/84rBpOL08ICtbyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOQIw4t
bCIH0pSQt8telmahkPuaMB8GA1UdIwQYMBaAFGEeHBSVKPF6DseZw51WJhnJoVEA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkY4Qy81RTA3MkFGRTg2
RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhYb094NW5EblZZbUdjbWhV
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSNGNGSlVvOFhvT3g1bkRuVlltR2NtaFVRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MkY4Qy81RTA3MkFGRTg2RTAxMUVGOUI2QjE3N0VDNEY5QUUwMi9ZUjRjRkpVbzhY
b094NW5EblZZbUdjbWhVUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALMRkNYUnEyfYOFEZO4TnKyFaGLn1712Qi/0/sNabvuhGJAyBZKv5k1axrKFP
OEl6YcEWQGVd5jsJCXDFoMta8E8QbSlovKMrTgSOL2Ffzbf34z2E0oWncBFJ92XR
Qy13e6D6pcVu0Og6mBQLqxijXKmACcMOmhniTgd0/wANFCRCA6Bk5c4sd5d6JCb7
+ooHmbLSI8e73j0xw1MU68OLM3lhAvQCzohtTiDGNhi+Ydc6IdJrNPsdmmseRbme
3Nof0vvIYmktiHOM/INbu2zzswxUg5szf+Erne8NCwnOLGzin1Di/Dv3c2L+V9B3
Nn6pSJEV07Oj0doim6sGSWbaYw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:10:32 2026 by rpki-client