Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          clDqK7poLzU4kwr4rh+rqyvdatYkdyVd8oiJ8r367ls=
Subject key identifier:   CA:5A:8D:7A:CF:70:D7:8B:F4:B0:4F:78:04:29:F2:E7:6F:FE:C7:B7
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          4B
Signing time:             Thu 11 Jun 2026 10:40:12 +0000
Manifest this update:     Thu 11 Jun 2026 10:40:11 +0000
Manifest next update:     Thu 18 Jun 2026 10:40:11 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: NAcTXX5NX3kvwWCrSrfSuNwrse7WfR/DOCZ9CifWvtE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Jun 11 10:40:11 2026 GMT
            Not After : Jun 18 10:40:11 2026 GMT
        Subject: CN=6a2a908b-a920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:d8:bf:a5:2f:03:71:b6:66:0d:8c:06:83:
                    cd:13:da:d1:ec:19:2e:09:63:7d:df:e7:6a:86:45:
                    27:ac:a7:53:c0:ac:15:75:a5:46:d0:d4:d5:6c:b5:
                    bf:11:37:fa:90:5a:45:c2:ae:e8:eb:d3:50:cc:6c:
                    31:10:d5:3c:ad:00:c9:a9:42:ee:a8:6a:42:96:8b:
                    4e:c9:4e:bd:7b:d6:33:55:05:88:80:aa:3d:f4:0b:
                    9e:d5:8a:d1:4b:19:ae:b1:c9:f2:c0:29:ba:e4:04:
                    e4:5c:35:2c:be:e4:ff:8b:de:30:d8:ba:bb:6e:47:
                    8d:58:4b:a4:19:4e:ac:06:d0:39:b9:0a:77:59:0e:
                    bf:08:3c:2d:e0:95:7d:c9:54:5a:5d:82:1b:5b:a7:
                    57:90:45:fe:50:a8:11:74:27:f9:e1:4a:8b:2c:3f:
                    d7:3b:a4:f1:4c:b4:dd:70:63:12:91:d3:68:90:60:
                    26:bc:a4:a3:a8:94:1c:78:14:a9:7c:ef:04:bb:96:
                    c8:da:c0:1c:ff:7e:d1:ba:6a:a0:2f:63:84:8c:12:
                    d7:87:f1:92:53:92:d5:50:bd:bb:6e:8d:57:a5:ef:
                    0e:22:f2:23:bc:36:32:51:fd:9d:8f:7e:ea:e6:fb:
                    af:2e:d1:4e:f6:e1:e8:62:56:32:cf:ec:8c:d6:9a:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5A:8D:7A:CF:70:D7:8B:F4:B0:4F:78:04:29:F2:E7:6F:FE:C7:B7
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:f3:38:a7:6e:3d:e0:82:68:ca:25:13:d4:d2:d9:8b:54:
         10:62:fa:2f:f5:5b:60:97:62:26:f4:4a:6f:4b:15:31:ba:65:
         11:35:3b:a1:a5:a7:b0:f8:55:fb:aa:f0:27:10:98:ab:d5:43:
         91:55:5b:7d:91:3c:2c:74:0e:f9:f8:c3:e4:7f:ec:cc:e8:99:
         9c:a6:fd:16:03:0c:37:a2:25:84:15:ad:37:40:0d:ac:b7:9d:
         f2:4e:4b:c9:c1:37:e2:61:bc:36:f5:0e:3c:92:66:d7:77:5a:
         a5:66:fc:2a:c2:b3:32:02:39:7b:b4:7d:4b:45:0e:fb:8e:4e:
         57:ee:23:83:15:4a:0d:17:b8:46:d1:c6:fb:67:ed:09:b8:53:
         66:3d:39:b3:cf:06:32:db:e6:ab:10:ad:00:14:10:41:60:47:
         4f:54:74:da:39:ec:56:f5:6f:5b:a8:e3:93:1b:49:3c:70:4d:
         80:df:61:15:ee:e0:6f:50:47:68:23:22:c8:71:b8:d2:e6:65:
         0c:ff:dc:8c:b3:2f:07:b1:87:35:f3:05:8b:7f:f8:31:59:4f:
         1c:be:75:0b:a9:9f:42:69:9f:59:16:68:f6:5f:c6:a8:44:a5:
         3a:64:0a:9c:9b:8d:df:87:2c:dd:91:ce:ee:8e:f8:5d:e4:25:
         14:d8:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:49:42 2026 by rpki-client