Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          3CtM9A2WKLnFeWgghPrwcxBq8yFCdMyqsqv8DpBQm10=
Subject key identifier:   4D:2F:61:97:3D:A0:89:04:A1:45:37:AC:48:E8:23:19:C4:38:7F:DD
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          62
Signing time:             Mon 27 Jul 2026 10:21:19 +0000
Manifest this update:     Mon 27 Jul 2026 10:21:18 +0000
Manifest next update:     Mon 03 Aug 2026 10:21:18 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: NtrIdt1xgP/w+98+GVByqItfgLS8CaXnihnCtDCKDbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:21:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Jul 27 10:21:18 2026 GMT
            Not After : Aug  3 10:21:18 2026 GMT
        Subject: CN=6a67311f-56e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:60:24:6a:20:c6:10:1b:40:30:f6:e1:6d:
                    fc:1b:98:2e:07:0f:32:7e:83:17:13:48:68:ce:de:
                    53:d0:98:bf:a8:6c:2e:5f:8c:aa:a3:c1:0e:f8:c7:
                    b2:1a:d0:11:02:c1:3e:52:e4:c3:6a:27:6e:28:62:
                    35:42:5a:fe:7f:ed:3d:f0:cf:ee:7d:ca:72:10:44:
                    18:c8:9f:3c:9e:d6:a9:d6:c7:b9:b1:46:8d:15:9c:
                    31:80:11:d9:26:ea:a0:ef:4b:a1:b1:6d:ed:ae:cb:
                    f7:62:06:a6:fd:95:bc:15:e4:73:42:3b:5b:63:92:
                    77:07:91:9c:ab:2e:07:4c:7d:4f:51:5e:5d:33:d3:
                    5e:42:70:c3:86:74:db:a4:b5:d7:3a:7a:41:7a:ea:
                    fd:38:ad:48:40:04:b1:25:27:45:9b:22:d4:07:52:
                    f8:8e:d2:54:33:70:37:ac:f3:dc:7e:6c:1f:11:bb:
                    5d:b8:42:32:2a:74:ff:d4:d9:57:e2:05:09:f7:33:
                    61:23:51:af:2d:8c:92:eb:52:71:06:2c:e2:25:57:
                    d5:df:34:fd:c7:6e:bd:98:5e:d8:bd:2e:30:43:ed:
                    f7:b4:e4:8c:d5:0e:a5:4d:98:ef:ca:95:b9:53:e0:
                    54:48:d1:4f:45:4d:91:4e:0d:b3:1d:55:38:5d:99:
                    65:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:61:97:3D:A0:89:04:A1:45:37:AC:48:E8:23:19:C4:38:7F:DD
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7f:a2:81:93:0c:19:78:83:28:be:f6:81:34:99:11:9f:23:
         5e:c0:ec:c5:a4:01:a9:27:8b:55:76:84:e3:52:f5:b7:17:96:
         97:82:c2:9b:21:b8:8d:db:82:f0:f9:9c:48:de:58:27:94:d0:
         94:8c:80:68:4b:fa:0f:1d:ea:02:9d:1f:b6:f5:4f:3f:88:52:
         45:14:37:61:be:83:13:28:14:52:84:ae:dd:2a:13:9b:6b:00:
         22:9c:3b:e0:24:a5:b2:03:f5:37:ce:4b:b8:82:40:69:8b:57:
         68:9d:a1:7b:3c:52:0e:44:54:eb:86:e0:2d:da:a7:3b:54:30:
         78:70:54:03:7d:a6:8a:f0:37:f8:c7:0d:ee:03:34:bd:af:46:
         4b:cc:b8:f6:df:6b:94:90:73:ee:3b:43:c8:bb:5f:e3:11:cb:
         33:11:c3:6c:c3:00:66:3d:fe:1d:a0:6e:1f:92:4a:23:d8:64:
         ca:f6:59:83:5d:b7:5e:79:be:75:37:42:34:34:83:e3:b9:fb:
         a7:a0:0c:b0:2a:93:af:aa:08:30:0a:03:8f:de:42:97:47:c0:
         41:10:26:75:15:b4:26:c1:07:0d:72:8b:89:55:df:d8:6a:8c:
         39:6a:33:bf:f3:22:13:97:96:92:94:3c:9f:af:e8:fc:fd:c7:
         65:2d:27:ac
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODYwMTExMC8GA1UEBRMoRDk4RjZGREIwMDdGRkY4M0UxMTMwOEZBRDU1QTFFQUZB
ODM4NzRDRTAeFw0yNjA3MjcxMDIxMThaFw0yNjA4MDMxMDIxMThaMBgxFjAUBgNV
BAMTDTZhNjczMTFmLTU2ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpXmAkaiDGEBtAMPbhbfwbmC4HDzJ+gxcTSGjO3lPQmL+obC5fjKqjwQ74x7Ia
0BECwT5S5MNqJ24oYjVCWv5/7T3wz+59ynIQRBjInzye1qnWx7mxRo0VnDGAEdkm
6qDvS6Gxbe2uy/diBqb9lbwV5HNCO1tjkncHkZyrLgdMfU9RXl0z015CcMOGdNuk
tdc6ekF66v04rUhABLElJ0WbItQHUviO0lQzcDes89x+bB8Ru124QjIqdP/U2Vfi
BQn3M2EjUa8tjJLrUnEGLOIlV9XfNP3Hbr2YXti9LjBD7fe05IzVDqVNmO/KlblT
4FRI0U9FTZFODbMdVThdmWV1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTS9hlz2g
iQShRTesSOgjGcQ4f90wHwYDVR0jBBgwFoAU2Y9v2wB//4PhEwj61Voer6g4dM4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NjAxLzU5NEIyQzNDRjZB
RjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQaEV3ajYxVm9lcjZnNGRN
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMlk5djJ3Ql9fNFBoRXdqNjFWb2VyNmc0ZE00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
NjAxLzU5NEIyQzNDRjZBRjExRjA4OTZBQkM1RjQzNkY1NkJDLzJZOXYyd0JfXzRQ
aEV3ajYxVm9lcjZnNGRNNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBVf6KBkwwZeIMovvaBNJkRnyNewOzFpAGpJ4tVdoTjUvW3F5aXgsKbIbiN24Lw
+ZxI3lgnlNCUjIBoS/oPHeoCnR+29U8/iFJFFDdhvoMTKBRShK7dKhObawAinDvg
JKWyA/U3zku4gkBpi1donaF7PFIORFTrhuAt2qc7VDB4cFQDfaaK8Df4xw3uAzS9
r0ZLzLj232uUkHPuO0PIu1/jEcszEcNswwBmPf4doG4fkkoj2GTK9lmDXbdeeb51
N0I0NIPjufunoAywKpOvqggwCgOP3kKXR8BBECZ1FbQmwQcNcouJVd/Yaow5ajO/
8yITl5aSlDyfr+j8/cdlLSes
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:46 2026 by rpki-client