Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File:                     Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier:          9AkRkmenczULDP/LkxysbveoT8AFTCUWuDNMQx5KlGQ=
Subject key identifier:   6F:A3:12:AC:52:9A:F0:BA:B3:EA:C8:5D:87:61:92:B7:01:56:55:7C
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer:       /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial:       0C35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number:          156B
Signing time:             Tue 28 Jul 2026 18:58:48 +0000
Manifest this update:     Tue 28 Jul 2026 18:58:47 +0000
Manifest next update:     Tue 04 Aug 2026 18:58:47 +0000
Files and hashes:         1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: ojVJhR88QmQcz9kgrQqMVHjJ1cJejfURssNrgMnLb4o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
        Validity
            Not Before: Jul 28 18:58:47 2026 GMT
            Not After : Aug  4 18:58:47 2026 GMT
        Subject: CN=6a68fbe8-4706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a1:40:7a:aa:36:b6:10:4c:6f:66:db:7f:69:
                    f1:52:75:b9:fc:a7:67:ba:53:85:04:42:01:ad:36:
                    6e:c6:2a:61:3a:fc:da:42:66:cb:3c:d2:ce:65:c1:
                    ec:0a:a0:4e:30:29:a9:fc:c2:5b:0f:b1:3f:2b:d6:
                    83:4e:a3:8d:78:b0:97:37:26:58:0e:9d:f7:4d:f7:
                    48:78:78:86:43:59:77:1f:2f:70:bc:2f:ca:95:04:
                    e3:ce:af:49:5e:7f:78:23:f0:0a:77:84:8f:4b:51:
                    47:a6:72:68:83:3f:72:b5:3e:b9:41:99:21:cb:ff:
                    b7:b3:7f:d7:51:3e:64:74:67:ba:1d:a8:38:35:1c:
                    ba:02:2e:83:1a:3e:c2:49:4b:3e:c5:0e:75:a5:09:
                    2c:29:0b:9c:d3:1f:b3:b4:10:2d:ad:22:50:6c:50:
                    78:fd:e1:d2:d6:75:38:d6:94:d8:55:32:2d:08:ff:
                    da:12:70:ec:f4:6c:42:2d:b5:15:4c:56:a6:5c:39:
                    1b:f5:9b:c8:0e:63:af:e2:7a:1e:45:51:43:a6:1b:
                    6b:9a:9c:1e:a2:b4:d0:3c:55:b2:2f:31:34:19:f5:
                    8b:49:bf:fc:81:79:5a:7c:42:fd:5d:4b:87:e5:99:
                    9c:7c:a8:82:88:eb:d1:55:c8:0b:ea:bd:ef:c5:e5:
                    4e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A3:12:AC:52:9A:F0:BA:B3:EA:C8:5D:87:61:92:B7:01:56:55:7C
            X509v3 Authority Key Identifier:
                keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:56:24:b8:d0:fd:23:f3:8b:75:a6:30:e6:14:72:cc:10:
         07:61:e3:c3:d9:31:45:02:c3:fd:a2:46:14:a2:d7:cd:4a:a3:
         22:ab:5d:64:aa:5b:62:9a:a7:9a:c5:41:0d:32:76:aa:7c:8a:
         8b:c2:12:2b:69:8c:4f:49:3e:92:d0:8d:b1:a1:ff:b4:25:97:
         86:3e:3b:cd:14:6d:3c:24:55:af:00:7a:a1:04:fd:39:07:0d:
         f7:69:9e:24:59:e1:4b:76:20:34:2e:67:9a:19:38:e5:f7:8d:
         8d:aa:0e:a1:b5:29:bc:fd:cc:52:b6:ab:37:cd:ec:94:91:f3:
         70:20:39:a7:3e:c9:48:73:d8:a0:f3:fc:f9:24:80:3b:8c:59:
         5a:7b:b2:51:ff:00:07:36:65:04:dd:3e:63:35:eb:0f:52:47:
         0d:10:b8:7e:14:ae:33:c7:2a:02:d4:57:03:09:61:b0:9e:12:
         37:6c:1f:6f:99:b1:f8:01:30:35:3f:47:31:46:ae:c0:0b:02:
         28:35:02:48:f2:25:c9:43:d8:1a:4f:a9:a6:88:8c:a8:92:05:
         f9:17:95:9c:d6:19:53:af:d9:fb:d7:5e:1d:e0:4f:45:cf:88:
         08:84:35:7a:0a:b4:63:66:c2:8e:9c:d7:94:fd:5b:87:92:9a:
         6f:4c:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:27 2026 by rpki-client