Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File:                     YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier:          PSzhNM0GjXTJifYLIXoT/k6DoiJJGHVra8ayZnX/wF4=
Subject key identifier:   AA:C8:AE:8C:DF:D5:DD:53:E4:2C:29:5E:4E:7A:3F:BA:3D:37:EA:25
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer:       /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial:       01C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number:          01B8
Signing time:             Sat 13 Jun 2026 03:59:45 +0000
Manifest this update:     Sat 13 Jun 2026 03:59:45 +0000
Manifest next update:     Sat 20 Jun 2026 03:59:45 +0000
Files and hashes:         1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: ildFIcSdwIK1e5Z0JzElus23TRZRmf7lsGVdIu8uMSE=)
                          2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
        Validity
            Not Before: Jun 13 03:59:45 2026 GMT
            Not After : Jun 20 03:59:45 2026 GMT
        Subject: CN=6a2cd5b1-5759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:55:16:fa:eb:c7:c6:cf:11:dd:71:b0:c8:
                    c1:ed:ce:c6:60:34:71:3d:b4:b4:2c:75:88:25:a3:
                    07:ff:97:3f:50:f0:44:3d:6b:3d:72:92:a2:dd:33:
                    80:e3:e9:37:97:f7:a3:c2:c3:bf:dd:d4:10:67:fd:
                    5b:95:f8:36:fd:22:15:9f:a8:2d:49:6a:bd:21:d2:
                    28:0e:02:f3:b7:09:10:5e:62:d5:f4:8d:c9:ab:43:
                    72:f8:3f:a0:8d:99:72:8e:c9:f4:fa:a1:75:9d:ee:
                    bb:ad:fe:d6:48:77:70:51:52:b5:e9:de:c8:e0:04:
                    9e:1e:b5:7a:55:50:6b:46:72:2e:8f:67:29:bf:db:
                    76:3b:97:49:66:44:3a:28:8a:8b:26:86:a6:05:af:
                    8c:56:87:42:9b:44:3b:3a:bf:18:82:11:69:d5:46:
                    dd:50:aa:c6:a6:d4:e4:34:5c:53:16:4a:72:b4:5d:
                    48:76:83:5f:15:1c:bb:14:b3:46:5c:47:72:58:fc:
                    ab:14:19:70:4a:20:73:c9:ce:5e:77:e4:5a:f9:39:
                    53:3e:ea:cb:28:68:35:78:b2:af:31:c9:6e:34:3d:
                    07:2d:49:c8:f1:81:15:39:be:50:0a:e2:29:b2:33:
                    49:a9:bf:2c:a1:c0:95:e9:67:75:36:18:01:9f:bf:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C8:AE:8C:DF:D5:DD:53:E4:2C:29:5E:4E:7A:3F:BA:3D:37:EA:25
            X509v3 Authority Key Identifier:
                keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:d4:c3:49:b5:03:2b:e4:81:2d:5c:39:04:3d:d1:3b:79:
         2a:44:6f:d5:35:5e:0f:32:99:37:28:7c:32:6c:46:40:3d:dd:
         2c:cd:21:94:de:17:67:2c:10:45:e3:69:cf:0e:a6:8a:4f:1f:
         fb:b4:c8:8a:df:6f:db:24:63:83:91:20:1b:c8:b9:84:a8:d0:
         31:af:27:25:7a:1f:8f:4e:3b:51:3f:c0:ac:e9:a4:2a:85:d5:
         fa:9e:65:72:8d:6d:91:ca:cd:44:c3:ea:fc:ef:08:ce:07:6f:
         96:28:d6:45:78:c4:ee:14:d6:a0:e3:6c:2b:d7:16:67:ef:27:
         88:23:ea:c1:b1:81:59:d8:2a:f3:f8:8e:d6:5a:c5:e5:1d:24:
         ec:b3:7a:d2:bb:17:df:b3:98:37:c2:b8:0c:26:20:86:24:cf:
         9d:b2:76:bd:9f:54:81:3e:f5:aa:80:3d:79:05:6c:90:e0:50:
         c9:2c:44:64:e7:d4:74:91:35:89:6d:09:32:04:66:53:ff:db:
         56:69:1b:09:c7:d3:82:5b:7f:f0:ba:50:3c:0d:40:82:c4:98:
         0a:65:be:70:b5:bc:60:27:51:1f:db:3e:f8:0f:c4:f0:86:5b:
         65:4f:fb:bb:7a:85:22:83:8b:dc:9b:55:d4:e2:97:44:00:b6:
         17:20:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:57 2026 by rpki-client