Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          UW6tSmP44MQdwbtXdDYhqHtoHbrugJ5evT/aSdPq6nQ=
Subject key identifier:   D5:BE:7D:52:65:A9:08:9E:4A:8B:A5:AA:08:9B:89:AC:FB:02:13:4F
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          AB
Signing time:             Mon 11 May 2026 07:21:10 +0000
Manifest this update:     Mon 11 May 2026 07:21:09 +0000
Manifest next update:     Mon 18 May 2026 07:21:09 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: 0+jXnuiri/6zt0l1rIZsHgPBCb2Fv9KEbZPCD5Deg/w=)
                          2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: 6W/VukXB5c5TI5sHg/exLjmPP5EzgCxNCDZkTAkJ9NI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: May 11 07:21:09 2026 GMT
            Not After : May 18 07:21:09 2026 GMT
        Subject: CN=6a018366-9e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:96:64:e0:4d:69:fe:08:7c:89:ef:02:77:05:
                    cc:22:3e:02:38:3e:a8:c3:8b:15:9f:74:52:4d:e1:
                    c9:a6:26:6c:f1:ec:12:b9:ff:c4:bb:fe:ff:16:ca:
                    19:2e:d8:69:b1:da:8e:45:e0:cf:95:7e:a8:ed:a1:
                    77:b1:ab:96:94:d6:05:c2:2e:e2:3e:9d:8d:d6:09:
                    97:fc:4e:1f:5f:90:03:07:9a:89:f2:a1:a3:26:a5:
                    74:c0:76:93:4f:f5:0d:c4:78:0a:01:86:b6:8e:df:
                    bc:bc:f7:a8:6a:05:95:be:cd:c1:d3:9e:e2:e3:72:
                    49:b9:7d:0a:91:05:d3:95:e8:e2:10:47:25:b2:cb:
                    02:12:69:48:39:4c:3c:55:61:83:6d:35:b1:43:a2:
                    d2:14:f6:4b:77:83:12:33:59:fe:7f:af:1d:5a:0f:
                    97:e2:32:29:c7:b9:31:21:76:46:f2:96:74:42:da:
                    33:1f:53:bc:05:9b:07:ad:9f:71:1d:39:cf:91:97:
                    d1:2b:8c:c1:3e:bf:6e:13:d3:4b:34:0b:b7:f0:91:
                    a7:7f:3f:82:c9:08:54:6f:03:8a:45:e6:c8:1e:bd:
                    47:d5:d7:e1:94:6e:38:d1:b3:34:9f:ce:f9:99:75:
                    93:88:6a:f9:27:f7:8c:77:eb:aa:e2:38:0e:5b:74:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BE:7D:52:65:A9:08:9E:4A:8B:A5:AA:08:9B:89:AC:FB:02:13:4F
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:75:ba:da:e2:49:c9:32:89:27:5e:94:7c:ff:0e:de:34:
         d9:d5:67:01:63:88:5d:e0:fc:74:eb:a2:b4:c1:e3:08:de:c9:
         37:f7:78:ea:db:3a:9c:27:42:b1:33:8c:ab:16:fa:76:5b:50:
         12:a5:70:7e:03:97:95:fb:86:cf:4c:44:9f:3e:c8:f3:f2:83:
         0e:af:59:47:ea:3d:3f:b6:45:96:ae:da:7f:b5:be:91:a7:36:
         50:60:4a:5c:cb:38:eb:e2:f2:6d:40:93:f0:b7:76:9b:45:50:
         08:0d:dd:8a:31:42:71:40:8a:45:7b:3a:56:ae:16:c7:45:92:
         25:04:76:5f:0f:01:fc:b3:9a:b0:be:75:6f:ae:5f:7f:b7:35:
         ae:f0:c0:9f:58:d7:58:06:64:61:75:17:94:94:dd:02:d2:e4:
         60:99:9b:2a:56:2e:9e:ee:6d:60:7f:2e:7d:e2:d4:47:05:92:
         b2:1c:84:69:8c:e7:eb:c0:df:c4:14:f7:bd:56:a0:f0:e2:f9:
         25:11:b8:17:0d:d0:59:bb:0d:aa:be:fd:9b:8e:be:b4:cf:71:
         56:0a:df:a2:ab:5a:59:73:8e:e3:d2:10:38:c3:5a:09:01:a4:
         7a:2b:8d:11:01:c1:11:ea:bb:42:07:df:fd:d6:4b:91:b9:9b:
         ac:ab:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:13 2026 by rpki-client