Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          qxuPRxarOFyzyvHzS+C0eJccnpsWZxj1pJCKuCQq8eQ=
Subject key identifier:   98:C8:3F:A2:4C:58:FC:49:5F:37:A3:1F:31:77:A7:C4:04:73:AF:F4
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          D1
Signing time:             Thu 23 Jul 2026 14:20:21 +0000
Manifest this update:     Thu 23 Jul 2026 14:20:20 +0000
Manifest next update:     Thu 30 Jul 2026 14:20:20 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: nfBsTBohXymyhkeDnJ8ciNGlu0C35nSD2puHKodkYMk=)
                          2: E4A2EB14869F11F1A80CEA8D6FA30FBC.roa (hash: nTd6ul7s0Xr3xhAkARstJPtokxzWA2PMPd2a9/DbiOQ=)
                          3: 9F9EF74086A111F18D87851971A30FBC.roa (hash: MFU9g1zLut/X+3qK5+QNkUBcEhI1pfxDqvyTIelsUy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 14:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Jul 23 14:20:20 2026 GMT
            Not After : Jul 30 14:20:20 2026 GMT
        Subject: CN=6a622324-cd49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:77:71:0a:c7:90:4b:23:59:3c:5e:11:38:
                    ba:e2:fc:e6:ac:e1:36:95:35:69:64:03:92:a2:e1:
                    7c:64:1f:77:55:71:4c:70:75:39:d2:3b:b3:ca:1f:
                    e0:1e:0e:26:07:a9:ba:a7:59:b2:1e:a5:bb:8e:26:
                    3a:79:38:cd:54:55:5a:40:69:5e:b7:d2:c2:70:c2:
                    70:c6:b2:73:b7:5a:81:e7:6c:0f:f2:49:72:38:0a:
                    bd:99:27:23:40:92:c1:f7:db:00:b6:b6:96:b4:b4:
                    f2:b1:3c:78:0d:6d:37:36:8b:e0:20:df:96:8e:2b:
                    40:8c:f3:4b:29:a0:57:74:81:51:42:99:8e:e4:e6:
                    29:01:2a:43:09:fe:88:bd:c6:50:30:a3:62:47:a3:
                    4e:20:8d:0c:ea:fe:61:fd:eb:0a:0b:93:af:a2:4b:
                    84:1b:3a:6a:73:5e:d9:0d:a4:49:19:e5:63:c5:c3:
                    93:2f:12:b6:cc:04:96:fa:f4:63:9f:dd:45:b1:ce:
                    82:bf:7d:70:e3:c2:2b:fd:b3:8b:52:d1:ab:7e:9f:
                    ac:1c:65:21:c6:1c:d3:91:6d:91:e9:77:48:3d:28:
                    8b:26:72:c6:c3:a5:1f:8b:a9:f5:aa:0f:73:ca:0c:
                    ec:ed:e5:c0:62:a6:e7:96:25:25:69:53:37:ed:5e:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:3F:A2:4C:58:FC:49:5F:37:A3:1F:31:77:A7:C4:04:73:AF:F4
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:d6:91:9d:be:ee:d6:77:a6:a8:f6:bc:b4:ec:ee:30:cc:
         3d:84:92:60:36:27:72:fc:76:43:0a:11:a8:12:cd:f2:73:f5:
         5f:1d:df:a5:9b:1f:6a:b7:31:ad:83:b9:a4:69:6e:59:db:c9:
         4f:b3:28:ac:71:e6:9e:c6:8c:57:2d:09:ba:31:33:2e:4e:db:
         08:28:7a:c0:70:86:9b:35:67:62:20:d4:8a:2d:5a:d5:32:70:
         34:7a:3d:df:ae:88:5e:ef:10:4c:62:6d:ee:7a:81:f3:a9:6f:
         28:da:3d:d6:2d:a8:b6:ff:1d:f1:27:d5:cb:ee:67:97:f8:4b:
         e6:c9:59:0a:c6:c0:eb:6c:7e:3b:68:6e:f7:91:4f:0f:5d:0a:
         91:8f:8b:81:dd:d0:39:0b:61:0e:cc:d5:b0:83:33:04:07:9a:
         18:70:9a:45:d3:c9:00:01:fc:0b:40:68:a3:6b:0a:d2:b7:ee:
         06:72:36:71:d8:41:77:86:f1:eb:f7:f1:11:db:e0:d3:c3:e1:
         dd:4c:40:f6:c3:07:1c:80:12:89:3f:cc:bb:55:35:0e:be:29:
         86:b9:e3:40:6f:6f:7a:40:60:26:53:74:6e:3b:17:03:d0:eb:
         21:af:0b:19:bd:35:62:18:7d:d4:0f:cd:0f:5c:03:20:61:8b:
         b3:cd:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:39 2026 by rpki-client