Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          z8QSurtQoCjX1RZO8IybCNMdYwfY1Nq5PT+Hn8Svjx4=
Subject key identifier:   8E:C1:33:E5:30:E0:E7:7A:21:62:8B:7B:35:D9:A7:D3:11:C7:A4:8C
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          0154
Signing time:             Thu 23 Jul 2026 06:41:09 +0000
Manifest this update:     Thu 23 Jul 2026 06:41:08 +0000
Manifest next update:     Thu 30 Jul 2026 06:41:08 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: xf/zO+2Y3cOEOAfbKk09yyeG99uB9q1+tfscTYUrO1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Jul 23 06:41:08 2026 GMT
            Not After : Jul 30 06:41:08 2026 GMT
        Subject: CN=6a61b784-a453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:e2:3e:4d:d1:c6:a8:77:c0:7a:39:ad:a7:
                    a5:f7:26:c0:ba:5c:99:23:48:58:98:2d:50:34:84:
                    0a:21:d6:c4:a4:ce:eb:7c:e3:03:ab:45:ec:c0:6c:
                    64:cc:f4:27:ac:27:70:2a:77:d5:5f:40:ee:f5:f1:
                    e2:7d:fd:95:93:e2:2b:04:ad:e5:24:1a:a8:bf:5d:
                    e4:2b:ae:a9:d2:4e:9c:48:be:b6:11:bd:9e:7f:7b:
                    fa:8f:4a:23:53:85:0a:75:15:57:a8:c8:c9:c0:0d:
                    6f:9c:e7:aa:89:03:08:60:a7:5d:7a:66:29:28:b3:
                    36:13:5c:fa:bd:17:8e:c5:2e:d5:56:e0:18:6e:e7:
                    80:f9:53:c7:62:4c:8c:2a:84:70:cf:1a:b7:ff:8a:
                    01:36:2c:64:53:aa:04:28:36:80:41:3b:c2:3b:8a:
                    e9:37:c2:eb:25:62:56:ed:f2:e2:0d:bd:9e:b1:47:
                    c1:11:ca:84:ba:b8:55:9a:79:bd:33:70:90:50:db:
                    a2:22:61:38:f5:62:24:40:c1:92:43:65:b6:8f:43:
                    91:85:8c:d2:dd:37:a2:5b:99:18:6c:7d:0b:df:1d:
                    c5:6b:a8:55:8b:76:1d:35:e7:54:b8:33:7e:60:0e:
                    a8:fb:66:83:ee:b6:c6:5c:97:85:f4:82:08:28:c5:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C1:33:E5:30:E0:E7:7A:21:62:8B:7B:35:D9:A7:D3:11:C7:A4:8C
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:54:7d:1c:9f:28:1f:a8:9d:1f:f9:0f:a3:9f:4a:a7:10:b0:
         84:d1:44:dd:a8:8a:3a:44:f6:ad:a0:cf:63:ad:68:16:21:0e:
         b0:65:e3:09:ba:81:0e:0e:20:f9:59:94:7c:7e:1c:a2:3d:83:
         17:eb:2b:67:4e:85:a6:84:86:1f:c5:2c:1a:46:cd:79:66:10:
         3d:49:bc:87:8f:34:16:4a:36:4d:de:3c:54:e7:df:82:2e:af:
         73:24:29:8a:aa:68:e9:03:6b:43:b3:42:62:b2:80:0b:f0:ae:
         90:77:cd:df:86:0b:fe:ab:c7:54:c6:6b:e0:b8:c6:c1:b0:6b:
         be:e2:49:97:67:fd:4d:03:4a:19:79:d5:3a:94:49:46:40:c6:
         96:38:83:81:1e:7e:91:a9:49:2e:c6:2e:16:76:85:de:0c:45:
         6e:4f:f2:2c:0b:27:59:bd:7b:d7:fd:a7:04:01:44:3b:87:cd:
         d4:2c:47:0f:64:61:c9:3d:4c:75:1a:07:37:f6:91:4c:61:0b:
         f7:65:87:30:bd:52:94:ce:7b:c7:62:e2:0f:c8:a2:36:e3:a1:
         e4:34:28:30:0a:f2:f4:81:7d:dc:98:b8:6a:3f:8a:16:f4:dc:
         af:e7:48:fa:e5:d2:df:7a:c0:8b:f4:18:9a:f5:af:69:5e:0a:
         67:15:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:55 2026 by rpki-client