Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
File:                     Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft (raw, json)
Hash identifier:          R6JwQsWbKBox4RWTDhu4j4KOdoamW1B251GCC1eHgno=
Subject key identifier:   D7:E7:F1:FB:39:98:7E:BF:33:A3:99:37:AA:E3:34:8A:17:A7:2F:15
Authority key identifier: 62:EE:87:26:D6:7E:EA:44:20:1C:F9:13:90:11:1D:AB:6F:6F:BF:C3
Certificate issuer:       /CN=A91FF21A/serialNumber=62EE8726D67EEA44201CF91390111DAB6F6FBFC3
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
Manifest number:          1F
Signing time:             Wed 23 Sep 2026 08:39:20 +0000
Manifest this update:     Wed 23 Sep 2026 08:39:20 +0000
Manifest next update:     Wed 30 Sep 2026 08:39:20 +0000
Files and hashes:         1: Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl (hash: 1gkxgwMW88IcAGd1bIecSDQOLdsIw+6QXZHjnUQ8is4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl
                          rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF21A, serialNumber=62EE8726D67EEA44201CF91390111DAB6F6FBFC3
        Validity
            Not Before: Sep 23 08:39:20 2026 GMT
            Not After : Sep 30 08:39:20 2026 GMT
        Subject: CN=6ab39038-82d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:b2:4f:ab:d4:a1:d3:87:78:6e:b9:f0:b4:
                    ce:d0:1d:9b:36:06:39:ec:e0:36:90:8b:99:48:d0:
                    4f:e4:9d:c5:a2:6c:c6:d8:8f:d5:93:e6:b9:e5:9d:
                    ae:54:87:e3:ca:35:ea:72:d4:9a:b8:39:b1:4b:1d:
                    29:70:a7:37:fc:6c:4f:c3:15:ac:d7:d7:d6:d7:3a:
                    37:ab:fc:6a:b5:50:57:ff:74:bc:b5:1d:76:c7:00:
                    33:94:c6:5b:f2:f7:d6:f2:f1:a0:98:bc:c1:20:1d:
                    c2:c6:fa:73:f3:8c:38:d0:f5:1f:47:19:ab:5b:97:
                    57:ff:59:56:b6:64:18:6e:fa:4e:91:02:24:cc:ad:
                    dd:1e:7f:f8:86:be:86:b7:af:34:b5:9c:cd:65:c0:
                    91:6b:0f:21:7a:7d:38:0c:54:4f:b2:f9:e3:d4:7c:
                    20:1f:97:3e:09:22:8a:a3:7d:8b:ba:7d:6a:e7:07:
                    fc:39:cd:5b:62:64:a1:bb:20:19:89:03:bd:ed:37:
                    80:f4:c6:d6:24:22:69:50:cd:17:fb:53:50:ae:84:
                    04:f3:71:10:2d:bd:46:1c:9a:52:5d:7b:13:c4:e0:
                    12:80:16:9a:45:1e:11:38:6a:4d:b3:32:16:11:61:
                    36:a3:e6:c7:74:75:a0:db:20:36:10:ba:45:57:21:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:F1:FB:39:98:7E:BF:33:A3:99:37:AA:E3:34:8A:17:A7:2F:15
            X509v3 Authority Key Identifier:
                keyid:62:EE:87:26:D6:7E:EA:44:20:1C:F9:13:90:11:1D:AB:6F:6F:BF:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/83E27EE08BFC11F19AB15D553D11F970/Yu6HJtZ-6kQgHPkTkBEdq29vv8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:29:ae:57:0a:29:cd:e0:f4:98:63:98:93:3f:b4:3f:98:9e:
         85:80:d7:d1:36:f5:7e:89:94:ee:60:be:6e:e8:4a:03:2a:4d:
         00:3c:c8:8f:d7:d4:65:15:73:30:77:fd:a6:ac:9f:71:15:9b:
         76:fd:f3:01:73:1d:c7:46:71:a1:a8:9f:da:6a:4d:9e:c9:74:
         7e:64:54:93:98:3f:d0:48:84:f4:0c:4b:80:c3:7b:ac:dd:6f:
         39:25:d3:0d:bb:41:ea:d4:eb:60:38:7c:8e:d7:9f:10:ba:2e:
         2d:8b:99:ae:f8:dc:76:29:ce:4e:aa:7a:bb:74:f4:43:dc:0c:
         d8:36:5c:ba:24:57:43:fa:55:49:0a:d5:60:55:8a:37:e4:a7:
         9a:34:8a:31:48:f2:2f:e4:fc:0d:ac:e8:64:af:f1:c7:3f:f9:
         bc:f2:7c:ee:3f:8a:f8:46:f4:78:62:ec:9c:57:f0:b5:c2:84:
         2f:94:fc:40:32:28:03:52:31:68:49:0e:10:03:82:84:1a:dc:
         fa:52:e1:e6:82:38:56:b3:8f:a7:2a:03:66:cf:7d:d8:4f:ef:
         be:ee:db:b1:d5:a3:3c:0e:11:05:5c:eb:9c:68:3d:86:4c:91:
         05:db:d0:08:67:bc:1f:d7:9f:63:95:45:d4:9b:1f:a4:cd:f2:
         2b:5e:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:19:02 2026 by rpki-client