Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          nbThMOHyAoSstK0z55A35AHrQ4InaeafTGxU/pTJ8EQ=
Subject key identifier:   4E:F7:86:A8:70:48:1F:CB:3B:01:CE:39:8B:4F:1C:1F:FA:2D:BE:9F
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          EC
Signing time:             Thu 23 Jul 2026 08:10:56 +0000
Manifest this update:     Thu 23 Jul 2026 08:10:56 +0000
Manifest next update:     Thu 30 Jul 2026 08:10:56 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: lp3s5OPabZ52llfNMCn+zcbFFOwMKGLW2ULA7gGqSvY=)
                          2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
                          3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Jul 23 08:10:56 2026 GMT
            Not After : Jul 30 08:10:56 2026 GMT
        Subject: CN=6a61cc90-cd6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:b8:32:aa:e8:61:1a:af:10:fa:74:6e:5d:
                    52:62:09:b7:ac:82:f1:2f:60:37:45:03:1b:aa:dc:
                    7c:81:ce:0b:80:b0:36:d1:79:b2:51:8a:1d:45:fc:
                    ef:cb:3e:0c:46:7e:30:4f:8f:13:4a:5e:22:e7:87:
                    ba:f3:ab:24:16:6e:ac:03:e9:37:51:e4:e2:9e:20:
                    14:d8:78:7f:96:19:e4:2b:7a:c4:4e:03:eb:11:e0:
                    e6:73:a2:06:08:c4:63:99:df:df:61:df:5e:75:23:
                    e5:c9:04:03:4d:04:77:81:1e:e6:37:10:23:d9:91:
                    58:e0:d2:dc:97:f5:81:32:93:b1:d3:72:9f:9b:3d:
                    da:b8:49:8a:ad:f4:ee:17:3a:86:15:64:8e:15:fc:
                    19:a7:20:43:ea:04:2d:70:f9:ce:ab:8b:c0:27:1e:
                    5d:1b:66:09:48:16:f7:ed:59:f4:e7:c8:67:15:cb:
                    4f:49:59:5a:b2:f2:ae:e5:5c:04:63:d2:b1:cd:bb:
                    6e:9b:65:fb:af:e2:ee:c3:82:5d:13:82:9d:ac:c5:
                    44:0e:0e:64:f2:de:b9:8b:22:4f:1e:10:88:98:86:
                    6e:07:7e:bf:ad:1d:f4:69:d0:e6:d0:28:d7:db:07:
                    24:8a:6f:ef:97:e6:c3:3b:58:10:8b:ea:da:94:1a:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F7:86:A8:70:48:1F:CB:3B:01:CE:39:8B:4F:1C:1F:FA:2D:BE:9F
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a8:a1:58:0f:97:1a:9a:91:55:b5:9f:f7:11:e4:53:d3:7c:
         2e:34:8d:ad:bb:67:5b:a5:23:17:ef:89:0e:5b:7f:a2:b9:ac:
         b7:3e:f8:c4:42:61:31:8d:49:8d:2a:5c:0e:ec:c6:cb:a6:70:
         12:3f:1d:f0:1f:59:93:68:5c:18:5e:ac:63:a9:e6:7e:d7:06:
         cb:16:20:c0:92:95:06:70:6d:19:b5:ed:60:15:ab:18:a6:17:
         9d:35:8e:cf:27:3f:56:db:d4:bb:68:0d:51:76:fb:bd:b1:7d:
         31:96:a1:16:4b:6f:cb:77:52:31:f8:3b:f3:9e:01:36:34:91:
         ea:77:fd:f3:44:53:75:bd:e5:b8:26:e8:c2:80:e0:7a:82:2c:
         c0:08:d1:22:cc:0e:a7:60:1b:95:19:97:be:ef:e5:c5:b1:a0:
         77:1f:9c:b3:22:a3:cd:f2:b1:8b:c0:ee:6f:69:0b:b0:f1:7c:
         80:96:a3:3a:f4:7a:9a:4d:4d:23:22:a2:f5:6a:a1:bb:41:f7:
         bf:be:b0:3e:e2:7f:4c:fb:2f:85:d1:43:80:1b:1c:82:5f:e3:
         c4:03:c8:2d:1b:e7:4b:ff:4a:92:4e:33:f9:6c:80:25:47:90:
         af:85:03:9d:bd:57:b2:a4:94:80:85:b4:5a:56:6e:5a:69:60:
         e0:d4:97:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:01:33 2026 by rpki-client