Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
File:                     YeHcZf1qxNvqavowAYEqsc6h248.mft (raw, json)
Hash identifier:          3s//ulk0NCulGPqXA99ybVcchT8qn+mBT1z51HZKwcs=
Subject key identifier:   B3:DE:E1:0D:76:29:B3:DE:A4:66:AF:89:D6:6A:62:C5:96:7C:E1:A5
Authority key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Certificate issuer:       /CN=A9119D72/serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
Manifest number:          1B
Signing time:             Thu 23 Jul 2026 11:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:57 +0000
Files and hashes:         1: YeHcZf1qxNvqavowAYEqsc6h248.crl (hash: JNzkSa6ALfRRhfEEY6nuT5p8bJTFNokunUUzfsioYCU=)
                          2: 26787AF65D6D11F1AC5A3C58BE833773.roa (hash: aAazDlvlst4QJf10A0nu+4NUqP8Vp7PTtF9Qpr/s7GM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
                          rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
        Validity
            Not Before: Jul 23 11:00:57 2026 GMT
            Not After : Jul 30 11:00:57 2026 GMT
        Subject: CN=6a61f469-1c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:d2:a3:ee:be:53:1b:e8:66:ee:0a:75:93:
                    22:62:27:48:03:07:c9:9c:56:44:c3:cc:21:ba:3a:
                    30:93:66:aa:85:a2:21:4b:26:dc:62:e8:0e:72:d9:
                    4c:f3:35:a0:dc:29:74:c4:c7:2d:24:8e:45:65:3c:
                    fe:09:05:4a:14:d2:32:b9:fd:75:7a:29:d3:7b:e3:
                    c7:38:14:49:7f:55:c5:61:1b:f4:77:7e:7f:18:3e:
                    89:ea:62:93:f8:e3:fe:41:ba:3d:c9:d0:b1:37:be:
                    f6:eb:0b:7f:de:4d:ce:23:e4:43:2f:dc:1e:eb:78:
                    d1:d8:a5:21:5e:bf:61:74:09:2b:7d:e7:78:34:d0:
                    bb:7e:92:91:91:a9:88:df:aa:45:54:8b:6d:58:4f:
                    92:0b:c6:cc:45:42:f2:ad:6a:38:54:8e:5a:f3:45:
                    ff:3b:e5:dd:7b:a6:25:97:90:9e:70:d2:b2:b8:52:
                    a7:a7:84:2d:b6:cc:76:20:96:52:0f:e2:82:1a:ea:
                    4b:af:fb:79:eb:16:38:1f:3e:c2:a7:66:60:6f:c2:
                    b5:6d:db:1f:0e:ee:f1:10:ab:91:c2:94:ac:2e:41:
                    e6:cf:2e:1d:91:2b:6e:2e:2e:f4:da:ed:4d:92:0a:
                    96:c2:db:8b:26:fb:e0:b6:f2:9f:05:08:6d:fa:93:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DE:E1:0D:76:29:B3:DE:A4:66:AF:89:D6:6A:62:C5:96:7C:E1:A5
            X509v3 Authority Key Identifier:
                keyid:61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:4c:3d:d3:06:e3:65:63:d8:dd:60:6d:f0:88:27:34:aa:
         23:3e:1c:72:d8:be:9c:02:dc:0d:bd:11:73:a9:1f:ac:14:7e:
         7d:a7:c1:a0:0d:16:7b:76:0b:de:b1:86:7d:da:9e:c5:07:3c:
         5f:3c:63:91:0b:00:6e:a3:47:69:b9:f9:45:21:3e:09:b0:54:
         31:5a:9b:64:eb:74:2e:05:11:c8:80:77:c6:38:bd:9c:06:12:
         76:85:56:57:16:12:dd:bb:44:06:92:c5:b9:ee:18:a5:e2:6d:
         4c:e4:bc:1a:a8:a8:ae:88:51:9d:0c:e2:29:34:a2:0b:7d:84:
         c0:78:f4:9d:41:be:4d:dd:76:3c:ce:b9:51:c2:40:ca:68:6f:
         e1:1c:cb:e9:25:b6:db:3b:72:21:64:11:72:e6:0b:eb:ae:f2:
         74:2d:6e:75:78:fe:90:92:1b:d2:1a:95:23:c6:64:0f:7a:9f:
         ae:c3:a1:9f:e0:04:82:3b:71:5d:26:e8:97:6e:6b:40:c8:a4:
         d9:a9:6e:f6:ac:15:91:2d:54:b3:de:5c:83:a9:f3:5a:70:ed:
         ae:72:27:0a:fd:33:41:8d:8b:b1:16:34:56:65:55:96:8a:79:
         57:a1:7b:4c:dc:53:63:92:a4:96:f8:38:e7:cf:62:2a:bc:d9:
         4e:bf:a9:92
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OUQ3MjExMC8GA1UEBRMoNjFFMURDNjVGRDZBQzREQkVBNkFGQTMwMDE4MTJBQjFD
RUExREI4RjAeFw0yNjA3MjMxMTAwNTdaFw0yNjA3MzAxMTAwNTdaMBgxFjAUBgNV
BAMTDTZhNjFmNDY5LTFjOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCU4dKj7r5TG+hm7gp1kyJiJ0gDB8mcVkTDzCG6OjCTZqqFoiFLJtxi6A5y2Uzz
NaDcKXTExy0kjkVlPP4JBUoU0jK5/XV6KdN748c4FEl/VcVhG/R3fn8YPonqYpP4
4/5Buj3J0LE3vvbrC3/eTc4j5EMv3B7reNHYpSFev2F0CSt953g00Lt+kpGRqYjf
qkVUi21YT5ILxsxFQvKtajhUjlrzRf875d17piWXkJ5w0rK4UqenhC22zHYgllIP
4oIa6kuv+3nrFjgfPsKnZmBvwrVt2x8O7vEQq5HClKwuQebPLh2RK24uLvTa7U2S
CpbC24sm++C28p8FCG36k38hAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUs97hDXYp
s96kZq+J1mpixZZ84aUwHwYDVR0jBBgwFoAUYeHcZf1qxNvqavowAYEqsc6h248w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5RDcyLzM2QTUzNDU2NUQ2
QzExRjE5MUI3MTY0REJFODMzNzczL1llSGNaZjFxeE52cWF2b3dBWUVxc2M2aDI0
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWWVIY1pmMXF4TnZxYXZvd0FZRXFzYzZoMjQ4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5
RDcyLzM2QTUzNDU2NUQ2QzExRjE5MUI3MTY0REJFODMzNzczL1llSGNaZjFxeE52
cWF2b3dBWUVxc2M2aDI0OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB680w90wbjZWPY3WBt8IgnNKojPhxy2L6cAtwNvRFzqR+sFH59p8GgDRZ7dgve
sYZ92p7FBzxfPGORCwBuo0dpuflFIT4JsFQxWptk63QuBRHIgHfGOL2cBhJ2hVZX
FhLdu0QGksW57hil4m1M5LwaqKiuiFGdDOIpNKILfYTAePSdQb5N3XY8zrlRwkDK
aG/hHMvpJbbbO3IhZBFy5gvrrvJ0LW51eP6QkhvSGpUjxmQPep+uw6Gf4ASCO3Fd
JuiXbmtAyKTZqW72rBWRLVSz3lyDqfNacO2ucicK/TNBjYuxFjRWZVWWinlXoXtM
3FNjkqSW+Djnz2IqvNlOv6mS
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:03:34 2026 by rpki-client