Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          aXCKHcxlEO9ltYrc2vF7YaPOFrZRWU5uhMXmYdbGKQQ=
Subject key identifier:   AF:42:4F:C6:19:63:2B:65:9A:FE:2D:8D:BB:69:2D:9C:18:22:A9:9B
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3562
Signing time:             Fri 24 Jul 2026 14:59:44 +0000
Manifest this update:     Fri 24 Jul 2026 14:59:43 +0000
Manifest next update:     Fri 31 Jul 2026 14:59:43 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: 0aBi29nBPXNTfosOnyDIstOWCmzuExSEZIlvbuIRcXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 14:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13666 (0x3562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Jul 24 14:59:43 2026 GMT
            Not After : Jul 31 14:59:43 2026 GMT
        Subject: CN=6a637de0-fb1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:d5:9f:a5:6d:59:30:c4:d2:be:32:9f:7a:
                    a0:d3:79:ef:3d:1a:ae:76:9f:a7:ad:2a:c3:cd:5b:
                    56:53:6c:89:6d:66:09:e0:0a:9b:1d:6e:4f:88:bd:
                    c3:5f:0c:33:76:2d:aa:e9:6a:37:fc:bc:3f:0f:ec:
                    67:9b:3e:f4:35:88:2e:1d:f6:9f:74:04:3d:8d:c1:
                    f4:1f:5f:54:09:35:e0:4a:b0:2e:48:e7:db:8c:32:
                    db:1b:50:b0:7f:47:62:c3:7d:48:b4:f6:3e:74:17:
                    0d:dc:ff:75:f9:4e:54:6c:dd:98:2b:61:8a:a7:6b:
                    50:5c:98:14:e1:4d:9d:a7:17:d0:41:20:13:96:8a:
                    f4:fe:00:bc:f3:d2:25:8e:06:72:35:a2:82:f4:c9:
                    5a:15:e9:b4:70:05:45:e3:7b:d1:e7:1d:18:44:36:
                    0e:04:a3:8b:c7:71:5b:ec:2e:65:36:2e:a5:6c:0a:
                    a8:29:af:43:2f:ac:0f:24:1a:07:8d:86:99:48:85:
                    71:76:d4:dd:92:7c:b1:70:9a:4e:37:48:a3:0e:67:
                    c9:29:0d:13:54:d8:4b:fc:e5:d1:5a:e0:73:08:7e:
                    ad:ff:15:89:ce:59:9f:40:ea:c9:5c:76:68:5b:d7:
                    a4:36:75:05:59:8e:c4:0a:40:91:e1:24:34:5a:e2:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:42:4F:C6:19:63:2B:65:9A:FE:2D:8D:BB:69:2D:9C:18:22:A9:9B
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a4:f1:1e:fe:7d:1e:07:ed:7d:94:9a:b3:95:92:24:3a:c2:
         84:19:e0:10:10:8a:78:1d:7d:b3:77:88:2c:a6:9d:5e:9a:87:
         21:44:65:52:2a:9b:95:c8:42:97:34:52:6b:66:9a:c7:a7:f5:
         8c:43:be:8a:41:25:44:1b:c9:74:8c:39:f4:06:49:c4:79:9b:
         b0:ea:29:a3:b1:6a:5e:7f:86:5b:1f:1b:05:49:04:a6:77:96:
         27:2d:6f:b4:78:e7:98:b1:2d:5a:e4:c3:45:ec:09:77:fc:a2:
         a4:df:d6:d9:6f:67:7f:61:23:5a:a4:9b:ef:86:0f:be:68:ea:
         a5:bf:ff:b0:2c:e6:b1:98:40:7e:6f:e6:f0:4d:4d:d2:f0:7a:
         9c:6b:72:3b:74:48:ba:21:b6:18:9a:a4:93:5d:ed:3b:fe:c2:
         ee:0c:78:8d:82:12:9f:8c:f5:83:13:6c:83:7c:94:d9:b3:2d:
         4a:d1:16:84:8e:12:41:0d:96:4a:31:45:03:d6:3e:a7:08:3c:
         64:0c:35:b0:c7:54:01:67:64:f3:56:0c:96:77:51:30:f3:44:
         1e:7e:b0:41:ae:79:f7:5d:00:ff:6a:d7:92:8b:d0:30:e6:58:
         d4:dd:23:93:a3:1c:eb:0e:0e:b3:5b:ec:f6:2d:b1:a1:87:53:
         4d:ec:6e:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjA5NjgxMTAvBgNVBAUTKENBRTJDRkIxQTc5NzRBRDZCMDI0NUFFMzRFNEIwRENF
RDgyMDk4NjcwHhcNMjYwNzI0MTQ1OTQzWhcNMjYwNzMxMTQ1OTQzWjAYMRYwFAYD
VQQDEw02YTYzN2RlMC1mYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/DVn6VtWTDE0r4yn3qg03nvPRqudp+nrSrDzVtWU2yJbWYJ4AqbHW5PiL3D
Xwwzdi2q6Wo3/Lw/D+xnmz70NYguHfafdAQ9jcH0H19UCTXgSrAuSOfbjDLbG1Cw
f0diw31ItPY+dBcN3P91+U5UbN2YK2GKp2tQXJgU4U2dpxfQQSATlor0/gC889Il
jgZyNaKC9MlaFem0cAVF43vR5x0YRDYOBKOLx3Fb7C5lNi6lbAqoKa9DL6wPJBoH
jYaZSIVxdtTdknyxcJpON0ijDmfJKQ0TVNhL/OXRWuBzCH6t/xWJzlmfQOrJXHZo
W9ekNnUFWY7ECkCR4SQ0WuLwiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9CT8YZ
Yytlmv4tjbtpLZwYIqmbMB8GA1UdIwQYMBaAFMriz7Gnl0rWsCRa405LDc7YIJhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2OC8wOEVDRUU0ODFE
OUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0YXdKRnJqVGtzTnp0Z2dt
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l1TFBzYWVYU3Rhd0pGcmpUa3NOenRnZ21HYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk2OC8wOEVDRUU0ODFEOUIxMUUyQUY5NkE4ODgwOEIwMkNEMi95dUxQc2FlWFN0
YXdKRnJqVGtzTnp0Z2dtR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB6TxHv59HgftfZSas5WSJDrChBngEBCKeB19s3eILKadXpqHIURlUiqblchC
lzRSa2aax6f1jEO+ikElRBvJdIw59AZJxHmbsOopo7FqXn+GWx8bBUkEpneWJy1v
tHjnmLEtWuTDRewJd/yipN/W2W9nf2EjWqSb74YPvmjqpb//sCzmsZhAfm/m8E1N
0vB6nGtyO3RIuiG2GJqkk13tO/7C7gx4jYISn4z1gxNsg3yU2bMtStEWhI4SQQ2W
SjFFA9Y+pwg8ZAw1sMdUAWdk81YMlndRMPNEHn6wQa55910A/2rXkovQMOZY1N0j
k6Mc6w4Os1vs9i2xoYdTTexupA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:25 2026 by rpki-client