Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File:                     Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier:          zJztIje2naHqTjW85cWIw+UD+E8IKUDGTqNphuv/jvU=
Subject key identifier:   0A:48:55:06:BC:F2:EF:1D:92:21:97:AE:5C:50:23:8F:8A:94:A5:18
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer:       /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number:          49
Signing time:             Thu 23 Jul 2026 10:21:46 +0000
Manifest this update:     Thu 23 Jul 2026 10:21:46 +0000
Manifest next update:     Thu 30 Jul 2026 10:21:46 +0000
Files and hashes:         1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: Y/+3Mx7cbFZekoTF94TzDxrKgCySm+uxcT3LeZTT6DY=)
                          2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
                          rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
        Validity
            Not Before: Jul 23 10:21:46 2026 GMT
            Not After : Jul 30 10:21:46 2026 GMT
        Subject: CN=6a61eb3a-01f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:04:11:01:65:d7:6d:4a:7a:2f:9a:72:87:44:
                    cd:16:e4:29:c8:19:ff:4f:a2:9e:39:c3:1b:ae:1a:
                    2f:ef:86:ff:28:00:0e:bf:e7:11:db:36:23:71:b0:
                    c8:dd:f3:c7:e2:dc:3c:d7:18:81:f8:b9:b3:e0:e4:
                    07:44:be:52:6b:23:a7:81:e7:69:3b:4a:07:3d:c7:
                    5f:7f:c2:c9:58:22:a2:6a:48:6b:a9:48:f9:1b:99:
                    0b:52:84:7b:72:64:2c:51:4f:33:50:f8:1b:78:78:
                    55:ea:d6:a5:81:1e:53:09:3a:13:4f:5d:cb:84:48:
                    2f:00:47:30:f3:84:0e:d0:75:14:73:10:6e:16:66:
                    b0:f9:76:56:d8:21:96:f3:49:93:1b:36:6e:b9:bc:
                    3c:ef:4f:38:5a:20:cb:10:63:45:f9:38:64:7a:94:
                    99:53:dd:5d:02:74:f7:b5:18:a7:87:96:d9:fc:50:
                    dc:c0:18:af:13:62:99:8f:18:7a:fe:03:e3:46:d3:
                    96:7b:cc:ed:2d:d5:0c:6a:e1:38:e1:31:ba:c0:d7:
                    5d:57:6c:d5:e5:ae:1e:be:a4:0a:db:c3:e5:45:a9:
                    bd:f0:bd:94:e3:ae:9c:23:19:65:cf:fd:a9:59:5f:
                    53:c0:af:f8:65:92:61:50:aa:44:6d:91:7c:85:ba:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:55:06:BC:F2:EF:1D:92:21:97:AE:5C:50:23:8F:8A:94:A5:18
            X509v3 Authority Key Identifier:
                keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:55:a3:93:73:01:a5:1b:69:49:b2:81:70:55:4c:41:ad:
         6e:3f:de:84:25:9a:b1:5f:15:a3:77:b4:67:b0:e3:dd:d8:ef:
         ba:32:e9:c8:72:14:5a:8b:2e:bb:78:19:d0:83:80:aa:f8:46:
         d7:c0:71:42:a0:4a:e9:d5:b6:11:19:4f:eb:68:51:04:05:59:
         60:cc:4a:b1:81:5d:35:65:55:44:1e:ef:b7:42:83:ff:af:ad:
         96:dd:67:13:b2:cd:f9:b7:15:d5:31:d4:14:18:ac:53:09:6a:
         2d:fc:22:2b:08:e3:0b:47:61:79:ac:94:91:03:4e:5a:c4:de:
         b8:5c:4d:56:e0:fc:d0:b4:10:fe:b3:f2:b0:c1:dd:91:29:1b:
         7c:19:a8:32:08:ae:50:31:40:e1:69:9e:3e:f6:1b:01:dc:c9:
         0f:a7:a9:48:56:77:7d:3d:3c:93:0e:75:51:28:0d:2d:58:2f:
         8e:c9:9b:9f:02:e4:58:ba:66:2a:d7:05:2d:79:e8:78:67:18:
         c4:df:33:35:45:fa:4c:85:72:54:00:14:bd:ad:bb:b5:c1:90:
         6d:ca:9d:cf:1a:79:71:b7:f7:67:d0:d2:a5:c0:f8:1e:93:fb:
         9c:e0:33:f2:07:2c:80:de:b4:68:dc:f4:8f:a6:89:e4:a7:be:
         9d:06:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:18:59 2026 by rpki-client