Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File:                     4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier:          5yc5Y/TfQ2WuWbk1gXiUACjbzv6XZ+Z7B0aeeyymFv8=
Subject key identifier:   51:BB:04:1A:44:66:1D:C1:97:98:C3:08:38:F5:C5:01:09:C2:E6:BF
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer:       /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial:       22B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number:          2287
Signing time:             Wed 22 Jul 2026 15:55:52 +0000
Manifest this update:     Wed 22 Jul 2026 15:55:51 +0000
Manifest next update:     Wed 29 Jul 2026 15:55:51 +0000
Files and hashes:         1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: G0deMWB15FaG1tin0NCUTtGOAgA1K0SPdbnvWB4sL/w=)
                          2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
                          3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
                          rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:55:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8880 (0x22b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
        Validity
            Not Before: Jul 22 15:55:51 2026 GMT
            Not After : Jul 29 15:55:51 2026 GMT
        Subject: CN=6a60e807-ecd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:dd:69:a9:d8:47:a2:df:0e:9d:28:72:15:
                    94:b6:c1:cb:f7:20:db:cf:ac:24:6d:ae:c0:4b:3a:
                    a7:69:11:4e:22:f4:d7:fb:b3:0b:a2:8f:69:08:58:
                    46:62:df:94:85:d7:9e:eb:63:ec:58:39:77:f6:85:
                    88:c7:4b:c8:c3:d6:5d:17:f6:e2:7a:bd:e8:9d:76:
                    00:ad:2e:fe:03:32:ed:4e:6d:0b:f7:af:94:f0:1a:
                    ae:a2:fc:d8:12:6f:4f:29:cc:c2:d2:b0:a2:09:06:
                    21:86:96:cb:82:b0:81:40:06:b4:ec:20:9e:08:cb:
                    41:0b:11:6d:1f:18:ad:c9:e2:e2:12:48:83:e4:83:
                    92:29:ac:92:b7:57:85:a2:a8:85:eb:0f:f7:1d:84:
                    87:56:22:49:5f:2a:e0:64:c1:74:70:e7:6a:be:66:
                    d5:eb:fd:e1:fc:39:12:68:42:1a:59:e8:cf:b8:89:
                    48:46:91:b4:9f:14:41:23:65:6e:33:9f:ad:7a:62:
                    c4:a3:e5:79:b3:1a:81:12:c3:d0:c7:93:6d:7d:29:
                    82:99:db:f1:f5:0c:79:71:ae:75:f5:0b:be:5f:50:
                    43:41:d7:cf:57:d0:9c:3c:c6:65:2a:b8:12:4b:38:
                    e8:f9:30:1e:8e:09:0d:a8:29:82:01:8e:88:56:e1:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:04:1A:44:66:1D:C1:97:98:C3:08:38:F5:C5:01:09:C2:E6:BF
            X509v3 Authority Key Identifier:
                keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:fe:1a:ee:9a:79:b6:43:39:c6:88:7a:81:a0:db:5a:f9:
         0c:f7:f0:85:09:c7:cb:ed:90:85:75:0d:30:a5:ee:fb:c4:f4:
         6c:01:5e:21:7e:79:72:f0:98:29:c8:ba:4c:63:3b:db:a6:b0:
         68:a9:d6:aa:b9:43:4e:17:81:d8:69:ad:0e:2e:33:84:fa:37:
         3c:bf:7d:55:17:e9:13:c8:7b:a7:06:30:3b:b2:24:93:42:7e:
         1b:fa:93:ee:da:28:42:39:a7:e3:97:2c:77:c2:59:64:6b:55:
         66:b2:83:73:36:6f:4b:51:2f:35:32:b7:bf:82:d8:c9:32:71:
         9a:25:22:43:af:31:46:5b:b7:8f:19:7d:7a:4b:05:09:36:5a:
         29:7a:f1:ba:cd:df:04:ed:65:f2:de:dd:ea:66:1e:59:7e:00:
         0a:3f:e7:45:66:ee:f3:85:f7:6e:aa:80:b2:26:62:03:6b:ac:
         1e:38:a4:8b:e0:54:3f:6f:3d:a6:6f:07:28:39:88:25:ec:81:
         e1:bd:4e:34:33:9c:a2:44:e0:b0:37:48:1d:ee:d1:9e:66:08:
         a0:fe:16:d8:4d:fd:7d:d6:c9:c8:99:b5:8d:1f:71:3d:c9:b5:
         7d:63:03:e4:42:ce:e5:15:12:36:84:7c:b0:80:4e:85:c7:d9:
         51:66:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:07 2026 by rpki-client