Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
File:                     yl3F7VK2QLF0vjjiadTEniVnTxc.mft (raw, json)
Hash identifier:          KZ3NnajAKQkzu79rjBEcuUGqmu2mTRMEvOhMHpKi5RE=
Subject key identifier:   E4:CA:3C:D9:DA:76:4E:83:FB:FA:EC:99:7E:8C:EB:F6:D7:63:38:51
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Certificate issuer:       /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
Manifest number:          25
Signing time:             Thu 23 Jul 2026 10:54:18 +0000
Manifest this update:     Thu 23 Jul 2026 10:54:18 +0000
Manifest next update:     Thu 30 Jul 2026 10:54:18 +0000
Files and hashes:         1: yl3F7VK2QLF0vjjiadTEniVnTxc.crl (hash: ZybF2o2ve3fRfwk/PR3QLMRUNj9J+9aA/qNwq9BHnCQ=)
                          2: 76FA27AE4E0E11F190083CE1CC833773.roa (hash: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
                          rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
        Validity
            Not Before: Jul 23 10:54:18 2026 GMT
            Not After : Jul 30 10:54:18 2026 GMT
        Subject: CN=6a61f2da-d9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ee:6f:7c:1f:7f:6a:3d:81:b1:5a:ae:80:69:
                    f2:bc:80:54:d3:0b:58:2f:d0:42:c9:79:33:3e:a4:
                    fe:50:a0:c9:45:36:85:b2:a6:d7:bd:5a:cb:a0:62:
                    62:fe:72:5e:23:90:44:dd:f7:df:52:4d:fc:7c:f0:
                    90:f4:16:97:89:90:be:92:26:50:17:d1:e2:d2:49:
                    5b:ce:ac:30:67:e9:47:a9:55:7b:f3:1c:b7:76:0a:
                    9e:38:99:5f:b4:43:f2:55:c6:d1:02:78:19:7e:85:
                    80:1e:ab:0c:c3:71:16:b4:1e:e3:c9:0e:64:2b:78:
                    aa:79:b2:6b:93:0d:9d:40:8d:cd:fd:35:97:f2:dd:
                    af:bf:c0:28:38:6b:28:4b:0f:66:02:c9:06:8b:49:
                    a0:4e:1e:aa:9d:2e:73:aa:f2:cd:de:7e:dd:95:37:
                    e8:bb:bc:de:9c:4e:c0:bc:6a:db:65:34:00:56:cf:
                    61:6a:cb:ea:b7:98:3e:b4:cf:80:f9:81:c2:4c:29:
                    94:e5:f0:ff:55:54:b7:fc:21:a7:78:4b:92:7c:c5:
                    a6:fc:5b:07:a1:b7:c9:18:69:e3:5b:e6:7d:8f:44:
                    b2:1d:26:e0:ff:06:b2:56:39:ff:91:7d:79:bf:6b:
                    33:d2:ee:05:be:ca:b2:8e:48:4f:92:0a:74:83:08:
                    c9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CA:3C:D9:DA:76:4E:83:FB:FA:EC:99:7E:8C:EB:F6:D7:63:38:51
            X509v3 Authority Key Identifier:
                keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:02:1e:a9:a8:db:dd:35:75:0d:a7:50:ad:49:2f:62:5c:d3:
         fd:e8:a7:05:4e:d3:de:2f:42:24:ec:b5:82:9d:07:c6:c0:0a:
         8f:87:17:14:6a:34:38:cd:a9:29:7b:13:fd:9e:22:87:ea:99:
         ea:9b:84:46:1f:de:b2:ef:ab:fb:2a:8c:6c:f8:79:7b:1c:e5:
         ff:d7:ae:dc:6d:ba:15:20:48:d4:3f:52:80:a0:a7:9a:e3:e1:
         07:2b:61:e7:67:e1:80:29:3a:6d:b0:b9:a5:20:3c:c9:2e:43:
         53:7d:16:eb:34:80:ab:c5:53:fb:e7:74:3f:2e:71:97:eb:15:
         53:a1:7d:cc:62:dc:42:ec:e7:e2:4c:d8:5e:9f:cc:73:d9:29:
         53:75:60:d1:d4:3e:d9:25:97:8d:33:45:9a:a3:08:38:2e:87:
         35:f9:e5:7c:f0:b5:06:ed:6d:95:84:94:8d:37:ac:25:49:cf:
         a7:16:4d:06:00:06:3f:80:64:8d:26:d9:c7:75:72:0a:cd:5e:
         cc:36:0e:47:51:c5:54:48:ec:3d:6e:8f:d9:63:a1:11:26:c4:
         36:b5:6c:40:26:9d:44:8b:03:9e:fd:6f:ca:7b:51:a9:41:30:
         2c:1e:20:05:20:a8:c5:94:6c:bc:76:e1:9d:fe:0d:55:a6:48:
         52:0a:59:da
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
NzY4NzExMC8GA1UEBRMoQ0E1REM1RUQ1MkI2NDBCMTc0QkUzOEUyNjlENEM0OUUy
NTY3NEYxNzAeFw0yNjA3MjMxMDU0MThaFw0yNjA3MzAxMDU0MThaMBgxFjAUBgNV
BAMTDTZhNjFmMmRhLWQ5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDR7m98H39qPYGxWq6AafK8gFTTC1gv0ELJeTM+pP5QoMlFNoWypte9WsugYmL+
cl4jkETd999STfx88JD0FpeJkL6SJlAX0eLSSVvOrDBn6UepVXvzHLd2Cp44mV+0
Q/JVxtECeBl+hYAeqwzDcRa0HuPJDmQreKp5smuTDZ1Ajc39NZfy3a+/wCg4ayhL
D2YCyQaLSaBOHqqdLnOq8s3eft2VN+i7vN6cTsC8attlNABWz2Fqy+q3mD60z4D5
gcJMKZTl8P9VVLf8Iad4S5J8xab8Wweht8kYaeNb5n2PRLIdJuD/BrJWOf+RfXm/
azPS7gW+yrKOSE+SCnSDCMmTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5Mo82dp2
ToP7+uyZfozr9tdjOFEwHwYDVR0jBBgwFoAUyl3F7VK2QLF0vjjiadTEniVnTxcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3Njg3LzE5NzU4ODNBNEUw
RTExRjE5OTU5RjhCQkNCODMzNzczL3lsM0Y3VksyUUxGMHZqamlhZFRFbmlWblR4
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveWwzRjdWSzJRTEYwdmpqaWFkVEVuaVZuVHhjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
Njg3LzE5NzU4ODNBNEUwRTExRjE5OTU5RjhCQkNCODMzNzczL3lsM0Y3VksyUUxG
MHZqamlhZFRFbmlWblR4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBZAh6pqNvdNXUNp1CtSS9iXNP96KcFTtPeL0Ik7LWCnQfGwAqPhxcUajQ4zakp
exP9niKH6pnqm4RGH96y76v7Koxs+Hl7HOX/167cbboVIEjUP1KAoKea4+EHK2Hn
Z+GAKTptsLmlIDzJLkNTfRbrNICrxVP753Q/LnGX6xVToX3MYtxC7OfiTNhen8xz
2SlTdWDR1D7ZJZeNM0Waowg4Loc1+eV88LUG7W2VhJSNN6wlSc+nFk0GAAY/gGSN
JtnHdXIKzV7MNg5HUcVUSOw9bo/ZY6ERJsQ2tWxAJp1EiwOe/W/Ke1GpQTAsHiAF
IKjFlGy8duGd/g1VpkhSClna
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:30 2026 by rpki-client