Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File:                     YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier:          ei57m5mP5Do3pjeJNa2N29HvXbm9nXCyA0b3eOYD2Lg=
Subject key identifier:   8D:08:08:B4:40:FA:91:BB:B7:37:25:AD:0A:9E:A7:8F:E1:22:5C:E2
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       07F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number:          07E0
Signing time:             Wed 22 Jul 2026 21:55:42 +0000
Manifest this update:     Wed 22 Jul 2026 21:55:41 +0000
Manifest next update:     Wed 29 Jul 2026 21:55:41 +0000
Files and hashes:         1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: EsnahbEsBuEdVT34vja/np9K/vzTqTUTjzAmvLlX81g=)
                          2: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: 6eb0nEsPYVrqJ2wcbhkcoiDXoGo8q5W0OLRrGCG5dLY=)
                          3: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: Crdi+zKRWevIXp0SsgooUD494qosGjHbDXZ9Zp1sgkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
                          rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
        Validity
            Not Before: Jul 22 21:55:41 2026 GMT
            Not After : Jul 29 21:55:41 2026 GMT
        Subject: CN=6a613c5d-f761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:ae:5d:e5:3c:ad:76:8b:cc:62:cf:6d:eb:
                    06:43:a1:2c:b9:1f:35:1f:3b:f1:77:ea:23:8f:19:
                    05:b1:2d:79:4d:77:d7:4c:e9:3e:f1:92:fd:0b:a7:
                    68:73:52:f0:30:f1:00:8f:62:c0:51:1c:ed:36:a6:
                    be:cd:92:34:2c:84:86:8b:f9:9f:69:f0:26:d9:c9:
                    cf:b3:00:fc:af:d8:db:2c:96:d2:4e:c9:93:90:be:
                    0a:ac:5a:7a:d3:0d:f5:5b:de:5c:77:af:7a:02:84:
                    b8:ac:5d:c9:3f:57:29:e0:44:fa:84:d9:44:07:8f:
                    7d:91:f8:f1:18:72:0d:a7:77:54:ac:bf:c7:ee:92:
                    02:fd:6d:5c:7b:03:71:ef:cf:fa:0f:d9:1a:b0:15:
                    49:f4:3b:8f:d5:b2:d7:68:b9:9c:46:79:5a:4f:60:
                    b3:17:bb:8c:c2:76:6d:bf:b8:a1:08:74:cf:e6:0e:
                    09:8d:a2:3f:70:9a:ab:3f:b0:a8:06:ff:61:d0:2a:
                    12:60:b8:a8:51:70:e0:c6:ea:ad:b3:8e:b1:7e:6a:
                    a3:bd:dc:a8:aa:01:97:da:58:eb:a3:7d:ca:2c:48:
                    9b:48:ce:61:6c:b6:4c:5c:ab:24:0c:f6:d3:2b:ba:
                    af:56:6f:29:47:83:fa:21:aa:3a:73:aa:fc:86:b5:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:08:B4:40:FA:91:BB:B7:37:25:AD:0A:9E:A7:8F:E1:22:5C:E2
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:df:90:a0:d3:99:82:4d:4e:11:2a:b6:94:d4:67:00:c0:ff:
         53:a4:39:cb:47:50:6f:15:79:c9:ab:b6:6c:07:31:3c:93:ca:
         3b:59:95:ac:25:4b:78:56:82:42:44:59:2a:5d:54:aa:f0:70:
         c0:b8:f7:6e:bd:e1:a0:41:e0:12:87:f6:ca:96:d6:6c:b7:83:
         87:e1:ac:2d:ef:80:f6:b7:b8:a8:0b:fa:16:f1:ab:7e:72:cd:
         9d:37:51:a2:a3:90:0c:33:ad:8b:d4:53:4c:42:b3:50:4e:14:
         bc:40:75:8f:29:22:c8:9b:fc:0e:b0:db:10:eb:7b:74:dc:6d:
         d7:80:07:cd:95:dd:d9:70:69:75:73:3d:e6:fa:07:92:2b:ad:
         21:1e:85:83:37:60:e1:3d:1c:ac:31:8c:16:ac:aa:4d:f3:3e:
         ad:8f:c6:c0:5d:dd:a0:c0:3b:d1:24:22:2e:35:95:f0:79:50:
         46:9a:8f:2f:35:ec:5b:68:98:dc:8f:61:a3:1b:68:bc:92:84:
         3e:34:81:1c:5e:1f:9a:3f:00:2a:5e:16:49:fa:8d:38:7a:d1:
         68:97:4c:29:fd:28:be:aa:19:08:26:6f:f2:41:fc:27:31:20:
         1a:54:a9:a0:d3:b6:2d:13:e3:b4:cb:1b:bc:c2:9c:68:b0:31:
         ab:f2:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:39 2026 by rpki-client