Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
File:                     ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json)
Hash identifier:          vTUid/RLPKjn+qAHFyp7J0HdP4RMLy5yT8KOl/YQhYc=
Subject key identifier:   15:65:F7:8F:60:06:CA:85:5D:6D:8E:A5:21:6C:F5:20:67:58:0E:FB
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Certificate issuer:       /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
Manifest number:          0122
Signing time:             Thu 23 Jul 2026 07:27:13 +0000
Manifest this update:     Thu 23 Jul 2026 07:27:13 +0000
Manifest next update:     Thu 30 Jul 2026 07:27:13 +0000
Files and hashes:         1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: rkfil//c5cF+ceMfXgzVPKUjBRCr/jtWVXfNbn6ROCQ=)
                          2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: D7h1gktg5+5yyaBrNhzNSFMs7boyS9O5+bm+qSSzUdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
        Validity
            Not Before: Jul 23 07:27:13 2026 GMT
            Not After : Jul 30 07:27:13 2026 GMT
        Subject: CN=6a61c251-b631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:af:52:61:c5:85:5b:e6:96:40:4e:69:93:
                    4b:91:c5:73:a2:31:57:0f:d9:b3:74:c4:c9:d6:4e:
                    4d:2c:38:14:5d:ad:26:db:38:8c:b8:fd:40:cb:93:
                    e4:7e:75:db:46:e6:fc:d6:c6:cd:fc:d6:db:ef:d9:
                    73:e1:9b:b5:3a:d2:0a:88:27:d8:b8:3e:3a:d5:33:
                    ef:35:7f:1d:75:53:4a:6a:e2:79:2f:95:16:1e:dd:
                    f8:10:cc:86:27:b3:a6:5f:97:34:f4:45:d1:18:57:
                    73:64:52:a4:2b:8c:9f:5b:ca:ad:fe:d6:f0:0d:79:
                    fd:ba:21:f4:68:f0:e4:e6:f2:c5:ff:32:e5:21:83:
                    8b:b7:94:a3:0f:4a:7b:bb:23:9d:99:95:6d:57:75:
                    49:1d:37:17:9d:e0:01:5e:a3:20:1d:2d:fd:4a:f2:
                    68:7a:c5:11:ac:2b:96:00:23:5e:28:f1:72:0b:e8:
                    06:12:b0:a5:17:38:b6:1c:90:ce:e6:a7:60:58:3c:
                    db:fa:99:10:4c:05:87:92:4c:15:24:3b:bf:a1:93:
                    8d:2a:25:e4:b8:c9:6b:0b:b9:56:fa:d0:ec:ae:c1:
                    10:08:76:23:ce:f2:c0:e4:01:5f:03:d1:23:65:14:
                    18:08:83:c4:db:e0:b7:72:22:bd:b8:71:a8:10:f8:
                    0f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:F7:8F:60:06:CA:85:5D:6D:8E:A5:21:6C:F5:20:67:58:0E:FB
            X509v3 Authority Key Identifier:
                keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:c5:c2:fa:24:a4:12:33:e4:ce:3f:d4:03:d8:5a:2a:93:
         b2:75:e5:97:75:61:5c:c7:bc:4e:fc:a0:ec:a1:a5:56:fc:69:
         3e:d5:79:05:a4:ee:82:75:cb:4f:81:0b:92:b8:4b:a8:4c:cb:
         7d:21:8c:fc:c9:23:23:58:dd:52:40:69:67:9c:19:81:4e:64:
         fe:94:83:20:64:38:2f:66:65:d1:29:36:4c:0e:ce:3d:c7:43:
         8e:39:fb:a6:6d:c3:a3:a2:ad:80:59:18:07:ed:72:66:c2:5e:
         a5:21:04:b0:14:cd:c5:8e:f6:d1:e0:7a:6f:01:cb:4a:41:ca:
         47:70:f8:a9:30:fe:ae:7a:1a:b6:1b:bb:51:fc:27:62:78:17:
         ed:ea:08:8d:94:a5:fd:a0:ef:a9:e2:9b:47:c7:28:db:52:ad:
         6d:c9:39:73:fe:d1:c3:55:55:9f:2f:00:0d:12:4b:a6:a2:d0:
         f5:a6:8b:a1:b7:bb:34:78:9a:40:3d:5a:fc:9d:22:c6:9d:ee:
         40:0e:11:95:45:45:d5:f0:15:94:70:49:86:15:8f:d9:18:c7:
         a2:cb:5a:fb:5e:8a:60:79:e6:ea:40:6d:cd:0f:5f:73:55:e7:
         12:c4:dc:1d:83:c1:a6:c2:38:bf:23:df:2c:23:5a:c0:16:fc:
         cc:a7:bd:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkJEOEUxMTAvBgNVBAUTKENBNTczRjA5MDBCRjY0MkNCMUUwM0EzQjZDNDVDNjk2
OUU3NzIzRDgwHhcNMjYwNzIzMDcyNzEzWhcNMjYwNzMwMDcyNzEzWjAYMRYwFAYD
VQQDEw02YTYxYzI1MS1iNjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtkmvUmHFhVvmlkBOaZNLkcVzojFXD9mzdMTJ1k5NLDgUXa0m2ziMuP1Ay5Pk
fnXbRub81sbN/Nbb79lz4Zu1OtIKiCfYuD461TPvNX8ddVNKauJ5L5UWHt34EMyG
J7OmX5c09EXRGFdzZFKkK4yfW8qt/tbwDXn9uiH0aPDk5vLF/zLlIYOLt5SjD0p7
uyOdmZVtV3VJHTcXneABXqMgHS39SvJoesURrCuWACNeKPFyC+gGErClFzi2HJDO
5qdgWDzb+pkQTAWHkkwVJDu/oZONKiXkuMlrC7lW+tDsrsEQCHYjzvLA5AFfA9Ej
ZRQYCIPE2+C3ciK9uHGoEPgPjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVl949g
BsqFXW2OpSFs9SBnWA77MB8GA1UdIwQYMBaAFMpXPwkAv2QsseA6O2xFxpaedyPY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkQ4RS80M0Q5MTk3Q0NF
ODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pDeXg0RG83YkVYR2xwNTNJ
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lsY19DUUNfWkN5eDREbzdiRVhHbHA1M0k5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QkQ4RS80M0Q5MTk3Q0NFODgxMUVGODdDMDcxMTdDNEY5QUUwMi95bGNfQ1FDX1pD
eXg0RG83YkVYR2xwNTNJOWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE/PFwvokpBIz5M4/1APYWiqTsnXll3VhXMe8Tvyg7KGlVvxpPtV5BaTugnXL
T4ELkrhLqEzLfSGM/MkjI1jdUkBpZ5wZgU5k/pSDIGQ4L2Zl0Sk2TA7OPcdDjjn7
pm3Do6KtgFkYB+1yZsJepSEEsBTNxY720eB6bwHLSkHKR3D4qTD+rnoathu7Ufwn
YngX7eoIjZSl/aDvqeKbR8co21Ktbck5c/7Rw1VVny8ADRJLpqLQ9aaLobe7NHia
QD1a/J0ixp3uQA4RlUVF1fAVlHBJhhWP2RjHosta+16KYHnm6kBtzQ9fc1XnEsTc
HYPBpsI4vyPfLCNawBb8zKe9fQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:15 2026 by rpki-client