Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File:                     yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier:          RPRdEvua5uh5jpbFmQ1s5B0Rzx2mXMvFsY9yDt/okHc=
Subject key identifier:   F9:0F:67:90:1D:74:FC:14:C8:76:FC:3C:07:B7:E9:55:0A:3D:B7:95
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       1646
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number:          1615
Signing time:             Wed 22 Jul 2026 16:49:15 +0000
Manifest this update:     Wed 22 Jul 2026 16:49:15 +0000
Manifest next update:     Wed 29 Jul 2026 16:49:15 +0000
Files and hashes:         1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: MZMJBQRQtzCFi1NLhWXkr7K9/spV6WnS4Fr+gUQDn3Y=)
                          2: C6EC9794487611F1BB18259CA9833773.roa (hash: uGrQMABcpDblMXvOGQEAZzr9X1BUnAS5sR63BxjFBqg=)
                          3: 0A668418C9EB11F091DA0157C4F9AE02.roa (hash: B6XAGeoWJ7gHsK/A3cgf58EH7svezuHZq4znOTQReaI=)
                          4: AEDD46DA487611F19FF1A884A9833773.roa (hash: FgMrKWrpn+GpJXgcQDWpUtszqF8ntn4M2Lt8jWP8WSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
                          rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5702 (0x1646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: Jul 22 16:49:15 2026 GMT
            Not After : Jul 29 16:49:15 2026 GMT
        Subject: CN=6a60f48b-65e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:5a:57:bc:cf:70:95:da:9f:dc:71:ad:8e:
                    2a:27:34:01:27:80:4b:dc:10:54:ad:7c:ad:da:86:
                    b1:4a:b1:7e:27:81:21:2e:12:c1:ff:34:eb:70:7f:
                    a0:ad:3a:12:ba:06:48:7e:89:6d:3c:1e:af:91:17:
                    e6:9d:80:b6:0f:20:be:3f:44:b3:b7:c8:3c:39:09:
                    08:23:bb:d7:6b:72:7c:70:56:d8:74:e3:2a:16:39:
                    55:ec:fa:a2:a3:bd:8e:ed:03:7b:ea:4b:8d:c0:59:
                    48:dd:56:32:8f:46:47:bf:2d:b1:64:3c:55:3e:65:
                    28:d8:50:b4:bb:c7:ec:32:14:6b:5f:48:f3:b9:41:
                    58:4a:60:04:bb:a0:b4:d5:61:04:7c:34:19:99:26:
                    21:35:5c:e4:57:98:55:6c:08:4c:c1:52:ea:d0:cd:
                    1f:71:ee:05:d7:70:49:f0:df:d0:74:28:b1:5f:0b:
                    96:40:56:af:18:07:2e:67:68:73:21:97:d3:d3:2b:
                    ff:12:79:cb:b6:e0:60:91:99:9a:b0:ff:54:54:62:
                    a8:43:6c:d0:14:1b:f9:9c:76:6d:f2:4e:3a:46:d3:
                    e7:e1:ba:0f:7b:1e:d4:02:53:81:b5:49:25:e4:68:
                    d6:a9:51:6e:04:41:4c:b4:e3:95:2d:6f:75:a0:0e:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:67:90:1D:74:FC:14:C8:76:FC:3C:07:B7:E9:55:0A:3D:B7:95
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e3:6d:2c:8c:c0:54:44:3f:50:8c:69:4f:e6:77:eb:3d:99:
         1b:16:f9:14:c2:e7:d4:6c:76:3f:45:ce:30:7a:22:4a:3e:25:
         21:25:29:c5:64:42:cb:a9:da:59:7b:57:ad:1c:b4:11:18:14:
         37:49:66:8e:75:a3:d5:6e:86:2a:c4:dc:87:a4:97:9c:cb:e4:
         fa:77:08:23:09:01:c0:ed:4f:47:6d:29:6e:ce:49:d5:f5:99:
         52:70:98:06:25:b0:df:ab:e0:c5:55:17:ea:23:70:f5:03:c3:
         9e:e8:66:b6:19:6d:4a:94:10:67:8e:8d:6e:5b:7e:d5:58:93:
         da:d2:f5:5a:18:bf:89:2f:71:23:bd:97:4a:cb:72:19:0f:cb:
         71:40:43:1c:70:00:ff:9c:97:c0:01:39:0c:bb:9e:87:71:e5:
         e6:82:ed:e7:ce:8e:62:cf:c9:95:ac:28:59:e1:b8:0e:00:57:
         5d:35:3d:6e:e1:bc:fd:69:a2:72:c1:aa:2f:4f:9f:6c:5a:cb:
         53:7d:f2:3d:d3:2a:8b:99:99:9f:fa:08:e9:17:bd:26:5c:7d:
         59:34:c2:9a:03:9b:1b:8a:1e:b4:1d:75:2e:96:a4:bc:2d:f6:
         aa:f7:b7:1c:5d:1f:ba:2d:49:4d:0f:93:74:89:5a:dd:3b:36:
         06:1f:bc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:01 2026 by rpki-client