Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
File:                     Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json)
Hash identifier:          4GOM/qml7YuswIOd4O3EC+sb8qDDR6VL/rdD7rm8BU4=
Subject key identifier:   D1:28:81:4E:39:9F:A1:BE:75:E3:8E:FD:E6:17:19:6C:FE:E9:34:D1
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       087D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
Manifest number:          0860
Signing time:             Wed 22 Jul 2026 21:28:23 +0000
Manifest this update:     Wed 22 Jul 2026 21:28:23 +0000
Manifest next update:     Wed 29 Jul 2026 21:28:23 +0000
Files and hashes:         1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: lUTIvbbZPXEhPChCEC0Ggmh8PsTWHJLMiltXtiTJLXw=)
                          2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=)
                          3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=)
                          4: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173 (0x87d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Jul 22 21:28:23 2026 GMT
            Not After : Jul 29 21:28:23 2026 GMT
        Subject: CN=6a6135f7-e8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b7:88:a1:98:c1:8a:73:2f:a2:75:80:50:8e:
                    3a:fe:5e:f9:a1:51:f5:00:34:da:c3:fb:3d:23:ff:
                    ca:6a:3c:f9:28:02:72:7c:e1:ad:34:e0:3d:69:ec:
                    bb:12:59:bf:b8:bf:73:5c:99:87:2d:a2:39:55:9a:
                    e1:46:01:22:83:d3:c0:67:1e:ce:7c:1c:8a:d9:f9:
                    ab:1d:d5:4a:00:0f:a6:25:dc:dc:dd:7d:ef:e0:47:
                    3f:c8:5c:b4:3f:2a:db:26:91:d0:dc:05:ac:1a:95:
                    fd:3f:fe:65:ed:62:b4:83:de:09:99:a3:b5:35:be:
                    8e:e8:78:1c:bb:e4:b3:f5:39:2c:3a:8b:ec:6a:9c:
                    77:82:90:af:b1:13:89:c4:85:a6:09:1e:01:3e:f2:
                    a6:45:fb:c1:b7:3f:eb:30:2d:dd:d4:7d:31:68:0c:
                    15:39:4a:1d:6c:5d:3f:aa:45:48:7f:b5:00:a7:00:
                    71:b0:cd:4f:9a:8d:8d:8d:a8:18:74:9a:77:79:5d:
                    9a:60:3a:4b:69:c2:16:b3:71:19:44:3c:81:19:71:
                    7a:9e:50:79:f6:7a:aa:15:7b:6e:49:70:70:73:82:
                    07:11:8d:03:2f:b9:cc:dd:a1:3f:9b:85:34:34:69:
                    ee:da:8e:cf:b2:ad:b0:f6:5f:5d:f8:7f:ef:e3:a2:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:81:4E:39:9F:A1:BE:75:E3:8E:FD:E6:17:19:6C:FE:E9:34:D1
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:82:61:a8:21:45:d3:77:38:e4:bf:8c:4c:a6:2c:b4:de:00:
         0d:7b:2f:30:4f:97:39:85:46:8a:b9:88:e8:1e:29:a1:13:b7:
         5f:43:b5:e9:17:9e:c8:79:cf:3e:a6:f0:be:ed:32:a3:22:59:
         f3:cf:5c:79:1e:b4:1d:2d:bc:f9:0a:7c:d7:db:03:95:40:2b:
         2b:43:ff:e9:2a:12:91:55:c5:67:ab:1d:32:9d:7f:9f:72:f1:
         8e:47:b2:06:01:9c:ef:01:ca:94:7a:f0:ae:26:9d:7a:37:0d:
         03:e7:b4:e6:69:47:e8:ab:c4:ee:77:ad:23:6f:f2:19:a3:e8:
         eb:f5:eb:f4:a9:d2:bf:e7:84:93:93:3b:f3:03:c1:28:f9:a4:
         f0:64:cb:21:f4:df:e6:27:50:dc:5e:b0:f8:75:5d:85:fd:33:
         1d:bc:2c:13:77:84:d9:08:35:58:f0:45:7e:69:cb:48:62:c3:
         fd:30:e5:5f:1f:c9:27:0e:64:0f:0e:8c:db:a0:42:60:11:5f:
         56:bc:77:c6:a8:63:eb:54:f5:74:9c:2f:a7:2e:00:27:86:a4:
         5d:9e:6c:96:b8:22:e8:08:0d:12:06:be:92:c5:42:fb:9c:22:
         ed:03:70:3c:84:00:8d:46:cd:b6:7e:3b:bc:2d:61:89:99:d2:
         6c:7f:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:47:06 2026 by rpki-client