Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          bPrGDijobQViIYMdivIlAwOfV6XaxwCN8N3wLfPfbqw=
Subject key identifier:   42:59:1E:D0:A1:EB:A4:20:88:C2:92:0A:E2:A4:02:CE:FF:F5:C7:7C
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          023F
Signing time:             Thu 23 Jul 2026 03:43:04 +0000
Manifest this update:     Thu 23 Jul 2026 03:43:03 +0000
Manifest next update:     Thu 30 Jul 2026 03:43:03 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: LyCFST4v7H0jLX4IQ75BT9kVCiRLe0tUndTy+nyM8QI=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
                          3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
                          4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Jul 23 03:43:03 2026 GMT
            Not After : Jul 30 03:43:03 2026 GMT
        Subject: CN=6a618dc8-9674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:cc:0f:cd:a5:82:e4:b5:1e:89:c1:a6:0d:
                    33:28:bb:92:00:9c:19:d2:6a:77:89:3f:be:1f:f0:
                    c3:e8:cd:bb:79:db:6d:07:ff:99:02:20:c1:8e:4e:
                    32:29:0b:d6:70:3e:1e:9e:7b:bd:0c:e7:a9:c7:b5:
                    67:5e:90:a0:35:e8:78:49:77:d4:6e:15:f2:94:77:
                    13:21:ab:be:e1:99:f3:2b:d8:35:ea:ab:56:1d:22:
                    82:16:81:73:2a:67:54:ec:e0:a2:cc:2b:ae:b1:08:
                    84:f2:96:d3:8b:7a:c8:47:d3:6e:85:c7:dd:6d:7e:
                    70:5c:bb:92:19:d0:df:e3:64:49:09:25:97:eb:ef:
                    da:d4:a0:0f:fd:50:24:5e:2d:e9:ee:81:1c:6c:cb:
                    de:11:7f:ef:02:df:e5:05:44:e5:d1:ce:b5:3e:0e:
                    40:36:aa:12:90:81:d7:c4:be:5c:f9:67:de:7c:45:
                    b5:3c:b8:d0:a2:61:f3:99:6e:b7:f0:6d:40:dc:d4:
                    e3:a8:51:ae:9d:a6:8c:f2:c0:23:17:e1:ff:12:13:
                    eb:f2:11:57:35:69:65:ab:de:d1:ff:03:15:c5:20:
                    95:bf:ad:53:65:5b:2e:fe:70:fd:ba:29:a6:b5:12:
                    ab:2e:2c:23:9f:13:e0:94:5e:af:0a:26:94:e3:2c:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:59:1E:D0:A1:EB:A4:20:88:C2:92:0A:E2:A4:02:CE:FF:F5:C7:7C
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4c:bf:f7:7a:56:45:27:57:1a:80:ff:88:d7:a2:07:b7:b2:
         cb:71:14:66:bc:fc:20:2c:36:d8:6e:dc:11:71:36:1b:39:bd:
         a2:1c:7b:80:82:65:cc:0d:7d:f9:10:d6:63:a0:d3:9d:40:0b:
         23:51:61:76:8d:b1:2c:2e:3c:ac:d5:97:4f:a6:38:b7:06:2e:
         02:fc:f1:bd:68:5a:0e:f0:9a:2c:39:9c:dd:bd:44:07:5d:6b:
         c5:40:70:ac:31:9c:d2:33:68:42:c3:b6:15:15:7b:3e:68:03:
         d6:c1:ac:d7:23:22:36:81:b0:2f:02:5d:03:c6:85:21:d5:51:
         56:90:d0:29:5c:0a:a5:b3:96:f8:25:8f:ce:7c:8c:8d:0e:4a:
         c7:26:6d:3a:b8:0b:64:2d:73:38:77:cf:b7:b9:4a:f9:43:1f:
         4f:5e:4a:a6:5d:2d:86:93:3e:5f:5f:a7:8e:1c:6a:d4:d8:cb:
         54:81:f2:2a:f6:31:b5:5b:18:62:47:c1:c7:19:e9:ad:0e:47:
         4c:36:a3:9f:66:da:a5:66:09:a3:8f:bf:90:ab:35:c4:d7:0d:
         ef:11:01:09:8b:2c:63:38:00:1e:cb:cb:c4:70:7e:74:cb:94:
         0b:c8:3e:83:3e:77:67:e5:2f:b4:25:7d:df:d2:45:70:fb:9a:
         33:89:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:30:33 2026 by rpki-client