Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File:                     Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier:          e7jJvgMtsNQQDJX+mo+E+LKr0QlF7S9gupiXF570Kls=
Subject key identifier:   D1:5C:96:A9:78:80:5B:D5:7C:81:D4:9D:90:1F:EB:15:F6:AC:60:48
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer:       /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number:          0200
Signing time:             Thu 23 Jul 2026 04:25:37 +0000
Manifest this update:     Thu 23 Jul 2026 04:25:36 +0000
Manifest next update:     Thu 30 Jul 2026 04:25:36 +0000
Files and hashes:         1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: 18S+8PKxOOX5bbf+aE+up6NnEYFZ6wy/G58hhCi7YkM=)
                          2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: CpTWwAtDyYV5NG3Dw7iBHIxDpXfL3jOA6p5oviFkDVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
                          rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
        Validity
            Not Before: Jul 23 04:25:36 2026 GMT
            Not After : Jul 30 04:25:36 2026 GMT
        Subject: CN=6a6197c1-8fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:6c:a6:36:9b:ee:58:af:a1:4f:88:aa:ca:29:
                    0c:0c:29:58:3c:8a:ca:19:4d:5b:30:7a:dc:39:3b:
                    b0:98:6c:fa:0a:a9:5c:c2:21:96:75:4f:e8:9d:f1:
                    32:96:54:11:67:37:6e:ab:d7:94:e0:77:1a:ee:1a:
                    68:de:f9:6c:ba:32:c4:68:17:7f:fc:ac:e5:e7:e7:
                    1d:72:e8:16:dc:59:f3:a0:7a:ef:57:de:ec:66:63:
                    30:c1:14:44:1e:23:e9:4a:12:f0:e4:e8:e4:12:cc:
                    02:e1:06:21:1a:8b:ee:3b:fc:f6:2c:8c:7e:77:c7:
                    fe:1f:b8:9a:2f:6a:aa:c8:8b:96:cd:19:ca:e1:d7:
                    b8:f1:6e:dd:b3:c0:a3:61:a5:64:d9:b3:ab:34:dc:
                    58:d0:c4:86:a8:66:4a:ce:1c:08:e2:3c:5c:b6:d2:
                    9d:8f:a1:68:b7:ba:e2:47:a7:b6:db:be:84:36:03:
                    70:4e:39:41:c7:11:10:fe:d6:ff:0f:66:f1:ce:64:
                    a0:ba:8d:d4:41:1f:18:a0:73:e3:ea:96:da:58:3b:
                    dd:bb:69:28:5e:a4:b4:47:d5:ac:80:e5:68:d7:6b:
                    74:f5:6f:4a:4a:b5:2a:f0:fb:81:fd:e8:85:9e:f3:
                    ae:0a:7c:70:2a:2f:e6:54:8f:94:19:16:b4:1c:95:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5C:96:A9:78:80:5B:D5:7C:81:D4:9D:90:1F:EB:15:F6:AC:60:48
            X509v3 Authority Key Identifier:
                keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:57:b5:36:46:a6:06:d6:da:cf:b2:36:d8:97:e1:22:85:
         6a:d7:cf:8f:35:8f:d6:c9:a0:0a:6a:f7:88:23:b2:02:1c:c8:
         09:f6:96:b2:9a:57:83:4b:3f:b7:38:d5:d0:60:cb:c0:a3:67:
         b5:22:0c:41:31:5e:d7:39:1f:94:0c:bf:1e:ca:d3:d6:02:03:
         0b:91:4b:08:10:fc:e6:c1:07:36:af:a6:68:db:8f:3f:d0:c9:
         ae:8f:54:31:3c:84:e4:ef:c0:3e:2f:5e:e2:2a:99:13:d9:42:
         09:8c:b0:d3:67:37:c2:22:54:93:91:7b:da:7d:2e:59:81:a1:
         96:ea:8d:2b:8f:10:e6:96:17:3e:89:06:6c:e0:14:98:c8:5f:
         49:3c:ed:e9:4d:d2:be:da:4f:4b:7c:d9:1a:7a:b6:5a:7f:c9:
         d6:fd:0b:fd:2b:c0:c4:33:89:3d:66:7b:90:8d:2d:7b:4f:83:
         a5:75:56:82:7b:fd:1a:d1:28:0a:31:6f:bb:78:be:4d:07:a1:
         bd:ab:c1:5c:42:da:cc:01:da:9d:c4:70:9f:a4:04:bd:3d:c8:
         f3:32:a4:20:c4:28:d1:1a:0a:e1:a3:34:98:57:2e:8d:73:9c:
         46:68:99:83:41:b2:72:26:d3:49:f5:38:09:16:a9:e0:8c:6f:
         6b:28:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:26 2026 by rpki-client