Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          t1tJaV5yLXr2klLj0qP2PdyHMfe7hd7FH2CYcGoXyVI=
Subject key identifier:   A3:CC:B5:C8:56:54:11:E2:61:77:90:5D:35:1D:21:DA:F8:03:AA:D6
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          0640
Signing time:             Thu 23 Jul 2026 01:05:44 +0000
Manifest this update:     Thu 23 Jul 2026 01:05:44 +0000
Manifest next update:     Thu 30 Jul 2026 01:05:44 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: +/kRB/xpglLgA3tsmdMDyK2o2s/RBKpyPX1gKGhwb+M=)
                          2: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: EtzqLiy1GfOpWQ6NNxaBO4VxmKVupSX7ugnc/ADUBS8=)
                          3: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: 228d9Yp5Ujtrc1y20mhpEdshI3yQHTWHhGD/doCyGs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Jul 23 01:05:44 2026 GMT
            Not After : Jul 30 01:05:44 2026 GMT
        Subject: CN=6a6168e8-03bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:e7:c2:13:53:95:45:40:08:0c:4f:75:44:
                    f1:0d:11:31:ec:c9:ce:ad:de:a9:69:37:8d:62:a5:
                    33:1a:48:1f:0c:5d:1d:d1:39:35:20:fb:66:4e:d7:
                    7d:02:72:bd:6d:f9:b7:e1:22:fb:2b:dd:b9:b1:7f:
                    a4:1e:2d:9f:86:28:1d:0e:d7:9d:44:b8:b4:68:bf:
                    07:f0:5f:49:7d:ca:91:04:ab:da:da:bb:04:de:55:
                    dd:bf:ac:36:ac:ea:92:91:6b:13:b5:0d:c1:7d:25:
                    41:fd:cf:1e:80:df:39:9c:10:65:e8:b6:b4:18:78:
                    7e:23:99:a4:a2:06:ba:76:3d:48:8f:31:c9:d0:54:
                    8b:f5:59:05:fc:b4:27:9c:c9:98:ff:e8:eb:42:5b:
                    b9:50:7d:40:82:bc:da:52:5f:f7:93:ae:b8:a1:2f:
                    6f:e7:ca:62:e6:13:ba:4e:ff:0d:09:c5:79:01:13:
                    05:3f:0f:a0:a6:68:98:84:b3:f0:10:3c:93:10:7e:
                    d2:b4:7c:2e:dc:00:e6:c9:e3:47:55:a3:f8:8e:58:
                    d5:7f:8e:51:89:61:fb:84:2b:b6:a4:ac:17:64:6c:
                    4d:63:f4:d0:99:b5:98:e1:70:85:e7:1a:a2:95:91:
                    3d:a1:50:28:6e:60:b0:b2:1b:29:56:b1:93:98:a0:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CC:B5:C8:56:54:11:E2:61:77:90:5D:35:1D:21:DA:F8:03:AA:D6
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b0:f5:fb:5a:78:0c:73:4a:6e:00:cb:bd:2c:0f:17:5c:82:
         90:79:72:02:c3:c6:34:64:82:96:1e:7a:07:df:ba:ae:f9:0c:
         48:9d:9d:de:39:6d:b5:d0:a4:d6:a6:c0:5f:b2:e9:42:e6:de:
         f9:a6:a6:4e:57:5f:af:5a:6b:bb:da:e9:71:ab:c9:f6:c9:62:
         05:d0:f5:8f:47:ba:bc:23:99:9d:f3:c6:9e:ff:21:19:65:80:
         de:73:01:7d:9f:58:66:19:e3:65:31:93:7d:fc:fd:72:bc:dd:
         d0:0e:b8:89:05:6e:ac:ad:8b:eb:62:bc:46:46:2e:c5:d2:81:
         ae:86:5e:c5:39:31:1e:ed:22:eb:f4:6b:17:5e:b0:88:c6:ed:
         ba:cf:b9:dd:c4:b8:5f:9a:be:5e:18:2f:0b:6f:f2:ce:7d:5b:
         d0:05:80:d6:01:cb:8f:36:72:99:5b:ec:6f:d3:03:cc:1c:58:
         18:79:8a:2c:53:1c:84:be:85:8b:52:87:9a:08:4f:f3:b7:75:
         fb:b0:d3:a8:9e:d9:ba:19:1d:cb:a0:56:9f:9a:e5:01:3c:99:
         da:96:a5:5a:a8:7f:d4:80:43:d0:38:92:a2:15:9e:36:d0:3a:
         00:cb:ac:e7:89:68:cb:c5:ae:17:e5:2e:b4:9e:4c:36:e8:ac:
         a5:ed:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:43 2026 by rpki-client