Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
File:                     YpYWXDbflgVmse01DqfefzOLOpk.mft (raw, json)
Hash identifier:          jxwtPeXK0jtC2TCIaSL+Je5dIkTD+q670ffygebOd3c=
Subject key identifier:   40:41:6C:8D:14:54:99:CB:CA:1A:32:D5:95:2F:BD:41:1E:C4:81:D6
Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99
Certificate issuer:       /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
Manifest number:          30
Signing time:             Thu 23 Jul 2026 10:41:18 +0000
Manifest this update:     Thu 23 Jul 2026 10:41:17 +0000
Manifest next update:     Thu 30 Jul 2026 10:41:17 +0000
Files and hashes:         1: YpYWXDbflgVmse01DqfefzOLOpk.crl (hash: fSAjNy3EVPNidKHQ2/+QOPaTgN29cUUlv7PK2osE+hM=)
                          2: E70D393E3E1211F1B8544D87AE833773.roa (hash: QKtJAkqUtPB3mTAjjBY4LLg9Wgtws5WpGtADkwoN/hg=)
                          3: BBFF83183E1311F1A75FAD3AAF833773.roa (hash: tVkmnNetZiuk3U9n5t1OgMJioxU81CU8IuCEcNguLvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl
                          rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
        Validity
            Not Before: Jul 23 10:41:17 2026 GMT
            Not After : Jul 30 10:41:17 2026 GMT
        Subject: CN=6a61efce-2280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:b8:41:e0:fc:52:55:cb:9c:8c:d5:be:7d:
                    65:61:1a:59:c7:b1:0a:e1:ed:45:ee:7d:28:3a:80:
                    60:18:aa:9f:c0:1a:82:15:ae:bc:46:91:e8:63:c3:
                    ab:2d:b3:80:08:54:7e:05:46:33:33:f5:5c:85:87:
                    a0:f7:5f:8d:dd:1a:41:2c:52:ab:63:cf:24:74:78:
                    8a:11:4a:e6:cf:fb:66:d2:c4:4a:7e:3b:fb:8f:82:
                    2a:d4:7e:f9:6f:c0:11:56:de:db:4b:87:75:11:c2:
                    10:67:74:71:78:a8:74:70:b3:4d:e0:52:f2:14:29:
                    26:29:c4:cb:9a:e4:b6:f2:8f:c2:e9:6a:13:bf:94:
                    e8:39:b7:a1:49:33:b7:57:66:ed:a6:4c:50:fc:e1:
                    19:6f:fd:0c:09:f2:69:24:b6:fe:50:9d:46:f8:ab:
                    c6:18:0f:12:ed:c0:f7:81:7c:53:44:6d:46:68:2b:
                    22:84:dc:76:66:9a:bc:1c:3c:ae:cb:4c:eb:16:d0:
                    cb:b1:1d:48:bc:0a:df:ef:bd:73:12:ff:df:d0:21:
                    e6:ec:81:1d:03:73:75:f4:6f:c3:f8:20:8f:f4:97:
                    ea:ad:f9:5a:4c:20:44:6e:a1:90:80:64:0c:15:05:
                    6c:cb:db:df:75:62:4c:22:45:c4:86:4d:e1:61:bd:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:6C:8D:14:54:99:CB:CA:1A:32:D5:95:2F:BD:41:1E:C4:81:D6
            X509v3 Authority Key Identifier:
                keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:b6:ac:5e:00:e8:3d:6d:ab:3e:4d:0e:49:d5:f1:65:0f:
         66:5b:74:86:b9:53:7f:3b:d2:93:16:95:4c:a5:f4:ba:37:3e:
         01:74:77:88:c3:1f:b4:af:85:43:a8:f7:a5:fc:1d:50:89:82:
         50:2d:dd:13:66:53:ff:6c:66:f9:58:9f:55:dd:22:65:89:46:
         f5:aa:6e:42:27:7e:59:ef:94:a7:85:8d:3c:14:46:e9:a5:4f:
         c0:07:d2:2f:4a:ac:3e:96:10:2e:4e:b1:36:6a:c6:aa:6b:71:
         bb:9a:71:a2:10:d6:13:de:1a:8e:36:f6:29:c0:95:e1:a5:df:
         d6:41:ca:ab:95:70:2e:e2:a0:35:56:fd:8e:9e:6d:8e:20:6e:
         7c:60:80:17:48:e6:99:f5:b0:0b:48:ed:c0:3d:97:23:28:f4:
         b3:1c:57:40:d2:7e:3e:db:a9:f4:2e:3c:d9:e8:11:ab:09:dd:
         aa:9a:03:d2:8e:66:4a:de:0e:cf:0e:26:71:55:0b:10:cf:ad:
         c9:d4:22:e1:45:50:66:3c:1c:a0:70:a8:34:24:b7:3e:6d:dc:
         38:27:0d:51:8d:3e:2e:02:90:20:ec:32:83:57:30:67:45:cd:
         7f:b2:d6:0e:a2:3d:e6:bd:e4:9e:1b:89:ad:8d:93:94:f7:5a:
         e5:2b:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:31 2026 by rpki-client