Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File:                     YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier:          /kzAWlnGi6OEYT6G2hSPbSBATR5OMAiBeU4NtvTIymA=
Subject key identifier:   98:7F:F9:A5:D1:5C:9F:7A:46:1F:67:BD:6D:61:8E:7A:B0:B0:B4:A7
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer:       /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number:          22
Signing time:             Thu 23 Jul 2026 10:55:54 +0000
Manifest this update:     Thu 23 Jul 2026 10:55:53 +0000
Manifest next update:     Thu 30 Jul 2026 10:55:53 +0000
Files and hashes:         1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: p2P0R2Vi4Lj5RAypRA/OJhQVp5N6ACS0SnmGoyXtKAU=)
                          2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
                          rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
        Validity
            Not Before: Jul 23 10:55:53 2026 GMT
            Not After : Jul 30 10:55:53 2026 GMT
        Subject: CN=6a61f33a-1718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:7c:12:d6:38:ab:a7:89:81:3e:fa:48:60:
                    65:f8:2e:06:c8:f9:c9:7a:96:2b:8e:ed:bc:c5:ae:
                    e8:44:cd:ab:dc:c3:65:64:59:0c:6d:54:dd:27:71:
                    0d:c1:4b:dd:74:68:5e:10:40:9b:41:14:53:f2:e8:
                    e1:7f:06:27:1d:63:b2:24:35:e6:5e:99:be:5b:9d:
                    63:25:cd:48:8c:3e:ac:76:b3:cb:11:69:fd:6b:89:
                    7f:8c:b6:9c:3f:75:5a:c4:c8:0b:20:3e:18:3f:82:
                    04:ee:20:04:f8:cb:f2:71:34:67:62:71:78:3f:f8:
                    6a:c2:bf:a9:8d:d9:2c:0d:4d:e1:47:64:16:90:0a:
                    59:92:54:e9:c8:df:ef:06:b3:68:5e:65:d7:c0:99:
                    99:e2:79:52:39:ba:41:17:83:17:3c:f2:b7:fa:c7:
                    83:53:36:b9:b4:7e:1e:b8:61:46:44:5e:6c:39:82:
                    43:94:37:d2:55:15:f2:77:c3:b4:e2:81:d9:1e:4c:
                    00:75:e2:2f:c9:ec:32:cb:49:d4:d2:82:13:96:6f:
                    ee:d5:0c:ac:3f:43:dc:27:34:59:9f:b5:13:d8:d8:
                    ff:d5:e1:69:9c:cb:de:1c:cc:6f:54:26:31:cc:82:
                    17:be:83:ee:cb:b0:ac:d7:aa:87:d5:55:c9:ec:3a:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:F9:A5:D1:5C:9F:7A:46:1F:67:BD:6D:61:8E:7A:B0:B0:B4:A7
            X509v3 Authority Key Identifier:
                keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:26:11:1c:f7:8b:62:e5:7f:dd:12:a6:d1:07:5d:1d:93:2a:
         e7:54:1a:bd:3a:f7:fb:98:a3:af:32:1d:54:85:74:e4:5c:b0:
         74:c7:e2:dd:a2:cb:da:18:80:f3:ba:17:38:e7:b9:01:93:2c:
         47:dc:02:1d:8f:7e:e7:ee:38:d0:90:51:42:33:a4:64:ad:ba:
         d4:e0:f3:fa:ea:6f:9a:78:16:9d:c2:e9:f9:c6:7d:3d:60:a0:
         21:bf:9f:8f:cc:39:66:c8:2a:0e:73:07:66:76:71:cf:97:3f:
         69:6f:81:5c:ff:40:03:6f:a7:9c:8e:42:75:cb:b0:2b:cf:67:
         3a:bb:2d:ce:0b:5c:79:47:e6:9d:70:df:d7:8c:a6:6c:40:91:
         db:16:e7:e4:f4:2a:79:93:31:b6:28:b8:de:2d:77:2b:ca:cc:
         1e:ad:b8:58:dd:df:7e:0f:6e:66:3f:f0:c2:d8:21:67:f6:24:
         09:bf:1c:4a:90:1c:09:c6:cd:9e:72:d0:fe:d0:3d:47:9f:83:
         61:3b:63:02:62:42:98:7e:cf:8b:78:13:29:79:7b:0c:5c:dd:
         a2:59:da:3b:e6:29:b1:38:b1:a7:d6:89:0e:c1:ce:9b:04:94:
         fd:0d:34:c8:ca:69:e0:27:29:e9:64:9c:c6:9c:1c:4d:5f:3a:
         18:29:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:18 2026 by rpki-client