Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File:                     YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier:          M/gba19ZAnhnacZDKb84Er3kkSJI//ENwm5RxS0MrKQ=
Subject key identifier:   66:E6:3C:66:3C:12:3D:E3:DB:39:15:38:82:9A:C0:3F:DB:AF:FE:27
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer:       /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial:       017B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number:          0173
Signing time:             Thu 23 Jul 2026 06:17:12 +0000
Manifest this update:     Thu 23 Jul 2026 06:17:12 +0000
Manifest next update:     Thu 30 Jul 2026 06:17:12 +0000
Files and hashes:         1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: RvsBeKHAIpG9zSH4bYseqbtftZYFb/PlBJT3Y+UTB7E=)
                          2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
                          rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
        Validity
            Not Before: Jul 23 06:17:12 2026 GMT
            Not After : Jul 30 06:17:12 2026 GMT
        Subject: CN=6a61b1e8-e001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a2:04:61:ca:e5:71:a6:e8:67:a2:83:fd:05:
                    9f:6b:0a:27:c9:81:5d:6d:47:12:6d:4d:2e:7d:fb:
                    95:94:82:bd:fa:2e:b4:a8:ee:9f:59:3e:96:99:e0:
                    76:c5:5c:96:ec:d2:3b:f8:a2:b3:8f:f3:51:a2:fa:
                    86:94:ed:43:b8:7f:0c:05:e7:0c:e0:72:42:72:7e:
                    3c:96:2c:1f:ce:3e:9b:ab:65:0f:9a:22:16:cd:d8:
                    98:6d:6e:9b:2c:41:39:66:53:b9:10:17:0e:f4:16:
                    1b:ad:f6:18:4f:e9:6e:c9:67:9f:67:71:ce:b1:2b:
                    da:07:4f:99:d0:a6:79:ab:1d:dd:c7:e2:35:ff:74:
                    46:39:d8:3e:68:f3:bc:2b:24:13:d2:8e:f8:3c:ef:
                    2d:64:36:20:32:73:20:6b:d3:7f:4c:8e:0d:07:41:
                    85:47:ee:2e:69:20:c9:f6:68:28:79:a2:54:13:02:
                    b6:02:34:d5:00:cb:ab:a8:92:f4:7f:b8:72:2d:63:
                    05:00:58:b3:72:d5:31:86:02:d0:db:a6:15:2e:7c:
                    fc:07:30:2b:2e:89:6b:51:b5:b8:32:37:7f:55:8f:
                    f9:2e:de:1d:06:df:6c:d8:85:57:c8:ee:22:80:c3:
                    e3:7e:40:81:05:e0:31:1e:25:e1:44:11:53:ef:1e:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:3C:66:3C:12:3D:E3:DB:39:15:38:82:9A:C0:3F:DB:AF:FE:27
            X509v3 Authority Key Identifier:
                keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:38:90:1c:06:9f:34:3a:f2:56:78:1f:4f:91:1c:db:8a:
         8d:39:51:f9:7a:ef:61:9c:7d:b6:0a:0e:81:bc:ec:ed:40:31:
         7b:bc:bf:27:91:46:72:0b:10:9d:4c:b3:27:ed:3d:a0:9a:92:
         fd:af:82:b3:d0:60:39:f8:c0:e1:36:72:97:26:83:48:61:ea:
         7a:4d:23:8b:60:73:18:dd:55:cf:44:7b:e5:33:69:02:05:3f:
         a6:b9:b8:c1:66:de:8b:a7:8e:1d:3b:c4:68:53:16:26:15:1a:
         8b:1c:3a:4c:0f:35:da:fb:ea:95:b1:35:d4:66:18:31:4f:32:
         a6:fc:ef:30:c3:8e:e6:1e:8c:f5:7c:0c:93:bd:4e:f1:12:a4:
         9b:ec:13:f4:46:e1:5e:46:4f:ba:e2:dc:44:c8:90:c6:08:52:
         c3:f0:ac:a3:54:9f:79:b0:22:a1:ed:57:e0:72:f6:2f:4d:13:
         ff:e3:25:5c:83:45:56:53:10:e0:6a:18:b4:76:1c:9f:4d:88:
         10:b9:fb:52:42:37:7c:92:6a:3b:0b:4b:75:53:73:06:4a:94:
         7f:72:91:24:db:7f:b4:bb:d8:e4:12:a7:13:4e:cb:4a:53:08:
         aa:15:2a:19:10:fc:a4:f9:07:d3:20:2d:ce:94:60:06:8b:88:
         8b:7d:e4:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY3RjAxMTAvBgNVBAUTKDYxMUNCNTU2Qzg3QkMwNDlBNUE0M0VCMUYyOTcxMDdF
RkYxQjc5NDAwHhcNMjYwNzIzMDYxNzEyWhcNMjYwNzMwMDYxNzEyWjAYMRYwFAYD
VQQDEw02YTYxYjFlOC1lMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3aIEYcrlcaboZ6KD/QWfawonyYFdbUcSbU0uffuVlIK9+i60qO6fWT6WmeB2
xVyW7NI7+KKzj/NRovqGlO1DuH8MBecM4HJCcn48liwfzj6bq2UPmiIWzdiYbW6b
LEE5ZlO5EBcO9BYbrfYYT+luyWefZ3HOsSvaB0+Z0KZ5qx3dx+I1/3RGOdg+aPO8
KyQT0o74PO8tZDYgMnMga9N/TI4NB0GFR+4uaSDJ9mgoeaJUEwK2AjTVAMurqJL0
f7hyLWMFAFizctUxhgLQ26YVLnz8BzArLolrUbW4Mjd/VY/5Lt4dBt9s2IVXyO4i
gMPjfkCBBeAxHiXhRBFT7x4HkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbmPGY8
Ej3j2zkVOIKawD/br/4nMB8GA1UdIwQYMBaAFGEctVbIe8BJpaQ+sfKXEH7/G3lA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjdGMC9DNzRFQjY5QTU5
RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dFbWxwRDZ4OHBjUWZ2OGJl
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSeTFWc2g3d0VtbHBENng4cGNRZnY4YmVVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjdGMC9DNzRFQjY5QTU5RDUxMUVGODNEMjhCNEJDNEY5QUUwMi9ZUnkxVnNoN3dF
bWxwRDZ4OHBjUWZ2OGJlVUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHho4kBwGnzQ68lZ4H0+RHNuKjTlR+XrvYZx9tgoOgbzs7UAxe7y/J5FGcgsQ
nUyzJ+09oJqS/a+Cs9BgOfjA4TZylyaDSGHqek0ji2BzGN1Vz0R75TNpAgU/prm4
wWbei6eOHTvEaFMWJhUaixw6TA812vvqlbE11GYYMU8ypvzvMMOO5h6M9XwMk71O
8RKkm+wT9EbhXkZPuuLcRMiQxghSw/Cso1SfebAioe1X4HL2L00T/+MlXINFVlMQ
4GoYtHYcn02IELn7UkI3fJJqOwtLdVNzBkqUf3KRJNt/tLvY5BKnE07LSlMIqhUq
GRD8pPkH0yAtzpRgBouIi33kLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:50 2026 by rpki-client