Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File:                     ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier:          urGuG945SgcQUM7RnlrPGi1j8iEHMcut1nKsgI+wFcU=
Subject key identifier:   14:92:36:7F:4A:07:A7:B0:DF:FF:72:35:B5:73:AE:DE:71:CE:90:FD
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       358D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number:          3577
Signing time:             Wed 22 Jul 2026 14:46:19 +0000
Manifest this update:     Wed 22 Jul 2026 14:46:19 +0000
Manifest next update:     Wed 29 Jul 2026 14:46:19 +0000
Files and hashes:         1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: PQpO+BtJHHsgOsgxsFpikd1j9avHhmWfb3SBnItR/9k=)
                          2: 929D25381D1711F1981A78170E3D8C67.roa (hash: pkxruOivazr+5qgFvACHs2jVuJZHgefEb08Dy4uHw4w=)
                          3: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: RfZh/c3Oxj+j3RxxpaEAH33yqsib4ZdkZSMoIm68Qac=)
                          4: 4821776AD9A211F092913C6268D3641D.roa (hash: LOgkEDPU6qR9vCf6pUezUGPbjzvlJI1psdU+DoBEifc=)
                          5: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: jzO63g5AOxElScYYdVv06DFzK3TIOCqanZ+0EjTukYM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13709 (0x358d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Jul 22 14:46:19 2026 GMT
            Not After : Jul 29 14:46:19 2026 GMT
        Subject: CN=6a60d7bb-81f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:1e:1e:22:ce:cb:d4:ff:83:c2:2a:08:57:
                    f6:c2:75:b6:51:95:9b:fa:84:b4:3d:e8:5e:64:ce:
                    c2:21:bd:9c:07:25:10:5d:bb:25:4b:07:6a:a3:7d:
                    90:55:59:80:5a:5a:f2:9e:80:0d:34:8b:f0:29:14:
                    80:37:57:b7:58:d1:4a:12:3a:6e:4c:6a:fc:d3:7f:
                    32:da:3c:ed:1b:23:f0:9f:f4:ad:b3:24:67:6d:48:
                    9a:9d:ad:64:6e:43:41:07:f9:ce:7d:40:f9:b9:5e:
                    7e:da:8e:0d:87:1f:4f:da:72:4f:9e:62:2b:df:70:
                    dc:45:b8:34:dc:1b:a4:47:da:89:2e:ce:bb:e2:f1:
                    00:f7:a8:80:10:2f:36:d5:f8:05:49:da:a8:55:3f:
                    3c:9f:a1:38:f9:6e:81:e6:ba:ae:99:a7:51:ec:50:
                    42:bd:1f:22:ff:37:ac:03:17:7d:d7:61:cc:2a:8c:
                    f4:9f:58:20:6a:f3:43:8b:4a:9d:79:72:3d:2b:06:
                    e1:54:86:eb:e9:b3:9f:79:19:6a:25:3f:88:32:b9:
                    63:78:c2:e1:19:b2:e5:24:33:49:52:29:14:05:5f:
                    f8:f5:5d:ff:32:64:34:35:c8:8d:a2:f5:ac:2a:43:
                    b7:c9:69:e8:15:15:f0:3e:4d:29:33:e0:88:f0:69:
                    84:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:92:36:7F:4A:07:A7:B0:DF:FF:72:35:B5:73:AE:DE:71:CE:90:FD
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:17:1d:65:65:df:9d:76:2d:cc:21:18:16:35:98:13:12:c4:
         b4:32:72:42:1b:01:18:00:1a:ef:de:94:de:a3:90:b3:33:a6:
         24:e4:79:0f:d9:35:55:46:ad:85:63:78:a0:16:50:38:7a:c7:
         a7:92:1d:ed:e9:74:9c:fe:3a:a6:b3:c5:84:f3:9c:8e:7c:df:
         a7:48:81:e3:ae:ce:df:f3:13:e9:ed:f1:33:e0:7c:53:74:50:
         10:a7:de:22:47:de:94:56:cd:e5:b6:54:3e:13:1f:fb:0f:f6:
         57:42:8e:14:9f:a1:a5:eb:4b:6b:55:7f:ce:30:06:2d:6f:85:
         27:5d:de:0a:3a:1e:f7:30:3b:03:db:94:bb:62:b7:86:10:97:
         10:56:c5:4d:7b:b4:1d:56:0e:a5:d5:0b:28:97:14:42:15:73:
         d5:5a:8c:32:e3:f0:d0:24:2c:f5:1a:d8:f0:f7:53:8a:d8:03:
         1a:ff:3a:86:fa:20:a3:dd:ee:cc:a0:de:46:c8:ac:a1:2b:cb:
         b1:5c:e8:d3:bc:ab:8f:83:d4:36:82:8e:92:2e:25:13:58:d7:
         4c:69:24:60:83:d9:d9:63:5a:64:87:be:c4:65:29:ce:01:c0:
         f2:1a:6c:09:f3:05:61:54:55:b3:8b:39:99:70:b3:a6:ac:6f:
         f8:3e:28:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTk3RTgxMTAvBgNVBAUTKEM5QzI4Rjk5MEI2Mjc0MTJDOTdDMkRDRUM3QzkwNkU2
MUFEMzI1QUMwHhcNMjYwNzIyMTQ0NjE5WhcNMjYwNzI5MTQ0NjE5WjAYMRYwFAYD
VQQDEw02YTYwZDdiYi04MWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/weHiLOy9T/g8IqCFf2wnW2UZWb+oS0PeheZM7CIb2cByUQXbslSwdqo32Q
VVmAWlrynoANNIvwKRSAN1e3WNFKEjpuTGr8038y2jztGyPwn/StsyRnbUiana1k
bkNBB/nOfUD5uV5+2o4Nhx9P2nJPnmIr33DcRbg03BukR9qJLs674vEA96iAEC82
1fgFSdqoVT88n6E4+W6B5rqumadR7FBCvR8i/zesAxd912HMKoz0n1ggavNDi0qd
eXI9KwbhVIbr6bOfeRlqJT+IMrljeMLhGbLlJDNJUikUBV/49V3/MmQ0NciNovWs
KkO3yWnoFRXwPk0pM+CI8GmEkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSSNn9K
B6ew3/9yNbVzrt5xzpD9MB8GA1UdIwQYMBaAFMnCj5kLYnQSyXwtzsfJBuYa0yWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTdFOC83QTBGRTdGQTFE
OTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRCTEpmQzNPeDhrRzVoclRK
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljS1BtUXRpZEJMSmZDM094OGtHNWhyVEphdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTdFOC83QTBGRTdGQTFEOTIxMUUyQjVCQzc0RjUwOEIwMkNEMi95Y0tQbVF0aWRC
TEpmQzNPeDhrRzVoclRKYXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAORcdZWXfnXYtzCEYFjWYExLEtDJyQhsBGAAa796U3qOQszOmJOR5D9k1VUat
hWN4oBZQOHrHp5Id7el0nP46prPFhPOcjnzfp0iB467O3/MT6e3xM+B8U3RQEKfe
IkfelFbN5bZUPhMf+w/2V0KOFJ+hpetLa1V/zjAGLW+FJ13eCjoe9zA7A9uUu2K3
hhCXEFbFTXu0HVYOpdULKJcUQhVz1VqMMuPw0CQs9RrY8PdTitgDGv86hvogo93u
zKDeRsisoSvLsVzo07yrj4PUNoKOki4lE1jXTGkkYIPZ2WNaZIe+xGUpzgHA8hps
CfMFYVRVs4s5mXCzpqxv+D4ocw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:54 2026 by rpki-client