Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
File:                     yYr7tLua6bGiej3TrVlWs07anGM.mft (raw, json)
Hash identifier:          5ZTVJ+rLI6i7V4DPJjOWQvG6S1j2XMvJWJJNroHz1p4=
Subject key identifier:   64:8E:12:68:61:18:D4:0D:25:CB:62:55:2B:DF:31:57:DA:5E:C8:BA
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0E89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
Manifest number:          0E6B
Signing time:             Wed 22 Jul 2026 18:18:48 +0000
Manifest this update:     Wed 22 Jul 2026 18:18:48 +0000
Manifest next update:     Wed 29 Jul 2026 18:18:48 +0000
Files and hashes:         1: yYr7tLua6bGiej3TrVlWs07anGM.crl (hash: F8rL22ntFH4/M4CRWgV2m6OyT0yf8A92A/juaFyYWJQ=)
                          2: 1CD82986C36111E9A37AC46EC4F9AE02.roa (hash: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=)
                          3: 1E573054C36111E9A37AC46EC4F9AE02.roa (hash: J82yfuC+4aLDmhGWjyr0F1wn0ktPZ4aMMMR1qjOd0j4=)
                          4: 1D884A0AC36111E9A37AC46EC4F9AE02.roa (hash: nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3721 (0xe89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Jul 22 18:18:48 2026 GMT
            Not After : Jul 29 18:18:48 2026 GMT
        Subject: CN=6a610988-af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:84:d7:f7:05:71:56:a5:5f:b5:16:ab:94:
                    86:e2:dd:19:98:0a:53:69:92:5e:45:67:16:ec:e8:
                    ac:48:1d:e1:d7:f7:2c:f5:4f:ff:75:74:14:ef:ab:
                    77:3b:15:8c:7e:cb:27:5a:b8:b4:1c:85:0d:ac:b5:
                    f5:f3:83:4d:6f:3f:be:da:cf:dd:60:ac:40:14:7d:
                    57:01:4f:0a:4b:8b:ca:96:51:7f:82:84:9e:52:35:
                    8c:3b:70:ed:4f:2d:fa:9a:70:a4:7d:34:a6:6c:ac:
                    9c:8a:74:c8:a6:99:85:e7:8e:89:9d:aa:5c:dd:59:
                    3e:cd:ba:cb:17:fa:41:53:bc:57:cf:1b:6a:c6:b4:
                    b4:bf:49:8c:3c:fe:48:74:d5:20:fe:ac:14:34:f7:
                    78:12:dd:82:1f:c8:3c:1c:00:22:51:10:94:5e:58:
                    55:60:ed:8f:1a:50:0b:fb:e0:88:08:e0:e0:49:e0:
                    b9:45:01:3a:97:d5:f6:7b:87:e1:4d:80:b7:7d:96:
                    d4:30:47:a2:59:cd:70:98:2b:37:e3:bf:57:31:e7:
                    79:d7:f8:d8:3c:95:d7:4c:73:f5:1d:5b:0b:71:b1:
                    2b:c7:70:bc:8b:21:ac:3e:82:d6:bb:63:ed:48:28:
                    16:18:9b:62:45:02:2d:97:b8:07:96:e2:c5:56:71:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8E:12:68:61:18:D4:0D:25:CB:62:55:2B:DF:31:57:DA:5E:C8:BA
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:20:fe:d9:25:06:26:bc:29:d0:c7:47:55:2c:8e:05:fc:af:
         14:13:1a:2b:34:3a:ef:31:41:25:ea:72:b5:16:f3:d8:e3:6c:
         d6:5a:12:ce:20:3d:58:ff:4a:d7:49:03:b1:d8:04:9b:6e:38:
         eb:ca:7b:88:e5:26:15:59:cc:b5:1a:bc:e2:d6:c0:b6:08:70:
         45:7f:c3:fa:0c:5e:3a:95:72:2a:c0:5b:75:fd:be:8c:73:08:
         95:f0:70:dc:3f:95:6e:51:bd:67:01:00:6f:72:3e:d5:f1:fb:
         9b:d3:87:5d:b3:a4:b6:20:6c:7f:84:aa:22:24:e9:21:5d:17:
         5b:cf:1d:34:1a:61:2e:73:b9:7a:93:32:07:6f:e6:4c:82:4a:
         40:6c:30:c6:78:d9:9a:6f:b1:97:fd:09:0c:7e:56:5c:44:17:
         77:fc:0d:b6:ab:3a:7f:93:73:88:89:50:75:af:46:63:6a:b6:
         2b:63:5c:d7:83:4e:aa:e1:69:94:0f:26:a7:82:8e:e8:2c:59:
         10:fa:5c:5a:cd:4e:06:59:da:71:44:06:6e:a4:65:9e:06:fc:
         5b:36:41:0b:c3:f9:fe:56:63:5d:06:dd:86:fd:20:51:a9:02:
         c2:5e:c0:dd:8b:99:91:48:24:cf:d2:02:38:dd:f7:44:e7:ac:
         15:d8:e2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:11 2026 by rpki-client