Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
File:                     zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft (raw, json)
Hash identifier:          ympRPSS5vqPiL9w91kEEDsfTpY204zsbAg6G0Iptk5U=
Subject key identifier:   59:E6:75:5B:88:D1:41:69:AF:88:A5:8E:D1:A1:6F:C9:1B:91:C1:95
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Certificate issuer:       /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial:       0876
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
Manifest number:          0868
Signing time:             Wed 22 Jul 2026 21:22:37 +0000
Manifest this update:     Wed 22 Jul 2026 21:22:36 +0000
Manifest next update:     Wed 29 Jul 2026 21:22:36 +0000
Files and hashes:         1: zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl (hash: yoSGNYcGXspe1Pi4Un2WY2hIIbg8xTbqRhLxxoNsYXs=)
                          2: 074C5C04644211EFA6AFE95CC4F9AE02.roa (hash: HjZ7t8kgpdJxOePYiWhvfCYqV48LdKYANpWFvHjvxbY=)
                          3: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (hash: HV0/anJzdS8nf2kchQZlfcYKNq8/3UYN6t+tlx/5po4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
                          rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
        Validity
            Not Before: Jul 22 21:22:36 2026 GMT
            Not After : Jul 29 21:22:36 2026 GMT
        Subject: CN=6a61349d-e502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:0a:69:22:35:78:19:1d:2d:f3:af:61:8f:
                    67:3b:24:48:5f:b8:97:d6:60:f3:a9:19:36:3e:35:
                    b8:af:d9:5d:eb:0d:e9:d4:90:d7:14:99:cd:82:f9:
                    87:28:8a:d9:44:d3:cb:56:09:bf:38:d3:1f:3e:57:
                    0b:bb:d5:7e:fa:0e:a6:80:77:d6:dd:83:d0:fc:6e:
                    71:90:0b:c3:be:01:9a:fa:23:04:9a:19:02:96:45:
                    bb:5f:f8:54:02:1f:c5:32:fc:16:3c:b7:9d:c6:86:
                    03:67:70:4b:b5:35:97:25:8a:3f:96:fc:85:72:d5:
                    97:14:c8:d5:36:80:c7:e2:4a:40:18:cd:22:a8:77:
                    d5:ba:15:32:71:d2:01:16:24:d6:cb:ce:b5:c6:17:
                    95:9d:7b:69:84:2c:0c:2e:c4:ec:0a:81:9b:e3:83:
                    74:3f:86:5f:fe:ce:d9:c3:fc:7e:51:50:8e:ce:1d:
                    75:48:cc:52:0a:60:af:95:29:63:0c:77:55:fa:ad:
                    dc:ff:97:9e:22:21:89:79:ac:a2:4f:d1:99:8e:7f:
                    2c:59:8e:d3:2e:9a:65:0a:bf:d2:9c:3d:8c:10:be:
                    4b:d6:e9:d9:3e:ba:36:e7:aa:73:92:f2:98:c8:d3:
                    54:9c:fe:f8:13:8d:0a:ba:c5:ce:ee:10:7b:88:59:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E6:75:5B:88:D1:41:69:AF:88:A5:8E:D1:A1:6F:C9:1B:91:C1:95
            X509v3 Authority Key Identifier:
                keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:71:d8:43:7b:4f:f3:b0:52:9e:eb:19:e5:dd:1c:b0:ef:1a:
         22:3c:a9:0a:ed:96:e5:7b:96:49:63:e0:73:e4:4f:0c:4b:d6:
         8c:16:c0:da:52:c7:b2:0d:16:26:67:c6:c3:96:f0:7a:1b:46:
         50:4e:44:7b:49:64:43:e1:af:0f:15:e2:bc:a0:91:19:6f:f2:
         ab:34:ce:ce:c6:80:dc:66:04:dd:f9:04:51:e4:37:0f:a2:d3:
         40:cf:e7:2e:ee:27:e4:47:46:b0:f3:11:2d:1a:8b:f1:ea:f1:
         1e:c3:bc:4b:e0:17:68:d4:68:66:69:cf:8e:70:11:18:32:e0:
         63:19:db:66:0f:24:e2:a5:69:72:32:b6:18:c5:4f:f9:f4:0a:
         42:35:ff:d6:a0:3b:a1:1e:bb:aa:a9:62:4b:9b:c8:8c:65:b8:
         33:05:51:45:0d:eb:e9:80:7e:a5:c7:dc:9b:5a:3e:8b:37:2d:
         e8:38:2c:55:8b:fd:a2:d3:16:31:3f:b2:65:0a:98:68:3a:5e:
         f8:fe:7d:55:b7:3c:ec:6e:c4:c0:60:4b:c4:50:1e:6f:bc:9a:
         4c:59:96:4e:e1:a0:83:c5:cf:d6:2b:74:fa:95:d8:42:4a:86:
         6c:4d:7b:d9:bc:3a:3f:aa:0b:b0:63:e4:26:e4:b0:a3:7d:a7:
         61:7c:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:53 2026 by rpki-client