Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
File:                     kYy2egJiI43veP8oikXZKB-V0us.mft (raw, json)
Hash identifier:          zYTzhNW+zfRTBVg49m8JWsxh5lMoP5c3D4DhRAaZhvg=
Subject key identifier:   30:CF:0D:6C:A5:2E:B8:E4:A7:19:6C:2F:78:01:04:89:B4:12:34:C1
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Certificate issuer:       /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
Manifest number:          01D7
Signing time:             Thu 23 Jul 2026 04:58:09 +0000
Manifest this update:     Thu 23 Jul 2026 04:58:08 +0000
Manifest next update:     Thu 30 Jul 2026 04:58:08 +0000
Files and hashes:         1: kYy2egJiI43veP8oikXZKB-V0us.crl (hash: XgqYlYYI4kCZeWiiR+DN8xU8KbXweLAnFah8ZVJ6g0c=)
                          2: B36E0BFAB8C511EE9C927072C4F9AE02.roa (hash: wA+tczckO/zrn5MH2HsQzjCssey/VJhgGI0ABCWGh8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
                          rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
        Validity
            Not Before: Jul 23 04:58:08 2026 GMT
            Not After : Jul 30 04:58:08 2026 GMT
        Subject: CN=6a619f61-f0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:41:c6:3a:7f:d0:8f:b4:e8:1d:70:02:e3:
                    8d:c3:21:42:68:2b:06:01:f4:19:4c:4c:be:4b:4e:
                    82:15:bf:cc:32:9e:3f:f9:b4:1f:ff:24:a0:0c:4f:
                    62:f9:e1:91:56:3d:ad:99:09:26:92:f5:22:84:81:
                    b0:bc:60:90:14:75:64:23:49:c0:53:fe:87:d1:51:
                    fd:5d:e8:39:20:38:53:3b:4e:67:85:8a:05:64:d8:
                    5f:db:c2:d2:a7:cb:8d:f5:76:9f:d7:6a:3a:fb:14:
                    67:b3:29:ac:52:09:a3:3e:70:0b:b2:86:59:a9:02:
                    30:62:a5:61:78:10:7e:83:85:42:67:17:5b:35:9f:
                    93:9e:39:52:43:57:ea:c1:41:e0:b2:b3:55:4a:ff:
                    69:db:35:a4:87:dc:e5:e3:6f:b8:52:93:6c:7f:67:
                    a9:7e:e9:dc:b7:b6:7a:68:36:9f:84:e8:b9:38:10:
                    7a:bf:66:06:32:6f:29:97:54:f5:53:a0:ea:21:e2:
                    b3:46:75:de:a0:19:f1:30:ce:42:8d:7c:d6:d2:14:
                    ba:0b:d0:d8:89:b8:e5:72:80:52:36:be:ff:93:cf:
                    07:8f:30:8f:51:9a:19:47:0a:ed:b0:a8:0d:42:fd:
                    7a:c1:ca:71:15:8c:4e:5d:47:de:6f:17:3a:65:cc:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:0D:6C:A5:2E:B8:E4:A7:19:6C:2F:78:01:04:89:B4:12:34:C1
            X509v3 Authority Key Identifier:
                keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:15:38:9e:02:a5:cd:ee:4d:9e:e1:81:ae:6e:9a:cb:ef:da:
         3d:27:6c:4c:8f:37:7e:cb:f1:f2:15:9c:93:42:22:0d:1b:fb:
         78:fe:d6:77:8d:db:99:34:b8:5c:ac:e0:00:92:4c:74:78:7d:
         41:c0:80:cc:a7:ed:5c:ea:e6:7c:96:eb:5d:8b:55:84:bc:33:
         84:cf:6f:9b:68:0b:ae:8a:eb:1a:1d:ee:71:68:80:f8:e1:14:
         c9:c3:25:ba:97:c9:4c:ad:27:32:5f:df:7a:4f:b7:58:9b:bf:
         8d:b8:dd:6b:1e:dd:4f:c6:6d:04:95:32:22:81:db:47:45:f1:
         7c:f1:f1:07:7d:24:ca:7d:82:64:72:bb:9e:f4:19:63:63:dd:
         2c:e2:6a:f5:d2:e6:34:57:40:10:03:b1:3d:c9:d7:6c:ac:3a:
         b2:64:79:e5:3d:c0:54:89:f1:a7:0a:4f:ab:48:24:b9:d0:92:
         c0:81:7e:7f:44:c0:0f:9a:fe:37:b1:1f:73:c8:58:a8:b5:9e:
         ea:73:a4:fa:62:dc:03:30:31:8b:48:37:e2:d9:9b:a7:fa:9c:
         6d:40:67:63:96:05:9f:4a:52:73:8b:b8:0c:d5:a9:b0:01:c9:
         a7:1a:18:40:91:72:47:98:44:ab:0a:fa:ba:50:b5:60:5d:12:
         8e:fd:64:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:26 2026 by rpki-client