Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
File:                     YiiraKJGC9xWaItuVYkXkN2ASxA.mft (raw, json)
Hash identifier:          nGinya3NpLG49P9clmrHoahnQ2j+PjJuYodoJk3K9/o=
Subject key identifier:   7F:44:F1:7F:ED:69:BC:A6:5D:C4:52:0D:32:14:CE:AA:C2:96:83:49
Authority key identifier: 62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10
Certificate issuer:       /CN=A916A285/serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
Manifest number:          027D
Signing time:             Thu 23 Jul 2026 03:02:53 +0000
Manifest this update:     Thu 23 Jul 2026 03:02:52 +0000
Manifest next update:     Thu 30 Jul 2026 03:02:52 +0000
Files and hashes:         1: YiiraKJGC9xWaItuVYkXkN2ASxA.crl (hash: K35qPlIEQOs2bm7Lhw6R5Ahnn13LMQG/md4rCdctnOc=)
                          2: BCAF365487C111F0AC525C39C4F9AE02.roa (hash: qXkatjQdk9/LRncp/cgGtu7Z2Y3FqEqyaJABgXad1Wc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl
                          rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A285, serialNumber=6228AB68A2460BDC56688B6E55891790DD804B10
        Validity
            Not Before: Jul 23 03:02:52 2026 GMT
            Not After : Jul 30 03:02:52 2026 GMT
        Subject: CN=6a61845d-ed28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:5f:bf:c0:23:39:c8:1a:2e:e2:1f:fb:d3:
                    77:76:08:fb:bc:19:fd:38:b6:e2:b5:b4:d3:84:ba:
                    1e:7a:1d:9f:72:d3:a0:9b:ef:bf:e7:ac:38:c7:79:
                    7f:46:14:3f:30:ab:29:fe:88:07:bc:56:32:b3:7b:
                    f2:a9:2a:e7:1e:ed:5c:27:1e:2c:26:07:64:a1:f9:
                    1b:19:14:5d:e4:fa:26:75:67:9b:61:5c:9a:84:99:
                    9c:23:a2:de:84:7d:99:9b:48:6b:ad:34:94:d3:44:
                    f6:d6:2c:cd:ef:5d:88:a7:0e:ad:68:fe:ee:f4:7f:
                    8b:d5:14:fc:84:bb:e4:37:b8:ea:11:e9:b3:e6:bc:
                    84:00:55:8c:da:19:79:6c:a6:41:bd:f6:d4:c8:78:
                    b0:22:65:4c:94:45:60:06:f3:31:20:d3:66:9e:a1:
                    40:d8:20:79:8b:94:95:a3:1f:5b:16:a6:72:67:ee:
                    23:6e:76:f6:9b:e5:a0:84:c0:9b:db:70:40:77:18:
                    35:a1:70:25:96:34:77:a9:fe:73:2b:88:8e:7a:34:
                    e2:a8:04:90:53:03:7f:45:df:73:88:94:84:62:f5:
                    3a:35:e1:8a:af:eb:c3:bb:51:0f:61:76:4c:bb:41:
                    00:a1:14:96:b3:2f:05:4e:ef:47:2b:e0:97:75:28:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:44:F1:7F:ED:69:BC:A6:5D:C4:52:0D:32:14:CE:AA:C2:96:83:49
            X509v3 Authority Key Identifier:
                keyid:62:28:AB:68:A2:46:0B:DC:56:68:8B:6E:55:89:17:90:DD:80:4B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiiraKJGC9xWaItuVYkXkN2ASxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A285/E8192038B97A11EDA285A554C4F9AE02/YiiraKJGC9xWaItuVYkXkN2ASxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:12:5a:b7:83:c9:d8:c6:a9:9c:2f:3f:61:ff:8c:78:cb:e7:
         f3:8b:94:c0:c6:9e:49:45:6c:6e:1e:03:49:f2:36:67:d7:dc:
         aa:8b:d1:3c:4d:7c:2c:d0:ba:d4:0f:33:44:ca:48:9e:4c:fe:
         fb:9f:9a:24:40:cf:17:c8:90:6d:94:91:a2:59:1e:5f:c5:b6:
         f3:57:bd:f5:c8:6a:5e:5c:71:ad:03:c6:0d:d5:62:fa:9a:c3:
         54:c8:b3:30:73:8b:36:73:75:9c:15:41:76:58:fc:da:10:7a:
         e4:06:5f:71:57:18:1f:bc:da:9e:5e:58:2d:e2:c6:1d:1e:69:
         5b:b6:cb:a3:1d:e7:8f:c5:0f:cb:a1:a1:1f:26:92:7c:22:86:
         74:ea:44:b2:27:34:16:1b:6e:3a:4a:7d:24:e2:83:3c:1d:33:
         fd:90:58:6c:48:e3:a6:e5:18:c7:ab:5e:65:9a:34:54:db:c4:
         23:c0:07:10:bb:ac:7f:97:bd:d9:48:33:a5:47:b6:b7:8b:28:
         68:c7:24:42:eb:91:9f:5c:89:29:8e:59:19:f9:37:66:e4:56:
         38:ce:3a:a0:c8:99:9b:54:24:4f:04:d8:78:66:5d:d2:b2:94:
         36:b8:b7:1d:41:16:bd:20:63:16:8d:25:cb:b9:09:e2:f6:2c:
         b0:0a:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:44:09 2026 by rpki-client