Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File:                     yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier:          Uv55z9yiCg9ktcthWsEtALKYOjfndEX8jVr4YOwvEfE=
Subject key identifier:   61:17:A9:DD:25:72:E8:83:A2:ED:D0:82:47:2E:3F:F6:37:1D:F6:DF
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer:       /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number:          58
Signing time:             Thu 23 Jul 2026 10:12:20 +0000
Manifest this update:     Thu 23 Jul 2026 10:12:19 +0000
Manifest next update:     Thu 30 Jul 2026 10:12:19 +0000
Files and hashes:         1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: aN+bGrayf6YSP5j0PLpgeO8nwWZl1U6TqCu2UQQa6gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
                          rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
        Validity
            Not Before: Jul 23 10:12:19 2026 GMT
            Not After : Jul 30 10:12:19 2026 GMT
        Subject: CN=6a61e903-74a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:de:7e:da:f0:3c:9f:b6:cb:41:3e:fa:87:2c:
                    d5:51:c2:e9:52:cc:85:4b:e6:b2:0a:f6:51:cf:a4:
                    e4:e9:b8:be:73:5f:17:c3:99:88:c0:3b:ec:de:c1:
                    2b:89:44:f9:61:48:52:3e:0c:f6:2b:84:59:6f:d9:
                    5b:39:1f:0b:b9:6c:fd:d6:01:73:b1:0b:32:9e:55:
                    36:ee:f5:ec:6a:f5:fb:48:fe:c8:5d:38:ec:08:0d:
                    ab:6a:58:7f:8c:c1:5a:78:cc:3f:e7:3b:37:fd:45:
                    46:eb:35:e6:98:7a:0f:fa:0a:20:9c:7b:f4:b2:5b:
                    b2:59:3b:b5:63:26:1c:80:11:d8:3f:2d:a1:83:43:
                    58:c5:78:88:50:5e:37:f4:26:0a:82:7d:96:a7:f0:
                    ca:6f:a4:69:6e:3e:ea:08:03:30:cf:f3:22:82:90:
                    65:53:8d:be:4c:58:bb:67:25:c2:38:b3:62:b0:19:
                    e4:8f:32:76:46:b4:69:a4:04:3f:f1:5c:1f:2c:3b:
                    85:f0:52:88:cb:fb:1f:89:5f:bc:a9:e6:6a:0c:07:
                    f0:f9:47:b8:93:b8:c4:46:4c:cf:15:c1:56:ca:3d:
                    50:4b:53:57:c9:b1:65:7a:51:44:f8:09:0b:52:6c:
                    3b:3a:c3:f7:34:99:1a:d8:84:18:ae:d1:c0:b0:08:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:17:A9:DD:25:72:E8:83:A2:ED:D0:82:47:2E:3F:F6:37:1D:F6:DF
            X509v3 Authority Key Identifier:
                keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:dd:9d:8a:0b:aa:f8:c1:e5:74:64:59:82:cc:e3:65:4c:
         87:dc:d8:83:af:6a:b3:d6:68:b4:22:05:2a:d3:af:00:47:18:
         73:ba:f5:05:e3:75:80:b8:c8:9f:51:86:6d:af:b7:07:20:fc:
         0c:dd:2f:56:e0:f2:29:8c:6d:4e:00:4f:36:99:dc:30:21:ae:
         df:0d:74:7a:32:ec:35:c8:35:b8:dd:a1:39:62:0f:35:eb:f0:
         4a:31:a3:21:e5:31:ae:6c:10:99:a1:f0:12:38:31:18:37:4a:
         32:a4:5e:c0:5c:8e:a9:52:22:4d:ab:8a:98:fb:e1:2e:0b:89:
         b5:5f:10:9e:e3:e7:c3:7b:ab:b9:14:f9:c7:fc:3c:0d:b4:bf:
         e3:9e:14:1b:93:04:71:85:9e:db:a4:a8:a6:87:21:86:c8:27:
         7f:6e:d7:c3:d0:d6:75:35:56:98:cb:2a:f4:53:da:e5:6d:c1:
         ef:db:94:ff:c3:b6:14:77:fa:7a:d5:72:df:a1:ca:ea:f5:8d:
         82:7d:ea:2b:d4:7c:72:27:07:d5:43:b5:c9:c2:1d:36:28:10:
         86:99:41:08:36:14:13:54:1c:b6:ea:62:01:93:47:8c:58:b0:
         70:26:99:45:54:ca:68:f5:fd:22:79:be:90:61:83:60:1c:c3:
         0f:44:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:25 2026 by rpki-client