Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
File:                     _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json)
Hash identifier:          ynkXleJxYwSitahCL/AvXptfkRi+Ua8PawX6zMep6z4=
Subject key identifier:   7B:4F:8C:0D:F9:17:43:63:54:44:2E:B8:01:28:CE:4D:DC:17:22:19
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Certificate issuer:       /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial:       0D23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
Manifest number:          0D1A
Signing time:             Wed 22 Jul 2026 18:26:03 +0000
Manifest this update:     Wed 22 Jul 2026 18:26:02 +0000
Manifest next update:     Wed 29 Jul 2026 18:26:02 +0000
Files and hashes:         1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: +Te7/uqvSKavBocnixKdbmPbKCIVZieKF2TgNu7gIa0=)
                          2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
                          rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3363 (0xd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
        Validity
            Not Before: Jul 22 18:26:02 2026 GMT
            Not After : Jul 29 18:26:02 2026 GMT
        Subject: CN=6a610b3b-92a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:91:6e:10:f1:dd:91:f5:5a:44:91:1e:7c:
                    d5:da:db:ff:53:76:2f:1b:57:8b:53:be:a7:d1:ff:
                    18:7f:f4:4d:0b:8c:90:93:17:1f:01:8c:26:88:2a:
                    52:bb:31:ae:bc:62:6e:dd:16:5b:9a:2d:91:1e:4d:
                    ed:b8:96:b0:a0:6a:f8:f4:b6:ac:dc:24:ab:15:59:
                    61:c9:16:5c:ca:9d:8d:fa:7a:7a:bf:2e:be:c0:38:
                    d8:d7:01:f5:c7:3c:3d:b3:66:0a:6a:4c:6e:e4:81:
                    a6:de:e6:2e:74:3b:db:09:02:20:7f:9a:40:6c:96:
                    64:62:10:80:4d:bc:87:2d:26:21:90:ba:8c:46:0e:
                    9c:35:ff:33:7d:e7:35:e1:c9:02:03:4e:93:81:15:
                    6e:db:b0:20:69:dd:ba:f6:a4:38:32:7b:7d:94:cd:
                    cb:17:84:ee:24:1f:9c:1d:a3:c1:e0:c2:5e:e8:a1:
                    2d:09:d7:18:73:13:ca:7c:72:ee:8a:ef:21:10:99:
                    ba:06:7f:fc:8b:6c:c4:e7:49:cb:1f:f8:1a:84:0a:
                    9f:63:db:54:ca:bd:74:ea:1c:8d:5c:96:71:ac:fc:
                    d6:78:e9:93:b6:5c:05:4f:8a:6c:8f:26:e1:27:9d:
                    9d:3b:33:3d:04:4c:d4:34:7f:a6:07:ef:fd:00:7e:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4F:8C:0D:F9:17:43:63:54:44:2E:B8:01:28:CE:4D:DC:17:22:19
            X509v3 Authority Key Identifier:
                keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:cd:5c:e0:61:0c:bc:44:52:6c:bf:7c:50:5c:60:12:77:
         8a:6e:90:f7:8f:4c:cc:bb:5a:3e:bc:de:19:30:70:b5:b4:23:
         a8:51:0f:33:33:33:b7:9f:0e:74:7d:d3:c8:fe:ef:98:91:1c:
         23:8b:13:8b:a4:f7:29:f7:81:20:b1:9e:18:00:90:f9:56:80:
         15:06:fb:28:00:3b:5e:f2:be:8c:7d:8c:f1:63:28:7e:69:c2:
         a8:42:ef:66:dd:75:9f:4b:e1:59:ae:1b:ac:60:55:6a:4c:1e:
         85:db:f2:1e:21:c2:38:d2:06:22:af:e8:bb:cc:1f:11:66:02:
         6e:b1:89:bc:0f:ac:6e:a3:b0:3f:18:bc:3e:9b:6b:79:33:9a:
         31:85:94:fe:b0:88:e4:93:ae:b3:e2:2c:9b:34:5f:fd:8f:cc:
         6a:08:d4:48:f6:e9:01:5c:94:6a:77:db:d5:4f:71:d0:00:e7:
         ca:aa:71:f9:d1:fc:6f:b7:ff:08:99:28:5a:fc:6c:e8:2a:6d:
         8a:5e:54:96:76:48:40:c4:e7:95:bc:94:17:03:b4:ef:5f:61:
         a9:ec:cb:81:3a:65:57:30:1d:32:56:85:60:35:16:2e:cc:8d:
         49:07:63:54:80:d5:ba:c3:57:8c:3b:ec:98:b1:e4:e3:c6:b4:
         d8:ce:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:19 2026 by rpki-client