Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
File:                     cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft (raw, json)
Hash identifier:          ag4nQ9EFlo6+rWfYfX+dWLwlUTuRuz20s3lgao2SGdc=
Subject key identifier:   2C:ED:1F:3B:B6:1F:F0:45:A9:F9:F9:F3:BB:39:8B:4C:E6:DB:A5:BA
Authority key identifier: 71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7
Certificate issuer:       /CN=A917174E/serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
Certificate serial:       0EE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
Manifest number:          0EE1
Signing time:             Wed 22 Jul 2026 17:49:28 +0000
Manifest this update:     Wed 22 Jul 2026 17:49:28 +0000
Manifest next update:     Wed 29 Jul 2026 17:49:28 +0000
Files and hashes:         1: cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl (hash: ObpPfwzTdYVFRnlisv56kyjfv/UXmFO2W29SNwO44tw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl
                          rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3810 (0xee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917174E, serialNumber=718073098AF0396FD8E3309A1B9FB6F3EEB17AE7
        Validity
            Not Before: Jul 22 17:49:28 2026 GMT
            Not After : Jul 29 17:49:28 2026 GMT
        Subject: CN=6a6102a8-9f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:a6:11:28:4b:c8:52:f2:d2:35:ce:cf:a9:
                    04:94:43:7c:bf:ac:8b:ff:09:d7:30:a3:c5:60:5a:
                    f4:dc:a1:f0:39:54:5e:0f:b7:e1:14:12:3b:a6:73:
                    49:de:4d:9c:21:b7:18:b3:f3:92:43:83:5c:65:6b:
                    65:b4:e3:88:0c:f3:87:96:43:ad:97:42:86:62:ba:
                    37:fd:4e:9c:51:a2:d8:aa:11:7d:28:6c:7e:8e:3a:
                    30:49:20:c3:6b:fa:e3:54:05:8e:0d:87:27:b5:0f:
                    4e:54:bd:20:57:89:a3:fc:e7:6f:c6:48:56:9d:48:
                    db:58:cd:68:45:b6:1e:3b:0d:a5:17:76:05:35:a7:
                    f6:d6:af:c0:89:7a:37:e1:b9:77:b5:41:55:51:04:
                    b5:a8:c6:91:a5:09:82:47:0e:c0:07:9d:bb:02:bd:
                    67:24:7a:e9:95:05:0d:c7:3d:3d:02:5c:d8:7a:dd:
                    8e:8a:5c:4a:d2:85:45:a4:5e:da:d5:fe:20:1b:0f:
                    67:d2:da:25:48:36:06:26:4f:df:20:7c:a3:7e:f4:
                    a1:60:9d:f4:97:dc:55:0f:92:90:33:9d:e5:4c:e4:
                    f0:b9:00:ca:90:30:cd:a5:80:f2:38:20:71:b3:58:
                    a3:a5:f6:45:0e:7f:9f:6e:31:5f:8e:64:08:d9:42:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:ED:1F:3B:B6:1F:F0:45:A9:F9:F9:F3:BB:39:8B:4C:E6:DB:A5:BA
            X509v3 Authority Key Identifier:
                keyid:71:80:73:09:8A:F0:39:6F:D8:E3:30:9A:1B:9F:B6:F3:EE:B1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYBzCYrwOW_Y4zCaG5-28-6xeuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917174E/54AA149CAAF611E99C5EE259C4F9AE02/cYBzCYrwOW_Y4zCaG5-28-6xeuc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c1:9b:da:c0:ed:27:cc:66:e1:47:92:f7:5e:bd:0d:a9:d0:
         bf:6b:ce:0d:e3:85:3d:ff:3e:90:a3:93:2c:ae:f5:a7:87:26:
         9c:92:22:b7:e9:7e:15:15:0c:7c:d8:5e:74:e6:78:67:d8:51:
         3b:8b:f9:c7:f1:30:79:20:f7:7f:ed:9a:69:20:2c:35:c2:25:
         1b:14:3c:3a:34:34:64:65:01:03:5b:43:01:3c:95:49:42:5f:
         83:47:ae:a0:81:c0:4d:10:92:bc:4a:ab:45:b8:92:f8:f8:7b:
         33:ea:a6:5c:f5:72:84:d3:90:d4:eb:76:c5:d5:73:a3:de:f8:
         4b:4f:cb:ed:a7:40:ba:82:c7:2d:2a:e9:c9:2c:6a:69:70:e5:
         5c:33:ad:ab:b4:37:91:01:be:4a:12:ff:c1:b5:d3:82:d8:32:
         1f:7b:e0:ff:b5:74:2c:21:25:0e:ef:11:4f:e6:86:d6:a6:bc:
         37:44:3a:01:ef:88:fc:1b:8a:03:c6:0b:37:41:96:1d:97:4e:
         7b:50:68:0d:90:2e:60:7f:71:58:83:61:7b:0c:5c:38:1f:78:
         b1:b9:34:a3:27:18:10:e6:47:b7:ee:a3:c6:8d:9e:c5:97:cf:
         98:da:06:fe:62:3d:24:9c:1c:bd:fe:28:73:29:3c:f5:d8:b1:
         e8:19:b2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:01 2026 by rpki-client