Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
File:                     RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft (raw, json)
Hash identifier:          QJjy41Ho1X1t474DWGtuLltUVO1c8K8/Ik9ME+DJhR4=
Subject key identifier:   99:C6:FE:A4:D7:5E:7D:33:8B:C9:9F:82:9A:14:48:B6:21:84:76:F2
Authority key identifier: 45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34
Certificate issuer:       /CN=A9174589/serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
Manifest number:          0220
Signing time:             Thu 23 Jul 2026 04:15:29 +0000
Manifest this update:     Thu 23 Jul 2026 04:15:28 +0000
Manifest next update:     Thu 30 Jul 2026 04:15:28 +0000
Files and hashes:         1: RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl (hash: aMnq9nFQFOBZXvM06HamRjgsA26CS03wfEQ/5JA7XDQ=)
                          2: 5D4FB6AA9AB711EE86E1D058C4F9AE02.roa (hash: seH3uLVyenLg2bSXDJ2MdCspTAAmDFjab4salTa2p94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl
                          rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174589, serialNumber=458CDDCA3E8FB64C9D1A23492528BA777FCDD234
        Validity
            Not Before: Jul 23 04:15:28 2026 GMT
            Not After : Jul 30 04:15:28 2026 GMT
        Subject: CN=6a619561-d6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:31:ed:48:f7:5a:90:82:20:33:3e:d1:b4:0d:
                    9d:14:b6:5f:62:32:f5:21:6a:04:90:ff:dc:fa:66:
                    b7:8e:f9:67:1c:f4:9b:1b:b9:05:fb:06:93:98:48:
                    1b:22:bb:4e:0c:b9:99:08:ec:29:90:10:7e:c6:61:
                    46:5a:42:fe:48:c1:d0:99:6b:39:9b:f1:aa:a2:00:
                    0d:28:55:2e:df:51:b7:27:55:45:55:85:cd:51:94:
                    b9:c4:bd:ea:21:e3:3b:3c:24:15:c6:8d:44:d9:f6:
                    c8:04:08:6a:83:41:5e:fc:26:32:e4:a4:45:df:32:
                    f2:b3:a1:62:7f:59:8b:ca:8b:89:2a:ec:60:92:f0:
                    9a:11:35:de:03:f6:61:e2:5a:21:57:3d:d5:01:6d:
                    03:15:f5:98:36:e9:1c:c9:35:b7:91:50:87:99:c7:
                    75:42:e2:a8:8b:6b:ce:76:c2:fa:3a:18:f4:09:a4:
                    85:5e:c2:d3:2c:78:b3:91:f0:af:2b:59:24:ec:26:
                    86:f0:b2:19:f7:c6:f0:bf:7b:ec:2c:92:87:33:2e:
                    78:78:fa:4a:6f:12:5d:fe:66:ad:82:ab:66:98:c5:
                    32:56:dd:d8:77:d9:34:d2:58:25:dc:91:a1:27:d8:
                    43:a6:b8:0f:e0:41:b4:9e:93:65:ce:9b:21:24:60:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:FE:A4:D7:5E:7D:33:8B:C9:9F:82:9A:14:48:B6:21:84:76:F2
            X509v3 Authority Key Identifier:
                keyid:45:8C:DD:CA:3E:8F:B6:4C:9D:1A:23:49:25:28:BA:77:7F:CD:D2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYzdyj6PtkydGiNJJSi6d3_N0jQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174589/5FC627C461C411EEBB151C4BC4F9AE02/RYzdyj6PtkydGiNJJSi6d3_N0jQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:ce:50:10:14:6c:75:fa:35:65:b5:cf:82:bf:db:81:b9:
         4a:4d:ea:02:97:81:2b:6a:ae:2c:77:80:90:8b:1a:56:f7:d9:
         cf:41:1e:5f:49:15:e7:45:f3:92:85:63:34:f7:1c:60:ef:12:
         6b:d6:ab:d6:54:50:59:9e:e0:d4:1b:29:7b:d5:0a:fe:ab:8f:
         11:cd:8f:55:52:84:e3:db:de:8b:08:77:63:c0:65:8d:8e:c3:
         07:e4:dc:5d:73:d2:c9:2f:5f:e7:a4:bc:14:58:b8:0b:e5:44:
         c3:4c:c7:69:d9:7b:d2:80:65:80:1c:66:77:32:56:bb:f5:ae:
         e5:cc:1d:d6:4d:e1:42:23:a9:f7:11:c6:ae:0a:67:f6:67:b0:
         34:0a:8f:4e:c3:f0:c5:4e:69:d5:3f:a2:b8:ab:00:7e:64:82:
         85:ad:b6:2e:56:63:7b:f4:c4:2d:7c:e8:f3:20:7c:39:c9:d0:
         fb:5a:8b:52:dd:2e:1e:e7:64:34:04:7c:2b:9d:1e:1a:a1:e3:
         09:6f:e0:52:4f:1f:3c:e3:89:be:a7:2c:d1:09:fa:ab:13:70:
         bd:3c:ba:d7:d6:30:80:04:c8:ba:43:83:91:29:81:74:e4:69:
         c1:fe:9d:ae:79:63:44:ae:50:1a:a0:13:a2:ec:3c:ff:0e:cc:
         df:5f:15:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ1ODkxMTAvBgNVBAUTKDQ1OENERENBM0U4RkI2NEM5RDFBMjM0OTI1MjhCQTc3
N0ZDREQyMzQwHhcNMjYwNzIzMDQxNTI4WhcNMjYwNzMwMDQxNTI4WjAYMRYwFAYD
VQQDEw02YTYxOTU2MS1kNmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jHtSPdakIIgMz7RtA2dFLZfYjL1IWoEkP/c+ma3jvlnHPSbG7kF+waTmEgb
IrtODLmZCOwpkBB+xmFGWkL+SMHQmWs5m/GqogANKFUu31G3J1VFVYXNUZS5xL3q
IeM7PCQVxo1E2fbIBAhqg0Fe/CYy5KRF3zLys6Fif1mLyouJKuxgkvCaETXeA/Zh
4lohVz3VAW0DFfWYNukcyTW3kVCHmcd1QuKoi2vOdsL6Ohj0CaSFXsLTLHizkfCv
K1kk7CaG8LIZ98bwv3vsLJKHMy54ePpKbxJd/matgqtmmMUyVt3Yd9k00lgl3JGh
J9hDprgP4EG0npNlzpshJGBBhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnG/qTX
Xn0zi8mfgpoUSLYhhHbyMB8GA1UdIwQYMBaAFEWM3co+j7ZMnRojSSUound/zdI0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDU4OS81RkM2MjdDNDYx
QzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRreWRHaU5KSlNpNmQzX04w
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JZemR5ajZQdGt5ZEdpTkpKU2k2ZDNfTjBqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDU4OS81RkM2MjdDNDYxQzQxMUVFQkIxNTFDNEJDNEY5QUUwMi9SWXpkeWo2UHRr
eWRHaU5KSlNpNmQzX04walEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAp9/OUBAUbHX6NWW1z4K/24G5Sk3qApeBK2quLHeAkIsaVvfZz0EeX0kV50Xz
koVjNPccYO8Sa9ar1lRQWZ7g1Bspe9UK/quPEc2PVVKE49veiwh3Y8BljY7DB+Tc
XXPSyS9f56S8FFi4C+VEw0zHadl70oBlgBxmdzJWu/Wu5cwd1k3hQiOp9xHGrgpn
9mewNAqPTsPwxU5p1T+iuKsAfmSCha22LlZje/TELXzo8yB8OcnQ+1qLUt0uHudk
NAR8K50eGqHjCW/gUk8fPOOJvqcs0Qn6qxNwvTy619YwgATIukODkSmBdORpwf6d
rnljRK5QGqATouw8/w7M318VLA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:37 2026 by rpki-client