Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          d9JmqKLNirRxidLkDQad5q/JMc4jPbDN2Qv8774JJTs=
Subject key identifier:   7D:DB:6E:6A:04:37:56:30:74:EF:34:62:0A:80:37:41:71:5D:50:56
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          CD
Signing time:             Thu 23 Jul 2026 08:36:38 +0000
Manifest this update:     Thu 23 Jul 2026 08:36:37 +0000
Manifest next update:     Thu 30 Jul 2026 08:36:37 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: GtCcpfaR2PNheS5agYcilfsXcH+D4Tdc5eBP4Ix2E48=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Jul 23 08:36:37 2026 GMT
            Not After : Jul 30 08:36:37 2026 GMT
        Subject: CN=6a61d296-d101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:c2:86:08:af:72:7c:5d:df:cf:8f:f7:9c:
                    03:e3:2c:40:b4:06:cc:6a:5e:7a:30:0a:a7:fb:85:
                    53:26:77:fc:74:7e:5d:0a:40:73:c7:0e:f3:f3:5a:
                    b2:e1:2f:ba:ff:39:59:ad:2e:9e:48:69:18:d0:e8:
                    a0:aa:02:70:9d:f2:4c:f6:7b:fc:fb:c5:6d:c1:a5:
                    6a:c1:16:69:e0:53:12:5a:a2:bd:79:e1:b3:8f:88:
                    41:67:cd:54:0d:df:2e:b9:d9:8f:a0:4e:b7:78:db:
                    d4:d0:4c:e1:93:e7:35:76:ad:45:9c:0b:a0:aa:cf:
                    cb:5e:3a:89:b6:ce:c9:99:e4:1c:a0:8c:56:b2:7b:
                    4d:8a:1a:0f:02:c5:20:45:53:46:04:1d:3d:b8:27:
                    a1:e0:bb:a3:0a:0a:55:00:c9:1d:ad:b2:2f:7e:5a:
                    74:05:9f:09:8f:df:a4:22:da:92:9d:ab:7a:c9:f2:
                    91:d2:64:a7:ca:b0:81:87:b3:d9:45:d8:ba:01:26:
                    3f:f2:dd:ff:d3:e0:5c:cf:3b:ff:db:d7:de:9e:a5:
                    c0:5f:84:cc:69:45:47:1b:78:92:f5:db:10:49:f5:
                    a8:c7:41:07:58:c7:3f:0b:7b:14:e6:8f:2b:b9:90:
                    3c:44:cd:c7:ba:89:71:fd:06:be:89:bf:3c:5f:c5:
                    57:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:6E:6A:04:37:56:30:74:EF:34:62:0A:80:37:41:71:5D:50:56
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:3f:8e:60:11:d3:cb:c8:d6:31:c0:18:3b:f1:35:76:ae:
         87:7d:34:c5:c6:12:63:d7:8e:e4:74:3a:49:a0:df:4d:c1:43:
         b0:5f:81:2f:c4:8a:ed:1c:94:a6:80:14:c5:6c:a9:6c:17:83:
         47:4e:68:66:a2:15:ef:b6:b3:ad:67:ca:78:53:a3:ba:c8:47:
         7a:5f:94:58:f5:4a:83:d9:92:eb:9f:cc:d6:56:0a:92:b6:ac:
         22:90:01:ed:5d:38:5a:c8:b2:54:27:86:db:2f:4f:bd:5c:2b:
         0d:88:20:2a:0e:b1:23:f1:c2:a1:ae:bf:e1:88:81:d5:2f:9d:
         78:1b:50:61:70:4f:50:18:b0:46:fc:6b:b1:88:ff:95:13:96:
         d9:a4:d1:f9:c0:4e:6d:4c:e6:3b:07:8d:83:55:60:a2:d8:03:
         4c:75:db:34:70:ed:69:75:f6:89:6f:af:72:f5:09:83:9f:2e:
         90:58:23:f0:f6:81:d8:12:cb:24:bd:1e:ed:e4:3a:2a:f6:83:
         5e:71:13:b6:e4:9b:16:76:30:b2:e5:7a:64:6e:c3:bc:7c:35:
         18:cb:49:ac:85:63:7a:3a:f0:8b:26:bd:10:50:1a:58:20:50:
         21:55:ea:98:e4:c0:db:07:dc:cd:aa:73:c0:72:01:42:77:1e:
         ec:59:e1:6e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc5OUMxMTAvBgNVBAUTKDYwMDI1MEY2MzgzNkZCNEMyRjIzRjQ4N0Q3MTRCRjMy
Rjc1OUE1QjUwHhcNMjYwNzIzMDgzNjM3WhcNMjYwNzMwMDgzNjM3WjAYMRYwFAYD
VQQDEw02YTYxZDI5Ni1kMTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9bXChgivcnxd38+P95wD4yxAtAbMal56MAqn+4VTJnf8dH5dCkBzxw7z81qy
4S+6/zlZrS6eSGkY0OigqgJwnfJM9nv8+8VtwaVqwRZp4FMSWqK9eeGzj4hBZ81U
Dd8uudmPoE63eNvU0Ezhk+c1dq1FnAugqs/LXjqJts7JmeQcoIxWsntNihoPAsUg
RVNGBB09uCeh4LujCgpVAMkdrbIvflp0BZ8Jj9+kItqSnat6yfKR0mSnyrCBh7PZ
Rdi6ASY/8t3/0+Bczzv/29fenqXAX4TMaUVHG3iS9dsQSfWox0EHWMc/C3sU5o8r
uZA8RM3Huolx/Qa+ib88X8VXlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH3bbmoE
N1YwdO80YgqAN0FxXVBWMB8GA1UdIwQYMBaAFGACUPY4NvtMLyP0h9cUvzL3WaW1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Nzk5Qy8zNUVCRDhFODU1
NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9ZQUpROWpnMi0wd3ZJX1NIMXhTX012ZFpw
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lBSlE5amcyLTB3dklfU0gxeFNfTXZkWnBiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Nzk5Qy8zNUVCRDhFODU1NDQxMUYwOTM0MkFDMENDNEY5QUUwMi9ZQUpROWpnMi0w
d3ZJX1NIMXhTX012ZFpwYlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF8U/jmAR08vI1jHAGDvxNXauh300xcYSY9eO5HQ6SaDfTcFDsF+BL8SK7RyU
poAUxWypbBeDR05oZqIV77azrWfKeFOjushHel+UWPVKg9mS65/M1lYKkrasIpAB
7V04WsiyVCeG2y9PvVwrDYggKg6xI/HCoa6/4YiB1S+deBtQYXBPUBiwRvxrsYj/
lROW2aTR+cBObUzmOweNg1VgotgDTHXbNHDtaXX2iW+vcvUJg58ukFgj8PaB2BLL
JL0e7eQ6KvaDXnETtuSbFnYwsuV6ZG7DvHw1GMtJrIVjejrwiya9EFAaWCBQIVXq
mOTA2wfczapzwHIBQnce7Fnhbg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:50:30 2026 by rpki-client