Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File:                     1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier:          Yt55AwM/XuexO4eKFGDGGsuyvD5WBm3KccVrdjQCBvc=
Subject key identifier:   2A:44:10:C6:60:7A:A6:05:05:28:E9:DF:0D:B9:72:3D:6C:23:DF:9C
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer:       /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number:          68
Signing time:             Thu 23 Jul 2026 09:56:51 +0000
Manifest this update:     Thu 23 Jul 2026 09:56:51 +0000
Manifest next update:     Thu 30 Jul 2026 09:56:51 +0000
Files and hashes:         1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: Sl93zwKO0RkZHw/KnUwWtR2OFv3AKy4PttS58IgMhsA=)
                          2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
                          rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
        Validity
            Not Before: Jul 23 09:56:51 2026 GMT
            Not After : Jul 30 09:56:51 2026 GMT
        Subject: CN=6a61e563-5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:d6:98:35:10:3c:d1:78:f2:8a:04:11:4a:
                    c9:90:bb:06:c1:89:bb:74:c6:dd:31:0a:a2:60:a9:
                    da:ef:67:e2:ea:25:57:b3:28:74:e9:29:6d:5e:bf:
                    7f:f1:c0:22:98:04:9c:88:15:23:7b:75:7b:cd:33:
                    24:3c:a0:84:a9:77:ff:c8:da:aa:41:e0:6b:42:05:
                    32:88:8e:68:53:48:45:96:86:1b:a0:a3:d6:78:91:
                    e2:b2:a2:3a:cb:42:54:5a:b3:0a:0c:67:64:e3:8b:
                    38:5d:95:fc:b2:7d:26:01:65:bc:53:a7:c3:51:d8:
                    c5:e2:61:65:8c:c4:38:12:77:8f:86:60:0e:07:10:
                    f1:50:ca:01:bc:97:83:7c:8a:6e:ee:25:84:fc:cd:
                    e4:7f:24:c5:f7:92:92:c7:68:ef:22:49:7e:73:44:
                    bf:ef:67:07:ae:66:23:db:b8:89:40:57:70:55:dd:
                    46:52:7b:8d:58:81:6d:1f:9c:b3:fc:ab:43:49:62:
                    29:e9:50:6e:a5:02:fb:1e:93:1c:67:37:87:9d:6f:
                    f2:79:98:5b:d0:d8:02:0b:26:d0:6e:47:3b:d1:8f:
                    26:f8:a9:46:c5:63:f1:72:70:8a:b5:a8:5d:f0:8b:
                    8d:61:d4:9e:5a:89:0f:05:34:cd:a5:81:93:27:37:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:10:C6:60:7A:A6:05:05:28:E9:DF:0D:B9:72:3D:6C:23:DF:9C
            X509v3 Authority Key Identifier:
                keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:00:bb:f2:38:49:32:35:33:ea:db:94:a8:33:0a:b3:0a:84:
         9a:27:9c:a2:0e:f7:e2:e0:f1:19:b0:64:e1:e0:af:6a:ed:f3:
         6c:d6:49:ec:34:aa:ca:65:53:00:88:13:1e:a3:6d:ab:a5:bf:
         f5:b3:dd:ea:b1:76:db:b2:76:65:28:8e:9c:5a:48:cd:52:6e:
         c4:1f:38:ac:74:01:11:4e:c8:70:71:d4:34:c3:58:3d:47:69:
         0a:88:22:3c:85:e3:2e:0b:e9:b5:3d:df:c5:91:2d:bb:14:cf:
         50:b0:9c:c1:2a:d4:ed:8d:a5:bf:cc:ed:e5:90:8d:d6:f2:4e:
         38:12:98:b8:d8:64:6f:c9:52:3b:65:73:15:b0:95:c3:35:91:
         06:3a:a2:a7:fe:fc:e0:78:aa:2e:9c:7b:0c:28:4a:34:6d:8a:
         b2:a5:fd:eb:5d:4e:bb:a4:c7:93:e7:7a:ac:c8:24:64:68:e4:
         41:01:4b:5e:8e:43:20:14:37:d4:7c:e3:34:9d:df:d6:43:26:
         47:0e:fe:10:8d:29:8a:dc:41:b0:38:83:35:13:9c:96:8c:72:
         f6:98:71:56:59:2a:8d:10:bc:c9:e4:9c:9e:e5:49:17:f8:fd:
         05:96:13:7b:75:42:73:5a:68:31:aa:0c:04:86:fc:1a:f9:a4:
         f6:02:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:33 2026 by rpki-client