Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File:                     1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier:          zoWfqEY2i4C5zhV27D90u4We4pj5TG4rKw1i7qrDabI=
Subject key identifier:   7E:BF:C4:BE:02:9C:66:30:21:9B:EE:EB:63:91:75:7F:51:63:CC:EE
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer:       /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial:       0270
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number:          026A
Signing time:             Thu 23 Jul 2026 03:15:48 +0000
Manifest this update:     Thu 23 Jul 2026 03:15:47 +0000
Manifest next update:     Thu 30 Jul 2026 03:15:47 +0000
Files and hashes:         1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: beEgdLM9/Kyf0xCopPGSfC7PH7kmY9/aTXLQFfQCIIk=)
                          2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: Jyx2g2LuWi9RChNnQzsKyfqbLFT8q1vzBpyZSYuRyps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
                          rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624 (0x270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
        Validity
            Not Before: Jul 23 03:15:47 2026 GMT
            Not After : Jul 30 03:15:47 2026 GMT
        Subject: CN=6a618764-60f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:9f:f2:8b:8b:56:b9:66:51:8b:46:1d:cf:
                    8b:cc:cd:2d:70:18:b4:7d:28:c1:58:a1:78:9c:1d:
                    21:90:93:fe:d9:3e:51:b8:04:19:8c:68:7e:47:b6:
                    eb:00:8e:41:e0:d5:b2:03:e4:a1:4f:da:42:80:b6:
                    84:bb:e4:25:14:6e:57:50:74:94:a0:31:bf:d1:5f:
                    5f:53:2b:07:c9:cf:22:1b:4b:17:71:ff:a0:d0:b0:
                    a7:73:86:12:bc:5a:6b:41:66:04:43:76:f0:ac:65:
                    ef:5b:1b:f7:40:d0:1b:ca:3a:13:c3:bf:51:f4:54:
                    cb:af:70:a9:d9:3c:f6:4e:6b:fa:89:b6:41:3e:fe:
                    61:09:62:4d:77:8b:13:2f:a8:66:76:6e:5f:fd:d0:
                    0f:50:2e:72:c0:16:8f:df:65:70:1d:9a:d0:d5:08:
                    4d:2c:65:d4:66:80:f7:c1:a4:bf:0c:18:bf:f2:86:
                    53:ea:9e:ef:77:a0:b7:d7:7e:4a:44:02:8c:08:97:
                    3e:87:34:4d:7b:43:01:ed:b3:84:3e:ff:1b:06:25:
                    08:a5:0e:92:9f:af:ec:e8:83:9e:f1:75:9a:6c:45:
                    3d:8e:54:70:5e:99:2f:42:c6:ee:cb:67:46:5c:d1:
                    74:76:84:30:b9:e9:6a:0b:80:66:c6:af:8d:0b:6e:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BF:C4:BE:02:9C:66:30:21:9B:EE:EB:63:91:75:7F:51:63:CC:EE
            X509v3 Authority Key Identifier:
                keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3e:44:fa:01:de:ab:c2:8a:4a:41:92:c0:04:9a:3f:74:b5:
         e8:50:30:bd:f1:8e:4d:3f:61:f7:38:a2:69:c4:a2:49:18:01:
         a7:7f:7c:5e:99:08:c0:1e:cb:83:18:03:db:6f:8a:2c:a5:29:
         1e:fa:70:63:a0:33:ef:55:13:6a:ad:96:b3:de:db:25:64:b9:
         dc:86:24:d4:75:ee:7d:56:bf:47:8f:38:d3:f0:4d:2e:b5:11:
         44:3f:78:c9:34:fa:81:e6:63:e6:bb:94:57:10:c0:cf:27:1c:
         d8:a1:a0:ae:10:2b:89:71:1b:bf:3a:47:9d:25:12:ff:07:bc:
         ad:17:93:4c:b0:69:cd:a0:4e:a1:f7:85:44:ad:5f:d7:c6:31:
         0c:53:cb:6e:91:75:64:db:6c:f1:89:ac:92:13:43:b7:c9:44:
         62:68:7f:30:50:b4:bf:64:83:28:57:43:07:9b:fd:31:1c:00:
         27:87:95:3b:54:3e:14:c4:7c:fc:69:7e:a7:8e:d1:e6:4b:89:
         94:54:bd:48:c1:df:d7:9a:c4:60:cc:56:8f:e2:ed:04:26:c7:
         5b:32:42:08:63:39:3d:b5:2a:5b:9b:74:11:21:51:b0:a9:d0:
         13:96:3d:c4:6f:06:ee:ae:99:31:8d:82:36:e1:3c:15:86:1d:
         c9:4c:83:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:57:39 2026 by rpki-client