Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
File:                     Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft (raw, json)
Hash identifier:          CKNebBab/BbGbgHAJVJiuB6Y5UeyRjbEcwUSsw2FgTs=
Subject key identifier:   D2:67:D6:64:99:34:B1:28:6A:A8:E9:CF:10:2E:6F:FD:EB:E8:3E:ED
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       40
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
Manifest number:          3B
Signing time:             Wed 22 Jul 2026 16:13:01 +0000
Manifest this update:     Wed 22 Jul 2026 16:13:00 +0000
Manifest next update:     Wed 29 Jul 2026 16:13:00 +0000
Files and hashes:         1: Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl (hash: 6ABhUmCMZQpz6l2n+375krNN0tM9vKZbLEPTx2DiAss=)
                          2: 62A4D5365DE711F18D15F5F9BA833773.roa (hash: Yl758J5gQQ4kaYtkddFzVioKhcg++8qC0CLb5+Q1zpU=)
                          3: E685F69A372D11F1A4767B088F833773.roa (hash: FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=)
                          4: CB53532C4A9711F184FA30B7B0833773.roa (hash: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=)
                          5: AAEECC6A6E2D11F1A887915478A30FBC.roa (hash: JY+2F4fpy8yZBneZcoqizCFFml/1qiEJ9kZd9Mylttk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:13:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: Jul 22 16:13:00 2026 GMT
            Not After : Jul 29 16:13:00 2026 GMT
        Subject: CN=6a60ec0d-3364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:3f:db:ee:5a:97:d1:2a:c6:49:bf:a2:62:
                    98:7c:a3:a3:8a:68:18:42:7f:36:2b:2d:dc:cb:3b:
                    86:d1:14:36:82:90:b3:a1:ed:ec:1d:20:c4:8b:b1:
                    36:e0:53:8f:aa:86:49:3f:d7:97:c3:5c:05:94:7f:
                    b1:60:a8:a8:ca:c9:62:5c:f9:0d:69:ff:b2:6c:05:
                    47:9f:ea:9d:ec:e8:8c:3d:01:42:3e:25:fb:8f:c0:
                    82:41:3c:5b:9e:bc:f6:f4:68:bc:88:0d:5a:d7:35:
                    ba:f3:1f:c1:cd:dd:f0:96:66:1b:43:88:3e:42:b1:
                    7d:6d:17:8f:57:99:2c:73:12:9a:25:b0:23:f3:52:
                    47:a7:44:f8:5f:0c:39:5f:b6:b7:82:db:fa:54:87:
                    cd:db:a9:61:1d:3a:b0:93:a9:f4:71:ec:7d:35:01:
                    f0:65:80:88:e7:54:66:68:73:bb:b8:fd:43:8a:1d:
                    5c:34:44:04:db:f7:2a:bf:82:38:dc:dd:c0:6d:b6:
                    a1:2c:99:33:7f:35:c3:b1:7f:87:fb:97:2c:b3:ae:
                    8b:eb:22:09:d5:aa:a8:45:92:b7:2e:00:c3:7f:cf:
                    1a:f3:05:f0:a5:ef:a0:79:25:9e:d0:3a:55:a4:52:
                    ea:1e:8f:41:74:88:2f:ec:ac:7d:64:67:1d:13:73:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:D6:64:99:34:B1:28:6A:A8:E9:CF:10:2E:6F:FD:EB:E8:3E:ED
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c1:e5:a4:99:e1:9d:80:2d:b1:a3:c2:73:df:36:55:bb:03:
         c8:ef:37:27:0e:b9:5b:d0:31:26:ab:13:48:fc:63:fc:69:e9:
         06:ef:d3:0f:bc:14:f7:e9:1a:76:16:e0:7c:67:02:26:04:63:
         1d:cc:51:f6:61:b0:d2:0b:6d:bb:38:3a:60:88:cd:38:57:53:
         b4:16:3e:e6:99:4d:3b:06:6d:da:46:c9:7e:29:39:ce:5d:6a:
         f6:fa:0e:dd:93:84:47:52:ab:c6:c5:24:13:f5:bd:5e:88:e4:
         f4:51:06:a6:63:8a:3f:bf:32:2d:ed:55:2d:d6:f9:f2:ab:38:
         b9:44:30:f5:86:33:0a:c5:75:b3:1b:ae:38:ca:2e:bc:5f:e8:
         13:a1:3d:99:3f:87:12:2c:96:03:b5:5f:88:7b:18:0f:8b:01:
         4d:f5:ba:d6:e1:18:6b:c2:d7:50:94:5f:2f:a4:88:a6:ee:0b:
         29:6f:48:66:65:2c:1e:ce:a0:7e:7b:01:d9:8d:b0:34:46:43:
         42:6b:b8:27:60:2d:97:04:3a:04:43:0d:eb:20:7b:14:ad:39:
         3b:00:79:09:55:b8:da:cc:a5:2c:b0:36:c4:eb:2d:8a:b9:b6:
         fb:17:0b:fa:59:3f:6b:1b:31:6a:e9:73:29:77:99:d5:6c:08:
         29:4a:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:41 2026 by rpki-client