Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File:                     YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier:          9Sh0StfzwEqlzen9qW1duIbwXAvdJWxmNqlrP8Dltx0=
Subject key identifier:   2F:6A:E3:48:CF:3D:51:05:CA:14:25:57:FE:E2:AC:3C:EF:38:9A:26
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer:       /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial:       088C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number:          0861
Signing time:             Wed 22 Jul 2026 21:29:57 +0000
Manifest this update:     Wed 22 Jul 2026 21:29:57 +0000
Manifest next update:     Wed 29 Jul 2026 21:29:57 +0000
Files and hashes:         1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: CuHMMnHkibxkH8y/PwxxfyTdgTut5gcsgCrYUY/V1s0=)
                          2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: mOiKBb1fBKJiEZ/Q4F6SgNQ8FYEX0pSib9+RjzLS4+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
                          rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
        Validity
            Not Before: Jul 22 21:29:57 2026 GMT
            Not After : Jul 29 21:29:57 2026 GMT
        Subject: CN=6a613655-e543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5c:2a:79:8f:69:8a:7f:59:77:b4:23:1c:d7:
                    fa:ae:c1:9a:34:48:75:ed:76:e3:08:78:98:6c:c9:
                    2a:c1:cf:0e:b1:90:4f:30:6e:9c:78:a9:a4:d1:65:
                    be:03:4b:47:30:0c:6c:9a:8f:a1:82:24:f5:ec:5b:
                    5b:a9:bb:59:b7:76:c1:5e:6c:58:a9:15:55:b7:1e:
                    21:36:21:4b:2d:23:0d:db:27:9f:72:88:dd:b0:0e:
                    5a:79:06:98:05:20:70:3a:d5:b7:8e:2a:fc:40:dd:
                    e0:47:e4:9d:49:17:d7:c9:3a:e5:d0:76:fa:0a:59:
                    ee:9e:2c:55:39:d3:35:88:84:75:76:1c:92:0d:c4:
                    90:6d:8d:cd:99:1f:8c:93:ca:3a:11:4a:d7:2e:38:
                    05:67:21:50:4b:c8:0f:4b:7b:87:82:02:29:95:0e:
                    24:6e:ff:8d:4d:86:7d:35:70:34:7d:61:5f:c4:0a:
                    09:16:b9:9a:44:d6:d9:1a:30:3b:ef:ab:89:d1:3b:
                    c7:b1:a6:31:ed:c4:e3:5e:63:21:7c:de:b9:44:77:
                    ed:c8:46:7d:be:90:f5:e2:a4:19:a6:f8:f5:a4:18:
                    53:25:fc:9f:30:a0:99:d3:1b:11:f7:31:ae:3c:61:
                    05:22:dd:a9:32:35:a0:86:68:cb:02:14:a9:85:17:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:E3:48:CF:3D:51:05:CA:14:25:57:FE:E2:AC:3C:EF:38:9A:26
            X509v3 Authority Key Identifier:
                keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:30:0e:ce:ca:53:90:89:e4:8c:3f:2f:6f:92:9e:42:36:05:
         6d:f8:c1:bf:98:b9:b5:58:ae:94:07:77:fe:47:95:69:1a:da:
         71:c3:78:51:42:12:26:ec:3f:d5:6b:f7:a2:0c:18:e2:e0:a7:
         d2:c6:be:61:fc:34:53:b3:61:7b:54:5f:c1:e5:8e:48:45:c4:
         e0:d0:61:fa:cd:da:a3:91:7b:cd:58:b7:da:19:dc:f7:59:76:
         a2:f1:5e:e4:05:dc:bf:d1:ec:58:96:e6:fb:c7:79:3c:ac:20:
         ef:40:8b:ee:b4:8f:3e:91:e0:3e:b5:86:f6:bf:b0:e1:8b:c6:
         ca:4c:a1:f6:f7:c9:a1:01:e4:b4:28:c8:b1:6c:0c:a1:2c:11:
         77:6c:50:b7:3f:ee:46:69:49:2f:f5:b2:ca:09:c4:9e:95:8e:
         3b:4f:37:f9:6d:ad:5e:1d:45:54:d6:ac:5b:6e:9d:4c:f4:88:
         c1:dd:ce:22:84:5c:15:43:5e:2a:4b:64:a3:05:f1:68:91:66:
         d1:0b:cc:4d:ab:eb:cb:63:79:50:2e:65:af:98:6f:1b:72:95:
         0f:7a:74:26:e5:dc:75:c3:53:06:0a:d8:15:07:6a:36:6f:49:
         50:65:03:64:2e:aa:72:65:b2:04:65:2e:c0:f2:a5:3f:0d:9a:
         02:d5:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:39 2026 by rpki-client