Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File:                     yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier:          CQnA6LcpYUlEdXmgipRZqBWcXa7dl4SrsCM/rgTKWtI=
Subject key identifier:   1A:DC:0F:67:74:D9:A9:E8:B5:68:BA:52:1E:2E:2E:26:22:80:80:1D
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer:       /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number:          0158
Signing time:             Thu 23 Jul 2026 06:35:46 +0000
Manifest this update:     Thu 23 Jul 2026 06:35:45 +0000
Manifest next update:     Thu 30 Jul 2026 06:35:45 +0000
Files and hashes:         1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: eDf+m9/Gt4q+59hSSqsQYoM5W5iHmGqCy9TwARsoFYE=)
                          2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: 9n+XwMxzkkMMvREjsse3a1ZuBorrEMJnsZ5Bb57THws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
        Validity
            Not Before: Jul 23 06:35:45 2026 GMT
            Not After : Jul 30 06:35:45 2026 GMT
        Subject: CN=6a61b642-8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:4a:85:33:06:95:b1:3f:fd:49:92:dd:2a:
                    61:4a:6a:2c:1f:12:3f:f6:04:5e:b9:0e:4c:66:06:
                    96:a4:e1:22:9e:b6:ca:24:5d:d0:3b:92:b4:9a:f9:
                    9f:90:eb:ce:e9:46:d8:c8:53:43:71:79:e8:d4:b3:
                    02:20:a4:e2:f2:8e:7a:91:1f:5f:9c:6d:16:e7:a6:
                    e6:b2:aa:ad:38:ed:de:f5:b0:4b:7e:d8:a6:3f:4d:
                    fc:10:43:4e:3d:53:58:38:d6:34:cc:f3:c7:33:93:
                    9e:f6:a9:82:17:3f:bf:13:54:88:4a:de:24:19:b3:
                    9e:e9:58:a8:3e:5e:24:9a:1f:89:ca:1c:a3:0f:99:
                    ef:ad:5f:23:13:ac:1f:70:f5:0f:7f:fc:d8:a2:7d:
                    d2:b8:2d:1c:dd:82:af:14:01:b0:e0:15:29:fb:ea:
                    27:58:7a:a7:51:ee:e3:49:92:07:3f:e1:88:0e:cd:
                    85:af:c8:52:ce:94:a1:43:af:a0:a3:29:da:40:ba:
                    ed:b1:e6:d5:e3:2f:f9:c9:d7:7d:7b:0f:f9:5a:5c:
                    8d:a7:4c:1b:3b:b3:26:b8:51:a9:12:18:a7:55:9d:
                    ec:59:b7:d5:af:6a:0d:ba:02:ba:b2:83:5b:91:57:
                    22:35:00:29:40:e7:43:90:bc:db:85:56:2d:8e:ec:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:0F:67:74:D9:A9:E8:B5:68:BA:52:1E:2E:2E:26:22:80:80:1D
            X509v3 Authority Key Identifier:
                keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:be:91:62:24:41:d8:71:0b:37:cc:36:84:41:a8:5d:b9:17:
         d9:20:50:56:57:26:6b:ac:8d:50:5d:e1:4a:c1:45:47:be:cb:
         a9:2e:10:fb:a9:4e:26:af:e4:92:71:db:ec:0e:0a:20:a6:33:
         ec:10:a4:d7:17:89:f0:f0:f2:7e:d1:41:0a:2e:63:2f:d7:9b:
         58:38:32:61:1d:91:12:aa:fa:0b:c5:6b:a3:c3:8c:a5:48:1a:
         be:c1:91:15:bb:d7:e5:f7:aa:98:0a:5a:27:41:fe:a0:ce:75:
         84:cc:b6:6d:cf:5a:04:ac:20:0f:18:1b:9f:54:74:ee:63:36:
         fd:27:31:1e:58:af:e9:fc:88:37:fb:45:e1:05:d0:7f:b5:44:
         88:cb:88:e3:40:40:55:cb:67:3f:52:c9:b0:77:4c:8a:79:05:
         5a:90:0f:fb:fe:f0:1e:5d:37:13:d4:be:9d:83:29:b5:f5:7b:
         1d:cd:f6:0b:64:b8:2d:d4:fd:2b:34:25:0b:a8:ae:7f:83:18:
         79:44:f6:bb:24:39:6f:b6:15:d0:99:49:32:fc:5d:8e:62:ce:
         4b:c5:b5:7e:d1:37:ca:05:2e:ed:cf:38:56:5a:2d:78:3b:ea:
         a3:fe:de:b1:9c:a2:ec:e0:d3:e2:08:d7:1a:39:60:7e:1f:93:
         f4:55:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:15:36 2026 by rpki-client