Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
File:                     pyf1mySxFKJR_fd_U7-g7GkeJaU.mft (raw, json)
Hash identifier:          F2ciOOyOk22puQUS6ZAG3jbcF1qnPWIZ8v+hiSVQAWY=
Subject key identifier:   3A:E5:11:04:EC:66:E0:36:E6:BA:88:81:4B:23:79:5E:2A:DC:F1:A5
Authority key identifier: A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5
Certificate issuer:       /CN=A918232F/serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
Certificate serial:       157F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
Manifest number:          156A
Signing time:             Wed 22 Jul 2026 16:53:20 +0000
Manifest this update:     Wed 22 Jul 2026 16:53:19 +0000
Manifest next update:     Wed 29 Jul 2026 16:53:19 +0000
Files and hashes:         1: pyf1mySxFKJR_fd_U7-g7GkeJaU.crl (hash: TutS6hscrx3sH0EFwK8JY20yMLLzl/OI5EbQxaDV1SM=)
                          2: 530FB34C664D11E89967A549C4F9AE02.roa (hash: L35F7snTd+k2kkTxwJ/jTFRZ1ynip+q6MeQXF9faxdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl
                          rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5503 (0x157f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918232F, serialNumber=A727F59B24B114A251FDF77F53BFA0EC691E25A5
        Validity
            Not Before: Jul 22 16:53:19 2026 GMT
            Not After : Jul 29 16:53:19 2026 GMT
        Subject: CN=6a60f580-7b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d7:13:4c:79:5f:fb:0b:7e:c3:e0:a8:f6:b7:
                    8f:68:e7:43:a0:1c:2c:7d:f8:e3:26:42:71:53:a2:
                    15:bc:da:9a:be:ab:60:ed:10:bb:b9:d1:12:b4:27:
                    f5:96:7e:21:ff:8e:e2:f8:77:0a:70:23:0f:b3:da:
                    97:a7:2d:a5:a8:18:99:d6:f8:7f:47:d5:c8:41:15:
                    0d:1c:ec:d1:82:fb:7d:38:0d:c1:36:80:1a:a4:c1:
                    44:3f:73:d2:0a:e9:a2:3b:48:53:e6:b9:b8:6d:a0:
                    6c:5a:00:a8:55:f1:58:4b:ec:86:a3:79:36:3e:ed:
                    e3:35:2f:92:7b:c2:db:44:53:b6:db:44:0b:19:97:
                    b2:bb:d4:e8:9a:e8:5c:ca:2e:42:be:6e:a1:6a:f9:
                    cb:ba:63:2c:a5:dc:89:47:f8:13:58:25:75:5e:76:
                    2b:d6:e4:e1:63:b9:2d:99:05:f7:da:3d:7f:35:8a:
                    d6:23:5a:1e:ea:3c:64:8e:fc:66:1b:ea:02:9a:6b:
                    e5:20:fe:5e:14:5a:2c:b6:e7:7b:49:40:76:36:cd:
                    74:a7:f5:67:63:33:dc:3f:b1:40:35:2e:ae:bc:9a:
                    fe:1c:49:3d:06:f1:2b:6d:d7:81:cf:d7:85:cf:08:
                    88:a0:90:ad:dd:70:39:9d:c0:4a:b8:59:02:4d:3f:
                    50:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:11:04:EC:66:E0:36:E6:BA:88:81:4B:23:79:5E:2A:DC:F1:A5
            X509v3 Authority Key Identifier:
                keyid:A7:27:F5:9B:24:B1:14:A2:51:FD:F7:7F:53:BF:A0:EC:69:1E:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pyf1mySxFKJR_fd_U7-g7GkeJaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918232F/3345C4C6664C11E8B71AFE46C4F9AE02/pyf1mySxFKJR_fd_U7-g7GkeJaU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:a7:1e:a2:2e:df:5f:25:51:95:0f:5c:57:5c:d7:a9:c0:
         12:75:db:43:74:aa:ed:9b:42:c1:f1:f4:f1:9b:39:d4:f0:2f:
         0f:72:b2:3a:a9:a4:cb:59:d3:7a:91:04:36:1d:02:d5:87:c3:
         98:56:41:78:3d:0e:89:2b:bd:15:8d:51:53:7f:52:28:b1:90:
         63:a5:62:f1:6d:06:a3:29:98:db:d7:1d:0f:9a:fc:f8:da:b8:
         dc:1a:0c:f9:41:3e:b3:1f:b9:35:6f:49:b4:86:23:64:9e:d4:
         f6:8a:79:0c:bb:1b:a2:d8:92:a4:1c:73:71:c3:84:c5:52:83:
         07:c7:e6:fa:d8:ec:34:48:2d:bb:aa:f6:df:f3:58:75:0d:8c:
         e1:34:5a:48:3f:d9:ee:bc:c0:b2:16:c4:27:b5:e2:12:3e:2f:
         1a:39:9a:0b:26:55:b4:65:11:69:e5:48:e3:eb:38:10:5e:37:
         a4:be:f6:1c:37:f0:6d:b9:9f:9b:e5:2b:41:70:64:7d:d0:bb:
         72:c0:1e:79:bf:0d:d2:9d:b0:c6:5f:88:dd:9f:77:f1:d5:38:
         d3:de:d3:a4:45:c6:b8:0f:0b:f2:0d:9c:0c:61:5a:6c:cc:dc:
         42:8f:1e:d9:c4:e4:62:82:41:d4:b1:73:78:a8:39:fc:53:f8:
         ff:4b:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:32 2026 by rpki-client