Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File:                     y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier:          3IZr0qLMnKH1U37qiO6u8mHla2sCC+nwsQpyVw+PfOk=
Subject key identifier:   0C:5A:DD:E8:94:00:24:1E:7B:C1:B8:BB:F3:47:70:DE:81:A1:C0:1D
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer:       /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial:       085A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number:          10BF
Signing time:             Wed 22 Jul 2026 21:25:18 +0000
Manifest this update:     Wed 22 Jul 2026 21:25:18 +0000
Manifest next update:     Wed 29 Jul 2026 21:25:18 +0000
Files and hashes:         1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: ucYfTtu8Zis51CD8VY+3+h4SCsF93wtdFxNjewFJSYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
                          rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
        Validity
            Not Before: Jul 22 21:25:18 2026 GMT
            Not After : Jul 29 21:25:18 2026 GMT
        Subject: CN=6a61353e-c7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:53:7e:62:1a:d4:28:60:cd:cc:a2:b7:2e:
                    14:8b:67:91:a7:c4:ac:ea:a5:fc:d9:25:49:a3:98:
                    4d:bd:f6:d3:79:01:65:00:7b:c3:cd:f7:b2:c3:11:
                    29:b6:f4:19:e5:40:c2:fa:ca:dc:42:73:24:f6:77:
                    1a:8e:47:c5:30:7e:fc:28:ec:27:d7:9d:c0:a9:88:
                    34:7f:87:51:8b:54:60:ab:33:5f:05:b7:0b:ff:fc:
                    63:73:62:0e:2b:6d:ea:f3:14:7a:c1:94:5a:00:f1:
                    e2:4d:ae:e0:36:70:a1:91:ac:3c:50:5e:c5:d6:7a:
                    32:a3:d0:90:33:00:37:24:b7:c3:23:9c:4c:9e:e8:
                    c2:d5:85:59:ee:54:0a:28:6c:6a:6a:7b:cc:67:11:
                    67:b4:31:e7:bf:11:08:fe:c9:c8:2d:01:c7:b2:92:
                    c8:dc:af:73:9e:11:f5:5b:8a:00:8e:9e:19:56:36:
                    12:33:7b:93:35:ad:54:3b:2f:48:40:6b:b3:ca:95:
                    d7:a8:95:51:ef:23:09:39:a8:03:15:82:3b:12:3c:
                    c2:0e:59:ce:b9:d2:7b:d1:3e:69:91:9f:38:1a:66:
                    de:39:0f:a6:3f:26:e7:2c:64:3b:fe:37:34:ce:03:
                    7e:aa:fc:40:32:64:76:3e:6c:39:a8:dc:29:19:6c:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5A:DD:E8:94:00:24:1E:7B:C1:B8:BB:F3:47:70:DE:81:A1:C0:1D
            X509v3 Authority Key Identifier:
                keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:fb:05:36:ac:07:5e:99:43:19:48:a8:20:78:25:2e:e4:
         2c:3b:ce:28:b6:08:f7:bc:02:f9:88:80:c6:32:02:0c:dd:9d:
         e0:56:56:1e:40:81:81:59:72:6a:41:9f:ec:0a:e6:01:62:5f:
         26:88:00:bc:3a:c3:d4:5d:a6:97:3d:a3:94:a3:8b:45:79:ec:
         d1:7c:06:39:9e:a6:ca:25:2b:83:e9:fb:0f:27:9a:63:d8:a0:
         82:2d:80:82:78:08:50:63:a4:ec:bc:3a:f5:03:84:4c:40:f4:
         98:fd:df:68:e0:7d:23:5c:a9:d7:1f:e2:cd:88:91:df:32:0b:
         d9:3e:63:ad:81:47:c7:c1:e0:b4:05:03:f8:0a:5d:5c:e1:46:
         f7:4b:88:02:51:26:fa:4c:de:0e:6b:61:70:55:db:5e:7d:98:
         f3:48:3d:28:2c:27:66:ad:ec:78:6f:01:ec:c9:82:74:86:39:
         07:e5:fe:01:3c:29:3f:b5:c9:8a:13:8d:19:73:2f:8c:46:9f:
         2c:d8:45:24:ce:0e:aa:c9:bf:5d:01:b7:18:24:d8:4e:e4:53:
         b9:68:74:25:bd:33:cc:25:47:0c:6e:9c:ec:fe:67:2a:09:2e:
         b3:77:e2:3d:65:28:67:fb:36:87:d9:1c:c2:44:a5:8a:5b:a5:
         48:19:7c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:45 2026 by rpki-client