Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File:                     YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier:          TwcG+a/8FgdlNnGJCt9n49HhHX52yw/hpPHYWP+Dq9Q=
Subject key identifier:   2D:ED:20:2D:99:6D:FB:73:DC:20:93:E7:4F:41:9A:04:34:F5:A6:40
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer:       /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial:       02C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number:          02B3
Signing time:             Thu 23 Jul 2026 02:39:21 +0000
Manifest this update:     Thu 23 Jul 2026 02:39:21 +0000
Manifest next update:     Thu 30 Jul 2026 02:39:21 +0000
Files and hashes:         1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: sBsVBw7d2ItpOU4PxUozkAepc4fecCIzn2uFLeZECYk=)
                          2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: B71votStEYYp/K2emTulLeZ6cRSZ/0mH+ncAa56QIjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
                          rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704 (0x2c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
        Validity
            Not Before: Jul 23 02:39:21 2026 GMT
            Not After : Jul 30 02:39:21 2026 GMT
        Subject: CN=6a617ed9-d7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:23:c8:19:6d:80:ef:b6:0b:e6:72:1e:2e:a8:
                    61:42:ce:bf:b1:ea:b8:d2:fd:59:31:da:8b:71:09:
                    4f:a5:87:78:7a:48:9d:f6:31:a6:d8:1d:99:42:74:
                    3a:0c:5f:e5:c5:af:3e:10:67:f1:85:4b:11:46:78:
                    ba:eb:ba:e6:23:0f:0b:03:0c:cf:1c:8d:33:bc:bd:
                    f0:7a:ef:d3:11:0b:85:dd:f7:dd:99:70:cf:d2:68:
                    9c:71:dc:21:dd:68:cc:35:dd:74:fe:2d:80:72:4c:
                    69:28:2d:dd:b2:d0:31:74:98:31:d6:53:dc:41:ab:
                    0f:ad:43:d7:7c:7c:a2:50:32:97:5f:93:e0:cd:81:
                    85:f3:74:82:9c:16:f2:f7:5e:1a:e3:31:c9:c3:17:
                    5f:25:98:6c:35:25:c9:ed:82:1c:78:89:6c:13:13:
                    5d:f8:8f:a3:a7:b3:13:48:ae:f0:44:15:e4:5a:d2:
                    05:04:27:a7:07:ed:c8:20:12:27:93:ae:ee:b5:df:
                    f7:6c:a6:6f:49:68:5f:48:32:71:8f:d9:ae:18:ad:
                    a5:0e:25:fc:35:bf:91:f4:6c:2f:c5:13:b0:92:7e:
                    c3:b3:08:38:1c:73:78:ee:2b:b1:61:fc:01:1a:40:
                    f9:25:a7:c9:cb:c3:ad:58:a2:d0:cb:9f:8a:12:36:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:ED:20:2D:99:6D:FB:73:DC:20:93:E7:4F:41:9A:04:34:F5:A6:40
            X509v3 Authority Key Identifier:
                keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:94:0c:e4:01:38:a5:b5:9b:56:9b:4d:12:50:a8:00:f8:63:
         ea:0c:54:41:db:b4:a5:97:3a:11:f0:b6:19:55:9c:4f:f2:5d:
         87:d6:0d:42:f4:bb:aa:36:92:96:b8:b3:ac:fd:5b:5c:2c:d3:
         02:ea:e9:81:23:69:8d:1f:08:c2:b3:71:e8:3a:f8:1f:e8:8c:
         4e:86:83:a8:04:07:f5:44:df:7d:fd:dd:7f:e7:e7:5b:12:b4:
         4e:e6:3f:f6:c8:b2:e5:df:14:9f:87:81:80:ea:d4:e3:68:08:
         8b:e5:1a:80:bc:87:9b:28:d4:6a:bb:a5:8f:be:02:0f:c7:18:
         79:92:3d:67:b2:5c:ab:4f:ae:25:ee:1e:cd:9c:d1:13:84:a0:
         24:ab:a8:aa:0f:f4:dd:60:a8:6d:6e:87:ff:3b:e8:59:5e:8a:
         34:62:5a:12:0f:da:c6:0a:f7:05:e7:66:64:62:cd:29:0d:7b:
         b8:57:9a:86:31:63:6e:61:3e:b6:b4:c0:4e:0a:b1:c2:ee:5d:
         2e:99:35:7a:1b:1c:84:37:d7:14:dc:9d:f4:4e:dd:aa:8e:0b:
         0e:94:de:18:94:dd:67:02:87:c9:c4:5c:ad:e7:84:95:4f:c8:
         32:98:4a:6c:2b:20:76:02:9c:a8:7d:54:1a:c1:d3:c8:e4:88:
         eb:0b:5a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:41 2026 by rpki-client