Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File:                     TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier:          D3Pd4oel1SdEJSpIbOgUCa9xbIiCYAIelxgtljYBxig=
Subject key identifier:   94:76:32:CD:F8:AF:B7:FA:93:5A:3C:84:7F:A7:85:53:FE:66:4E:0A
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer:       /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial:       C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number:          C1
Signing time:             Thu 23 Jul 2026 08:48:32 +0000
Manifest this update:     Thu 23 Jul 2026 08:48:32 +0000
Manifest next update:     Thu 30 Jul 2026 08:48:32 +0000
Files and hashes:         1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: qobYX5xCsyQDCgJfH6oQ1Da4rniDnon8pL86QK/lZKE=)
                          2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 9hWkzIMPHr3u4aBMV/4p5NjvOfvSqGpfsyIm9FgrEFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
        Validity
            Not Before: Jul 23 08:48:32 2026 GMT
            Not After : Jul 30 08:48:32 2026 GMT
        Subject: CN=6a61d560-b594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:17:44:03:e8:8f:d0:a0:28:6a:23:d0:40:
                    1c:bc:4e:78:83:96:fc:06:f8:8d:bf:d9:42:b1:ed:
                    dd:99:ea:f0:33:af:56:0f:a0:e4:95:66:f0:7e:88:
                    53:f3:b5:34:1b:e7:a1:79:62:72:0a:de:76:55:48:
                    ec:9e:50:07:57:25:63:e0:8c:c5:93:69:8e:92:a7:
                    8c:45:e9:73:a2:3d:ab:5d:db:d4:d2:7c:49:0e:90:
                    95:c8:8f:89:4a:0f:9f:b9:6d:52:be:b7:55:ca:9f:
                    a3:74:6b:e2:4e:2a:37:b2:fd:4b:d0:7d:6d:2b:5c:
                    a2:32:15:17:b0:5c:6c:7b:52:7d:a4:38:3e:32:74:
                    98:75:b5:5c:08:e3:f7:b9:4d:c6:c4:3a:9b:2c:52:
                    bd:48:21:b7:66:a8:ab:c8:0d:8b:1a:4f:dd:19:86:
                    88:8a:ba:97:c5:1e:97:3e:43:b4:40:df:ae:04:c8:
                    63:dd:10:c3:f4:9b:4a:18:a4:5e:38:a3:5e:ad:7a:
                    f2:ab:47:8e:85:16:2e:42:98:73:ab:fa:ec:98:2a:
                    52:03:55:bb:1c:c0:3e:49:36:00:6f:34:8c:4f:02:
                    4a:84:26:fc:a3:50:34:db:23:ff:04:3e:96:3c:cf:
                    a1:ca:5f:b7:6a:fe:b6:6a:d3:f5:7f:4a:5e:8f:75:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:76:32:CD:F8:AF:B7:FA:93:5A:3C:84:7F:A7:85:53:FE:66:4E:0A
            X509v3 Authority Key Identifier:
                keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:7c:fc:b2:78:33:4c:c9:fd:22:cb:41:42:d6:6b:70:64:
         57:b8:45:17:5e:fe:c8:e9:1f:e1:de:30:85:a5:cb:66:13:f1:
         b3:9c:18:16:9a:75:52:78:25:b7:df:28:16:24:4b:7b:47:61:
         6e:f7:71:d0:ed:61:37:a1:72:1a:b5:26:ed:e7:db:0e:75:49:
         4c:26:06:bc:83:78:f4:19:d3:0e:80:ce:9c:b5:0a:ea:2a:ab:
         e0:8f:d1:84:35:5b:b7:ab:86:7a:e5:88:b4:59:05:59:7c:61:
         ca:07:63:9c:e8:6e:8e:e0:94:8a:8c:33:de:5a:56:67:8b:65:
         93:9a:66:f6:47:ba:3b:d3:56:46:fd:f9:d4:3d:4d:bd:c8:35:
         15:f7:12:29:ad:85:82:43:b2:ff:5e:af:7d:9c:78:25:91:44:
         16:b4:ee:ef:19:3a:2c:12:76:42:10:75:91:2d:9f:12:a0:48:
         40:26:f4:fa:fe:34:f2:14:28:0f:98:62:11:81:c9:a3:17:3b:
         9a:61:dd:98:2f:42:10:de:47:86:75:a1:75:8f:f2:cd:47:c9:
         53:e1:44:cd:86:48:a3:38:38:a7:9a:32:e9:df:af:e3:f6:d1:
         19:71:23:70:75:04:88:b9:c8:37:8f:ff:bb:1f:28:f9:0f:13:
         08:18:78:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:45 2026 by rpki-client