Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
File:                     y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft (raw, json)
Hash identifier:          UCINHSASdVGGCQdZ6ANt8G1EU7cJ92ssdDm4W9S3zmE=
Subject key identifier:   08:35:84:CD:30:CF:91:96:0D:72:49:86:51:CC:E2:48:39:1E:94:90
Authority key identifier: CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64
Certificate issuer:       /CN=A9190F97/serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
Manifest number:          0D
Signing time:             Thu 23 Jul 2026 11:14:34 +0000
Manifest this update:     Thu 23 Jul 2026 11:14:34 +0000
Manifest next update:     Thu 30 Jul 2026 11:14:34 +0000
Files and hashes:         1: y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl (hash: 2AKxnDPry3y/zJripQhr034rCeT6BQetfzL3SxW9FL0=)
                          2: 5958BB9C794811F1AAEBC54078A30FBC.roa (hash: pS+X07s4gmE/rnjlI49rkgqazost2nZXVgUYGx/Lxh0=)
                          3: D9B1050C794711F18C3268FE77A30FBC.roa (hash: 0RgAFc5e34gabTf/i//XHUuPDn8pg9DfrMbK62Y40pA=)
                          4: 57254472794711F1832D99FC77A30FBC.roa (hash: v65T9nnV5djYR187TPvpWjpUtCbMgF/t1xM2ojHyBBs=)
                          5: 58704E16794811F1AAEBC54078A30FBC.roa (hash: AsHZ+12iMiNdtkF3ktOjuU8m8I5Hh1xhNd703vd4pok=)
                          6: 57845FE2794811F1AAEBC54078A30FBC.roa (hash: 6ezN/tsc2foX5WIOmr0atWHeUiNZqAhV/Kd31A7Qaas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190F97, serialNumber=CBBD5B1C31C1612E15ACEC47254FD2F33EC69C64
        Validity
            Not Before: Jul 23 11:14:34 2026 GMT
            Not After : Jul 30 11:14:34 2026 GMT
        Subject: CN=6a61f79a-7aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1a:b8:f4:be:43:55:ab:df:48:06:40:d9:b3:
                    43:4e:b3:1a:69:53:ac:68:3b:4b:bf:96:54:45:ea:
                    7c:10:e7:1d:36:da:64:64:8d:2b:88:2b:25:70:70:
                    66:b4:2d:90:11:a2:36:d5:06:2e:23:33:2e:89:e1:
                    5d:2d:88:af:d1:94:44:14:9b:eb:11:56:d9:c8:73:
                    cd:22:5a:45:81:ee:81:d0:93:7f:9a:35:f2:8b:eb:
                    1f:3c:1f:e5:cb:ce:20:b3:ce:59:da:60:3a:b8:3a:
                    11:06:f5:70:f6:12:eb:9a:89:92:d6:5d:56:59:d9:
                    68:13:a7:a7:5f:0e:55:6a:f3:ef:85:e5:c9:89:74:
                    65:5d:59:0f:90:fc:2c:ac:c1:3e:64:66:12:3d:99:
                    8a:7f:c8:40:08:29:30:a1:dc:51:37:88:eb:f0:fb:
                    59:63:c8:c0:10:e1:61:b8:49:a9:1b:b3:7f:d5:db:
                    f7:f5:25:e6:39:f9:22:11:41:c0:48:25:88:7a:29:
                    1b:e5:68:1e:af:4e:cb:72:45:b6:e6:64:1e:86:9b:
                    06:73:c1:e6:6b:35:36:f9:09:ea:46:2d:c7:43:ac:
                    cf:92:68:d2:8e:fc:ec:11:be:cc:2d:08:26:5e:0b:
                    37:1e:e9:30:24:b4:e0:8c:c1:b4:81:6d:67:6b:21:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:84:CD:30:CF:91:96:0D:72:49:86:51:CC:E2:48:39:1E:94:90
            X509v3 Authority Key Identifier:
                keyid:CB:BD:5B:1C:31:C1:61:2E:15:AC:EC:47:25:4F:D2:F3:3E:C6:9C:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y71bHDHBYS4VrOxHJU_S8z7GnGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190F97/D0FE00AA794611F1B7BA838D77A30FBC/y71bHDHBYS4VrOxHJU_S8z7GnGQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:4f:f8:60:6b:8c:43:d3:72:02:6b:2c:85:cb:5f:e1:95:
         39:85:ff:fe:45:16:19:78:d4:a7:7e:a2:09:ee:6c:8f:c3:1e:
         ba:1c:6c:15:47:f7:d4:b8:f7:d2:67:ad:1f:40:2c:ba:2a:d5:
         5e:e7:37:b3:b4:da:25:be:ad:a8:f4:d1:2a:c9:e0:fc:41:25:
         f7:36:22:4e:97:6a:08:f9:85:49:34:3c:2d:8c:31:15:02:90:
         a7:99:a6:33:fb:64:7e:f0:ea:1c:9a:f3:b0:04:27:1d:49:4a:
         33:a4:b9:60:b3:6e:29:a2:47:8a:8d:53:6c:be:99:fb:d4:21:
         41:0c:42:c6:a5:1e:8e:9b:a4:d7:39:4a:07:2a:a2:4f:cb:f2:
         ac:05:79:d8:aa:7e:4f:95:30:83:81:19:ac:7a:90:5f:a4:9e:
         ec:01:4f:e6:7d:75:b2:83:a5:81:74:f8:8c:c3:ba:81:99:68:
         1e:4c:d1:07:a3:9b:60:15:fc:cc:a8:6f:68:4d:f1:3c:f7:df:
         65:8d:d0:4d:3c:66:7d:fa:bf:d9:89:d0:c6:db:36:31:4d:05:
         a8:4c:b4:ae:e2:af:6e:e3:a4:b2:11:34:4c:b5:a9:29:8e:1f:
         30:9e:7e:5b:a2:a8:ae:78:8c:a6:49:4c:67:05:67:08:b3:38:
         b4:0b:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:40 2026 by rpki-client