Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File:                     Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier:          bpXjrcOYPUqAfhThh+lQ4AgA/E6xQOvDkuMsNlUVZqo=
Subject key identifier:   86:8A:94:25:61:DF:1A:2F:09:EB:84:AF:31:50:EF:AD:76:10:29:5F
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer:       /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number:          0238
Signing time:             Thu 23 Jul 2026 04:10:33 +0000
Manifest this update:     Thu 23 Jul 2026 04:10:33 +0000
Manifest next update:     Thu 30 Jul 2026 04:10:33 +0000
Files and hashes:         1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: VXtNMGGe44+mA4Ph9Uu/zZmy289iW7EfTaWYe3CEQKo=)
                          2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: cgC2ydMTGIHogqUutqNvoyHdmfwEliEqE+1X5oBYTDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
        Validity
            Not Before: Jul 23 04:10:33 2026 GMT
            Not After : Jul 30 04:10:33 2026 GMT
        Subject: CN=6a619439-b35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:d3:64:8c:a3:79:43:d7:1d:64:4e:5d:af:
                    da:6b:26:fb:b4:56:a9:62:0c:52:94:d8:93:83:e9:
                    ac:f1:93:ce:f3:01:5e:08:da:de:e5:57:f6:90:2f:
                    27:d1:67:69:ac:37:ac:21:75:23:52:6d:9d:4c:ce:
                    b2:cb:d3:9e:eb:13:00:fe:8f:10:62:38:d1:bb:ab:
                    ce:a5:76:ef:74:f7:08:1d:bc:da:9b:71:0c:a6:2b:
                    35:6d:7a:a7:a1:86:dc:e7:46:37:43:b6:bd:49:ff:
                    8c:14:b8:30:f9:ef:7f:e7:bf:4d:3e:6f:48:4a:cf:
                    8b:04:5e:60:20:7a:28:05:43:b3:aa:17:06:9b:66:
                    ea:d0:7a:18:41:46:ab:9d:f9:9f:4b:f8:aa:b6:51:
                    aa:c9:eb:61:28:b7:af:cd:62:8b:db:ba:16:76:50:
                    52:d6:de:3b:d8:e2:f2:b1:06:8d:d1:68:f5:d8:24:
                    1f:59:59:17:0a:00:61:da:74:8b:35:c2:b3:47:96:
                    92:47:91:9e:ec:53:c6:05:16:26:b2:7f:75:e6:1e:
                    39:ae:1d:bb:1e:d0:7f:4c:2a:76:f2:af:35:54:47:
                    66:af:72:c3:28:06:96:de:7d:9e:c6:ed:30:3c:c3:
                    49:48:23:1a:db:e9:36:92:59:6b:d3:6a:08:93:66:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:94:25:61:DF:1A:2F:09:EB:84:AF:31:50:EF:AD:76:10:29:5F
            X509v3 Authority Key Identifier:
                keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:a4:80:34:3c:a3:a3:e8:c0:4c:44:ed:8b:56:0a:82:e8:4d:
         47:04:ec:a4:37:c1:97:19:a0:dd:aa:5e:d8:a2:74:4d:89:b5:
         49:f3:17:68:36:83:1a:a6:ce:2c:a6:55:5a:1c:0c:c0:5e:70:
         2f:09:ea:53:79:78:b6:b5:d7:c3:a0:d9:8a:da:cd:41:3a:bc:
         13:b6:78:99:3e:59:bb:71:3f:88:52:37:8b:ea:e7:2e:d0:53:
         65:01:ee:76:2a:d3:ec:cb:80:af:44:10:14:cd:c8:ea:5d:04:
         20:08:fe:50:bd:d9:2a:5a:2e:cd:e9:fa:42:dc:75:01:45:1e:
         d9:ee:ab:ad:4d:08:e6:88:c5:25:a7:60:bf:40:ef:ef:4f:de:
         f5:ba:da:91:13:72:12:41:5f:13:10:8f:f0:11:8f:dd:6f:d3:
         49:c2:f6:66:fa:13:49:8e:63:31:97:61:8a:6f:81:fd:ee:f2:
         93:26:7b:5c:1c:a8:e1:26:af:9f:4d:b8:27:08:31:b8:be:e7:
         9d:09:56:8e:5b:d8:ee:72:4b:5d:a1:3b:83:88:b3:7b:d7:61:
         c0:2b:58:0e:14:c8:04:6d:5a:c8:81:cc:2e:a1:a9:d5:3d:12:
         fe:bc:bc:2b:d2:38:8a:e5:49:27:1c:48:d0:1e:ec:4f:70:ec:
         0c:53:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:30 2026 by rpki-client