Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
File:                     yZNZQ2ka0elTZudBwTkwH7f35ts.mft (raw, json)
Hash identifier:          a2fay4YO9vghGQitqUOR2qvGPBuBza19UwhFJCj5ajc=
Subject key identifier:   2A:68:EB:43:47:5D:AA:69:D9:01:04:E1:43:0A:95:01:C4:7C:35:38
Authority key identifier: C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB
Certificate issuer:       /CN=A91A531A/serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
Manifest number:          0832
Signing time:             Wed 22 Jul 2026 21:37:02 +0000
Manifest this update:     Wed 22 Jul 2026 21:37:01 +0000
Manifest next update:     Wed 29 Jul 2026 21:37:01 +0000
Files and hashes:         1: yZNZQ2ka0elTZudBwTkwH7f35ts.crl (hash: MjUQIwYTVAyWAB3YnmzwpSYe9V4k3MYlUDNTwVDCb+c=)
                          2: 43C467CA219911EB8F75645EC4F9AE02.roa (hash: //kyIlIYFX3+08S3h9a7dEmLAcY3BX1jLjRJO0SJN6s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl
                          rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A531A, serialNumber=C9935943691AD1E95366E741C139301FB7F7E6DB
        Validity
            Not Before: Jul 22 21:37:01 2026 GMT
            Not After : Jul 29 21:37:01 2026 GMT
        Subject: CN=6a6137fe-c44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:c1:13:89:60:53:51:c7:44:68:a9:1a:25:
                    0e:e5:41:b2:d1:87:85:d5:58:76:75:ab:be:68:16:
                    88:59:cc:6d:61:bf:bd:4f:40:ae:f9:45:3a:e2:8a:
                    ee:c0:2a:1e:72:2e:56:b2:9f:8c:18:77:b8:3a:12:
                    c2:be:63:bb:d8:37:3a:ce:43:df:23:8d:aa:9e:09:
                    dc:ef:f8:d7:a6:0c:56:54:d0:ab:96:92:7f:08:5a:
                    da:b1:b8:d8:d1:86:eb:23:b1:45:ed:d2:67:62:64:
                    ed:33:7e:a1:05:62:93:bf:64:c4:13:df:9d:ab:b9:
                    f5:62:68:4f:da:92:4f:a9:71:cd:a6:4e:71:65:01:
                    68:5b:12:bb:2e:de:a6:ab:fd:29:04:1c:20:a6:11:
                    7b:ce:c3:75:47:d9:cd:dc:19:4c:89:34:ee:49:0b:
                    fe:fc:f5:d5:08:5c:9d:d9:c9:7d:28:4a:1b:fa:97:
                    5a:0d:40:2a:e1:9a:e3:d9:ab:97:64:53:49:36:f4:
                    62:81:27:b9:e6:0d:4f:44:04:ab:2c:fa:a1:ec:97:
                    52:b8:2b:e1:e2:9d:d5:23:a5:7f:53:34:61:1b:8a:
                    6c:c4:4e:51:bc:04:d8:0d:04:35:9b:1d:5f:32:cc:
                    ce:5d:93:3f:02:32:ff:cf:e5:72:05:fc:96:65:34:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:EB:43:47:5D:AA:69:D9:01:04:E1:43:0A:95:01:C4:7C:35:38
            X509v3 Authority Key Identifier:
                keyid:C9:93:59:43:69:1A:D1:E9:53:66:E7:41:C1:39:30:1F:B7:F7:E6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZNZQ2ka0elTZudBwTkwH7f35ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A531A/2BDDFACE219711EBB45B0359C4F9AE02/yZNZQ2ka0elTZudBwTkwH7f35ts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:87:e9:ef:90:e0:b8:ab:36:f5:f5:a5:a9:e8:04:32:dc:
         99:76:1f:a3:46:b8:4c:a9:5a:31:ad:d9:6e:2c:52:b2:53:9f:
         c6:fe:11:40:fc:1b:0c:32:e4:81:82:0e:6d:28:f5:2c:a6:c9:
         e9:71:c7:e6:48:17:a1:2d:ff:f7:90:7b:b6:77:20:bc:1b:52:
         e0:a4:11:f8:04:77:27:f6:1b:fb:d2:cf:1a:76:78:9d:dd:c8:
         5e:15:17:b2:d9:f8:92:8f:36:00:15:be:c9:37:37:0c:60:55:
         30:90:4d:0c:90:79:37:53:57:c3:a8:0e:3a:79:56:86:eb:35:
         37:bc:6c:1c:98:6f:fa:f0:10:76:d2:7e:8a:ff:bb:b3:c9:ae:
         ca:48:f0:e0:62:75:61:16:00:66:48:9e:de:c1:38:91:bf:5f:
         43:3c:4e:a2:93:2f:9e:b7:43:73:94:72:03:8d:d2:8d:e1:34:
         86:73:53:b8:f9:8f:1f:45:fc:76:1e:b8:b8:c4:6f:46:44:95:
         c6:ed:56:05:59:c0:bc:d6:5e:a0:ca:19:73:20:e1:a2:73:5b:
         05:8f:25:8e:7a:f7:d4:6a:2e:55:62:68:e7:39:34:7a:d1:a9:
         b0:44:6d:e8:5d:c5:9f:dc:f1:da:83:f9:62:36:b7:e5:20:13:
         91:ac:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:15:59 2026 by rpki-client