Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File:                     Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier:          AAcnAVELlmQ5Br0SJSRwxiHDcM+mJGytK170nKMKfLk=
Subject key identifier:   D5:07:18:4C:DE:AE:4D:EB:5E:0D:4A:5A:34:D6:B3:A8:1A:F4:3C:6D
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer:       /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial:       072E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number:          0724
Signing time:             Wed 22 Jul 2026 22:35:57 +0000
Manifest this update:     Wed 22 Jul 2026 22:35:57 +0000
Manifest next update:     Wed 29 Jul 2026 22:35:57 +0000
Files and hashes:         1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: +gHW1zxIdu04+VpwkolEXV+cpIhcrJWUQtysDvmohDU=)
                          2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: GddQF0kXZAYcATo7qq+gH7xwi2gME5La/lz+podnzrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:35:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1838 (0x72e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
        Validity
            Not Before: Jul 22 22:35:57 2026 GMT
            Not After : Jul 29 22:35:57 2026 GMT
        Subject: CN=6a6145cd-9603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:f6:b2:d5:3a:d2:eb:39:b8:9a:65:36:2d:
                    9c:ac:d4:72:a3:31:96:33:6e:c5:85:6f:30:d3:af:
                    60:1c:6d:e1:d7:0a:1d:aa:06:fb:ea:f3:b1:e6:0a:
                    eb:ff:07:d0:b9:db:5e:d9:eb:ec:3b:db:ef:7b:8b:
                    52:6e:55:b8:45:ba:45:22:c9:8d:09:36:e3:48:6b:
                    ba:49:6d:31:40:5f:06:8a:0b:74:7c:27:a4:f2:e8:
                    d8:3d:73:bd:d3:68:23:7a:db:71:85:7e:b1:ea:e8:
                    60:df:74:0b:da:de:bb:47:62:bc:70:70:76:35:f7:
                    1a:86:46:04:a1:95:2e:67:c5:06:71:d9:6d:ad:41:
                    9e:3b:b6:ca:04:02:c4:4b:62:e6:62:a0:4d:b2:f7:
                    67:1e:62:a1:fc:fd:c2:6a:7c:91:1c:e8:5b:c3:06:
                    9c:b6:ce:58:3f:a5:96:6d:bf:3e:de:94:b0:c3:c6:
                    68:59:ed:78:53:7d:7f:52:f9:39:9a:07:20:cb:65:
                    2a:90:de:fd:75:de:f7:00:28:a9:ad:9e:a3:cd:48:
                    dc:75:eb:58:9f:86:25:94:99:9c:9f:29:9b:88:ed:
                    ff:5b:a4:6c:b4:c4:d8:56:51:06:21:7c:07:a6:9c:
                    0d:48:92:25:f9:b9:bf:99:cc:f0:59:18:e0:e8:17:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:18:4C:DE:AE:4D:EB:5E:0D:4A:5A:34:D6:B3:A8:1A:F4:3C:6D
            X509v3 Authority Key Identifier:
                keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1e:c0:60:c6:b3:3e:9b:03:bf:6f:66:6c:59:a0:0d:82:4a:
         e2:89:2e:ba:37:b1:23:1c:fa:e6:4d:08:ca:57:47:83:ea:d1:
         9a:87:11:e7:49:6b:ee:48:13:41:ea:4a:e5:09:22:6e:02:d9:
         a5:46:77:75:8e:ab:c0:11:9a:29:62:d0:5f:a0:b8:d5:ac:ed:
         44:e4:c8:04:c2:41:96:77:65:a2:9b:fd:61:46:d1:d9:9e:9b:
         fe:9d:b9:34:5d:aa:9b:8d:e5:61:01:ba:69:ae:f7:c9:15:da:
         4a:18:1e:e1:ba:fb:a7:46:18:cb:18:68:85:97:b9:f4:3f:30:
         b1:08:bd:94:65:31:a1:b4:4a:58:2b:e0:25:35:3c:54:4d:e6:
         31:91:6e:a5:4b:2d:a2:88:65:bf:99:92:74:ac:2d:44:73:52:
         85:a4:e1:79:87:16:19:94:d1:61:96:f0:2a:9e:08:c4:83:80:
         02:8c:e3:f1:12:ab:8e:db:98:53:67:92:07:86:c4:77:5a:95:
         e5:db:b6:bc:33:02:83:1e:6b:1d:46:17:8c:7f:6b:ef:e2:0a:
         d7:fe:89:3a:42:84:44:9b:f0:ae:d6:56:e0:6e:76:ab:6f:bc:
         11:2d:f6:a0:13:5c:fd:af:97:a7:58:6f:19:e9:62:c5:35:5a:
         0c:c7:e9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:01 2026 by rpki-client