Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File:                     yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier:          WOHmJkqXWbykzOXSHWxgjm1z+B4d7TBYl+9bgDiPpWc=
Subject key identifier:   2D:4E:62:65:A0:72:EF:B8:6E:57:32:E9:11:76:0D:D0:F8:A9:F6:64
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number:          017E
Signing time:             Wed 22 Jul 2026 21:48:20 +0000
Manifest this update:     Wed 22 Jul 2026 21:48:19 +0000
Manifest next update:     Wed 29 Jul 2026 21:48:19 +0000
Files and hashes:         1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: 2/y35QekeyZrlwOsiKmgqTmP2JTfgBntMBXjH/XXUw4=)
                          2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: Jul 22 21:48:19 2026 GMT
            Not After : Jul 29 21:48:19 2026 GMT
        Subject: CN=6a613aa4-42f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:6f:f2:fb:78:01:c6:6b:d1:2c:42:ab:a9:
                    c6:b0:43:99:13:70:5e:a2:33:fd:4c:5a:23:80:fb:
                    1c:28:e6:9d:65:39:b7:7c:14:2d:19:15:04:e3:c1:
                    70:65:2e:41:a7:7d:e8:77:36:f7:19:3c:e6:13:40:
                    0b:0b:2b:ad:2b:5e:f0:f7:19:cf:01:7d:3f:56:ea:
                    d8:d4:95:5a:fb:fa:63:3f:12:ae:62:14:5e:10:3f:
                    bb:cb:af:9c:39:be:a7:c1:0d:90:76:cf:37:2b:8b:
                    bf:85:e6:a7:65:e9:0e:67:df:6e:f6:1e:ff:b7:8c:
                    8b:21:4a:5f:fa:1f:45:fc:07:3b:93:11:df:28:5e:
                    fc:75:85:8c:35:de:0d:23:d8:ef:1d:00:c1:2e:2e:
                    14:7f:1f:79:af:a1:43:17:72:5a:24:9b:c4:4d:71:
                    9a:b6:d6:5f:3a:29:4c:76:94:2d:c6:b2:4b:7e:3d:
                    b4:30:74:4c:74:e7:7a:d1:8b:f7:e8:1f:22:1c:8a:
                    7f:9d:b7:8b:96:0d:ef:f9:47:24:85:16:01:db:38:
                    7a:e2:23:94:4f:30:2a:34:e0:95:ef:40:fe:3d:43:
                    61:c2:af:9c:34:2f:dc:f9:4d:8e:8b:37:3d:08:3a:
                    a4:b1:ae:ae:b0:99:c8:a3:6e:ce:a3:62:89:bf:35:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:62:65:A0:72:EF:B8:6E:57:32:E9:11:76:0D:D0:F8:A9:F6:64
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:09:21:61:86:12:7c:a5:88:24:49:a2:f6:da:e8:1f:38:55:
         d7:e2:07:33:c7:b9:c8:44:0a:b2:98:a1:80:75:24:23:45:22:
         a8:a4:11:e3:55:da:43:82:c6:f3:85:84:17:e1:0a:00:3e:df:
         f4:58:a2:79:5a:58:35:61:74:db:96:81:61:00:2b:3c:81:32:
         94:30:50:8f:e7:3e:56:07:6b:b0:d8:c8:d8:8a:56:d3:e0:17:
         ba:75:d0:4e:95:00:a1:6c:55:7b:8f:09:ee:2f:1b:48:75:04:
         7b:25:ca:d4:96:be:6b:09:a4:53:1c:36:d6:91:8c:26:39:82:
         20:36:2e:0b:8e:ab:d7:56:10:2d:ab:29:c4:bd:68:69:7b:63:
         3c:94:b5:26:97:10:68:ec:89:01:18:09:8b:94:b4:28:c1:5c:
         56:14:f1:80:14:fd:ce:f9:52:cc:de:df:bb:b1:68:8a:66:d8:
         71:b4:64:f8:82:7e:a2:95:e8:55:be:b9:91:07:3f:7a:1d:ff:
         7d:d3:2b:ef:d7:3a:2f:25:6d:0a:9b:8e:c0:0f:20:c4:51:07:
         c3:3c:db:00:c7:4c:40:46:db:2e:36:8e:4f:81:d6:5a:69:17:
         0b:7f:e0:96:8e:74:fe:e1:cf:3a:eb:b7:06:e8:52:82:e6:f7:
         87:41:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:27 2026 by rpki-client