Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          lAPesu8xabO+ITJTJcRlzHEUnDiRYEV26ppabdD4cpU=
Subject key identifier:   5F:EE:48:59:70:20:F8:92:91:C2:23:4E:41:C9:72:EE:F3:20:68:D1
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          75
Signing time:             Thu 23 Jul 2026 09:48:18 +0000
Manifest this update:     Thu 23 Jul 2026 09:48:18 +0000
Manifest next update:     Thu 30 Jul 2026 09:48:18 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: F1wReBjrUCOASFgHzaDH7Q0ccQzVvuJQ2MDcGPU6B4Q=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: 5ges78Gj6eYTmdrnimD5wNwWYT1ipWI3keb1qzsct3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: Jul 23 09:48:18 2026 GMT
            Not After : Jul 30 09:48:18 2026 GMT
        Subject: CN=6a61e362-0fad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:31:ae:47:ea:b6:a4:52:fa:70:69:6c:f2:
                    7c:fb:c9:44:f4:6a:90:4c:11:81:43:77:3b:06:3b:
                    f0:e9:97:3e:d7:3c:c2:bd:d9:82:51:b0:df:84:99:
                    b8:2f:cc:0f:18:6d:c8:3c:8a:d5:06:63:7e:b4:dd:
                    54:35:16:b7:50:3c:d9:33:6b:3f:c9:79:e5:3f:e3:
                    19:ab:e3:24:ac:18:45:80:83:0a:9f:8b:01:25:c9:
                    4c:b0:cb:6e:e8:af:ba:6b:14:a4:96:c0:a3:15:f0:
                    4a:4c:3b:87:30:96:c6:a3:60:7e:e5:43:99:18:e8:
                    45:f1:ce:06:de:2d:0a:38:9e:9b:27:a4:f5:9f:fe:
                    0d:53:2f:96:fd:01:80:3b:cb:a1:32:93:0c:03:94:
                    72:f3:a3:4b:b7:11:df:1d:47:57:3a:e0:4f:26:cc:
                    d1:9e:a8:b6:78:2f:04:10:ff:d0:65:3d:9b:58:30:
                    54:29:60:94:ba:5a:be:7e:5d:84:be:1d:29:78:70:
                    ab:a4:18:e9:bf:ca:ee:df:14:d7:e3:80:8a:0e:16:
                    cb:b3:62:ad:e2:0b:5e:e8:da:23:44:ed:f3:5d:25:
                    6f:2f:9f:bf:e2:7e:19:90:3f:be:85:31:c4:b9:4d:
                    e6:c0:58:a0:05:c6:bc:a3:da:a0:c8:88:8b:74:b7:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EE:48:59:70:20:F8:92:91:C2:23:4E:41:C9:72:EE:F3:20:68:D1
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:f4:4e:53:95:63:28:03:38:5a:f3:e3:76:de:cc:fc:0f:
         0b:4c:49:48:8c:27:4b:01:a2:9c:d8:5e:87:9d:c9:c4:af:60:
         38:33:7b:34:bd:4d:a4:d1:5e:36:8d:0e:a3:e3:92:ee:b1:99:
         00:32:a1:39:66:c6:f5:06:3a:ac:cb:e1:be:9e:bb:1a:60:31:
         c1:16:cf:59:1c:a5:b0:5d:1b:12:4e:35:e7:dd:b9:b3:e6:02:
         1e:3f:45:dd:ae:e2:6e:c1:24:cf:b2:27:39:cd:54:e4:28:4f:
         b6:6d:51:d2:bc:79:e4:67:60:8a:23:04:7b:70:22:13:7e:49:
         14:68:fd:4a:d1:f3:a0:91:ef:66:23:68:51:ee:45:67:f9:a4:
         3b:cc:86:62:fa:3b:df:fb:16:ab:97:28:fa:7e:f2:c3:17:22:
         e6:5d:c1:7e:c5:65:0e:be:1c:a8:c8:d0:f8:d2:49:9d:ca:51:
         42:d9:c4:f2:93:4d:9e:e3:37:fa:3c:0b:17:36:8b:79:f2:7f:
         f7:d2:7d:13:cd:97:c1:d6:8b:7d:0a:76:b8:88:2f:b6:8b:22:
         e5:ab:d8:0d:82:fd:4d:60:cb:24:1f:4a:3d:b0:71:32:10:f6:
         10:78:71:68:31:1f:b7:1e:50:85:a7:93:48:f8:86:5c:cb:7b:
         ee:68:b5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:09 2026 by rpki-client