Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
File:                     y8CtGWWFFkH2YRHo4pAmmKm57YA.mft (raw, json)
Hash identifier:          Lvq9RfPPLkQpgnPiWIYTvF32736QbeyicafUF/9BEUk=
Subject key identifier:   16:D4:5E:CE:26:C0:40:FE:EB:D2:DA:F9:8B:48:15:C9:53:78:28:B3
Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80
Certificate issuer:       /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
Manifest number:          01CD
Signing time:             Thu 23 Jul 2026 05:13:40 +0000
Manifest this update:     Thu 23 Jul 2026 05:13:40 +0000
Manifest next update:     Thu 30 Jul 2026 05:13:40 +0000
Files and hashes:         1: y8CtGWWFFkH2YRHo4pAmmKm57YA.crl (hash: Gwfog80g1pjCKsj8VTnwIPESBDT5CvHVc1rockrjbuU=)
                          2: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (hash: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl
                          rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80
        Validity
            Not Before: Jul 23 05:13:40 2026 GMT
            Not After : Jul 30 05:13:40 2026 GMT
        Subject: CN=6a61a304-1161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:fc:1c:25:f8:5d:b7:91:76:9a:cc:8b:87:
                    2c:90:71:9a:37:ab:52:7f:01:97:8d:f2:93:33:50:
                    6d:c1:8e:d6:c1:25:f3:b7:e2:8e:b1:7c:ce:c2:10:
                    fb:95:0f:6d:8a:ad:71:5e:4b:e0:97:a8:21:d9:a2:
                    f3:26:20:e6:f8:c4:a6:07:af:0c:3b:95:a5:ac:06:
                    44:38:3d:ba:08:2b:a3:95:69:4f:8d:f7:d7:ee:5a:
                    11:5e:04:60:d3:fe:0e:c0:0a:0a:11:8a:82:2b:ad:
                    ae:fb:23:d0:00:6a:a7:0d:70:75:aa:96:8a:93:3b:
                    26:70:b1:95:37:1f:b6:90:3e:66:83:2c:31:77:a6:
                    ff:20:70:ed:ab:23:2b:a1:71:32:3b:33:30:6c:9d:
                    b0:90:b1:17:8e:ef:86:63:87:b5:66:90:95:bf:3f:
                    3b:46:23:53:9d:9c:f1:04:e6:ee:63:73:13:b7:53:
                    e6:42:83:fa:fa:88:b8:83:5e:c3:f1:10:ae:5e:d5:
                    58:ca:60:ec:38:88:dc:82:e5:f9:04:34:a6:67:fb:
                    d4:2e:9d:c9:ee:c4:92:cb:cb:d4:48:bc:ee:f7:0c:
                    47:66:73:7b:75:d5:5f:fa:4c:08:e2:69:bd:69:1b:
                    1d:09:42:79:9b:e1:f8:78:68:cb:dd:2b:24:4c:c6:
                    7b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:5E:CE:26:C0:40:FE:EB:D2:DA:F9:8B:48:15:C9:53:78:28:B3
            X509v3 Authority Key Identifier:
                keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cb:fa:2c:da:7c:44:51:29:31:1e:ef:41:3d:82:69:e6:e4:
         af:aa:c1:e6:ec:ec:39:fa:fe:42:6e:7b:d0:7f:a6:bc:1b:3d:
         98:f3:47:de:d5:8f:fb:53:e5:05:15:1c:57:d9:29:f6:a5:05:
         d8:2b:03:5e:12:f8:c3:4f:e3:80:18:ba:f7:0d:4c:a4:b7:a6:
         65:e0:c0:5b:c0:fd:49:60:de:a5:59:92:1d:8f:db:64:1b:18:
         38:5b:44:a5:56:03:74:0f:4f:fc:ff:9c:5b:8f:fa:c6:e2:9b:
         0a:94:d2:c7:61:4b:1f:b7:60:fd:65:24:75:12:0b:0c:23:ac:
         66:f2:cc:44:a3:dd:24:d0:09:69:f8:9e:32:59:2a:dd:04:89:
         94:69:20:da:9f:8b:16:88:05:69:c7:bc:c4:8b:b4:41:aa:bf:
         04:db:1f:e7:f4:2a:6c:21:fb:53:21:4a:30:8f:4f:6e:d9:51:
         6a:c5:c3:50:39:e5:fb:59:b0:71:e0:d7:9c:54:9e:e4:f6:49:
         68:e1:cb:9d:3c:1f:b0:9e:76:c5:40:01:cc:97:35:a5:d8:ec:
         d9:68:12:73:8d:2e:c4:fc:19:ad:0e:3d:02:2a:e0:90:91:8b:
         fc:c9:d0:6b:22:3f:d4:84:29:1f:6a:d1:c9:bf:95:1f:85:fb:
         0b:16:0c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:10:48 2026 by rpki-client