Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
File:                     y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft (raw, json)
Hash identifier:          l49N2qDkIXSMyYxj98A5HkH/sVGeSNifqh/DlkjzJmM=
Subject key identifier:   9D:66:E3:D3:DA:77:30:07:1C:E6:13:BF:05:0B:DB:DA:64:8A:6A:28
Authority key identifier: CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63
Certificate issuer:       /CN=A91C3A74/serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
Certificate serial:       26F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
Manifest number:          26D9
Signing time:             Wed 22 Jul 2026 15:45:27 +0000
Manifest this update:     Wed 22 Jul 2026 15:45:27 +0000
Manifest next update:     Wed 29 Jul 2026 15:45:27 +0000
Files and hashes:         1: y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl (hash: 5XAhyf239lOjbx7f9GGhRwfjuWR803YUE/mGjZsNMH4=)
                          2: FBD68828FCBF11F0A4D02CBC666F56BC.roa (hash: SxJM2aFKgBGF6I9rZ7S9/EziiSoyCz/xteiPP/MBsS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl
                          rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9972 (0x26f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3A74, serialNumber=CB7B8DB424824C71A8703BBFB942A31529154363
        Validity
            Not Before: Jul 22 15:45:27 2026 GMT
            Not After : Jul 29 15:45:27 2026 GMT
        Subject: CN=6a60e597-8bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:4a:18:0d:5e:42:41:93:2f:6a:ca:2b:dc:
                    ee:d3:1a:50:f3:0d:79:80:5e:b6:bc:c8:80:33:00:
                    35:80:81:5e:0a:74:a1:2f:4c:f8:09:ff:89:7f:bd:
                    6c:dc:5c:57:16:fb:a7:c3:ef:8f:f3:15:a0:f7:c1:
                    96:b9:dc:c6:0e:0b:5b:7e:56:4b:21:6e:8f:fd:24:
                    1a:25:8e:6f:1e:17:f6:c3:f2:4c:77:21:19:2e:d5:
                    0a:f5:7b:c2:77:c6:3f:2f:6f:ce:84:f9:ef:44:2d:
                    49:09:3c:2f:e7:7e:f0:2e:e5:e5:4e:97:63:a5:98:
                    fe:45:b1:e5:af:7a:ab:7f:3d:05:9c:e1:f4:ee:b4:
                    8a:ba:f1:16:3c:9b:e7:de:e0:4c:76:26:ed:e9:63:
                    37:5a:be:e0:f6:99:cf:89:19:70:90:c1:d8:5c:14:
                    6f:f4:70:a2:4b:d0:3f:da:95:d5:70:1a:ec:88:81:
                    d9:d8:93:31:8e:13:9d:95:2c:ae:ff:34:2a:ea:39:
                    b0:76:7d:d6:be:50:ef:2d:3e:e1:f3:27:84:f1:fc:
                    3f:87:6c:b0:14:27:af:64:51:ba:30:6a:47:59:7f:
                    3b:c6:3b:e8:f1:00:82:80:70:7c:b4:54:9d:ac:4f:
                    19:97:df:bd:29:f3:aa:5c:6c:7c:ce:39:3c:82:82:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:E3:D3:DA:77:30:07:1C:E6:13:BF:05:0B:DB:DA:64:8A:6A:28
            X509v3 Authority Key Identifier:
                keyid:CB:7B:8D:B4:24:82:4C:71:A8:70:3B:BF:B9:42:A3:15:29:15:43:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3uNtCSCTHGocDu_uUKjFSkVQ2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/7CB4A056FD3A11E486F8675FC4F9AE02/y3uNtCSCTHGocDu_uUKjFSkVQ2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:a9:93:5b:72:44:5d:62:fb:55:60:62:b9:a0:01:20:cd:
         cb:22:99:66:c8:b5:94:b8:f8:7d:3b:75:e9:fe:08:38:9a:03:
         bb:f0:a7:26:3a:03:f9:01:ff:a9:55:5d:3e:30:d4:13:84:6c:
         73:35:65:88:8e:19:34:55:19:14:30:63:42:7d:78:bc:61:f3:
         0f:a0:9a:2e:e7:ff:2d:20:b7:02:48:0f:92:51:ec:cd:88:7d:
         7a:5c:a3:e5:ab:53:1c:99:a8:7e:32:b5:03:e4:fc:ff:a9:d4:
         3b:c4:98:a2:79:3e:97:72:28:76:d2:91:9d:ae:4a:0f:26:6c:
         b4:ab:55:f6:e0:34:e8:86:9e:87:ed:9a:88:6c:98:0e:60:bb:
         5d:ad:33:18:da:8b:27:a6:46:4e:b0:50:8e:ad:3f:51:69:6c:
         77:d4:71:43:7d:cc:08:be:b1:27:e9:cd:b2:bf:c0:01:98:70:
         9b:4a:64:62:cf:77:eb:7e:2c:da:ef:96:44:e4:a3:e1:f7:7a:
         5e:d0:7d:89:82:88:9e:09:13:96:ea:5a:b6:34:eb:91:7f:62:
         8e:57:d5:a4:64:5c:c6:5e:fe:f5:cd:1a:b8:a6:72:30:ba:90:
         f8:20:d8:eb:46:fd:9f:88:43:10:f8:e9:58:96:bc:c9:9b:82:
         f5:c6:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:06 2026 by rpki-client