Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File:                     YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier:          s9PkrW3Sr8daUyuF2jbREYL5XYtqjUEXLDmEPyMW4ck=
Subject key identifier:   1E:C9:0E:B0:0D:76:6E:9A:A4:2B:E1:A3:2A:CD:B5:A7:34:97:8A:71
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       04D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number:          04B9
Signing time:             Thu 23 Jul 2026 00:47:36 +0000
Manifest this update:     Thu 23 Jul 2026 00:47:36 +0000
Manifest next update:     Thu 30 Jul 2026 00:47:36 +0000
Files and hashes:         1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: I7yKmKMR4oB7ysGVcCkrwuuunano+wLjW+lfh2VGDgw=)
                          2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: JTjRlKAfcNIA5ztze61fVTgp1O9yMXmNQyaweK8zv78=)
                          3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Jul 23 00:47:36 2026 GMT
            Not After : Jul 30 00:47:36 2026 GMT
        Subject: CN=6a6164a8-6b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:d0:e7:f9:29:0f:fb:17:11:11:8c:27:58:
                    d7:b6:fb:e3:2d:be:a8:c8:57:0a:2b:1c:c0:27:78:
                    4a:91:6a:23:1b:c0:0c:78:e1:4b:dc:17:9f:49:23:
                    25:12:da:ee:68:9e:ea:14:40:9e:ef:2f:bc:25:08:
                    b6:51:e3:c7:25:16:b1:88:43:8b:5f:f6:f1:2c:15:
                    3a:52:8f:0e:e6:db:f8:2d:a6:a9:2a:b0:f3:92:c5:
                    8d:f2:43:58:1b:f2:13:20:3c:8b:98:9b:e7:76:3e:
                    38:34:c7:7d:d7:ba:21:e6:b0:e4:0c:d5:be:85:74:
                    b6:c8:77:fd:2f:be:71:3c:d1:a2:f6:2b:bb:80:f6:
                    9b:8c:0d:0b:0f:00:c5:9e:6b:42:1b:6e:86:e6:e3:
                    68:fe:f0:4d:8e:d4:a8:41:91:74:64:ce:48:e2:1d:
                    91:19:17:b5:a4:e1:28:aa:55:20:f2:37:9b:3c:a9:
                    e0:e7:7b:f9:20:e4:e3:c9:a0:3f:7d:d7:1e:6b:06:
                    a8:40:6e:0e:15:f3:9c:ac:14:bc:de:9b:54:94:10:
                    be:1b:49:bb:10:fc:23:8e:cd:b6:3f:dc:99:7b:70:
                    36:8c:62:ec:d6:68:12:b7:34:7f:11:3d:fa:35:62:
                    19:24:96:b2:3d:ca:99:e9:7a:bd:e3:6e:f2:4a:93:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:0E:B0:0D:76:6E:9A:A4:2B:E1:A3:2A:CD:B5:A7:34:97:8A:71
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:eb:fa:8c:17:dc:82:95:18:99:c1:12:c4:af:a4:e7:6e:47:
         07:c3:53:4c:9b:48:e7:b7:d9:4e:05:be:63:e2:49:bf:b1:57:
         85:44:c7:6b:90:8e:62:92:0f:70:ae:33:14:57:ff:35:65:98:
         75:ab:09:a6:57:99:3e:7b:dc:e2:e4:64:b7:4d:e8:5c:87:4a:
         87:ce:d0:e7:59:47:f3:ed:c4:f2:5b:98:13:4e:06:c1:e3:72:
         8d:02:53:5e:28:94:f6:69:23:19:29:79:ec:ab:ce:94:72:44:
         6c:cb:f2:f9:29:09:d0:a6:69:59:e4:4b:bd:f7:31:0a:10:98:
         e5:89:b1:47:e0:59:d7:b3:ff:38:af:09:9f:23:08:b4:01:b4:
         ca:86:a3:40:54:9b:c3:50:6b:dd:0b:aa:0b:75:d3:bd:af:34:
         38:68:b5:33:7f:24:f7:99:c4:60:e2:03:c4:84:fa:61:e2:0b:
         29:bd:b0:ee:cf:50:40:2a:c0:bb:7f:45:ce:85:69:76:90:2d:
         af:60:6e:9d:86:8a:9e:18:84:f0:59:ee:21:dd:16:9c:06:7a:
         54:e2:d8:08:8c:97:b2:b7:0c:82:7b:5c:70:2c:af:96:27:34:
         25:6d:1d:f6:58:42:28:44:6b:cd:e2:bb:b3:dc:a4:f7:69:0c:
         3b:19:bd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:16 2026 by rpki-client