Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
File:                     3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json)
Hash identifier:          3qiACLMPiUDIkYqyBumXCWyaFA8+RvXM9VvVjdf9/4Y=
Subject key identifier:   3B:90:82:93:49:F2:71:DD:93:6B:1C:CF:BD:4D:50:B7:4E:85:A1:02
Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B
Certificate issuer:       /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
Certificate serial:       0481
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
Manifest number:          0476
Signing time:             Thu 23 Jul 2026 00:59:07 +0000
Manifest this update:     Thu 23 Jul 2026 00:59:07 +0000
Manifest next update:     Thu 30 Jul 2026 00:59:07 +0000
Files and hashes:         1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: lyou32jG4lliqBGGvrajKpqPHwuxDgfzwsOrnkAXZg8=)
                          2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: ZJNhnD1KuiNnZ2YhdNAFUGJ359TyiQ0No8lMRqwYfSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl
                          rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153 (0x481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
        Validity
            Not Before: Jul 23 00:59:07 2026 GMT
            Not After : Jul 30 00:59:07 2026 GMT
        Subject: CN=6a61675b-fbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:c6:ec:32:05:fc:a7:65:c8:5c:73:40:43:
                    4f:cb:17:1c:60:8d:98:f5:f5:5a:67:f0:e0:f7:d8:
                    a4:2d:77:50:87:25:d8:e4:76:a2:55:40:fa:e0:f7:
                    77:4b:52:73:49:ae:f7:d9:a6:05:4b:26:26:3a:d7:
                    c7:60:10:d3:ba:02:79:b1:38:0a:06:26:8e:54:5d:
                    11:e3:cc:27:5d:4b:1a:0f:77:da:ff:42:bb:f4:ad:
                    59:47:ec:02:be:99:8a:37:16:44:11:59:84:32:aa:
                    4a:24:d9:92:39:95:f0:5d:33:5e:53:1b:95:9f:0a:
                    12:43:b3:eb:fe:5e:a3:db:7b:59:c0:a6:81:b6:88:
                    40:43:79:09:c5:48:81:bb:22:13:76:69:26:ee:9d:
                    d5:78:2f:6b:22:d2:2f:89:8c:a5:04:f9:59:1f:93:
                    da:b8:2d:4d:ff:31:73:02:e5:eb:ea:67:9e:00:69:
                    8e:56:66:44:ed:1a:3c:9b:aa:60:f6:71:be:e9:66:
                    54:04:0b:82:f8:8b:b8:d1:b6:23:b3:62:b2:51:23:
                    0a:08:56:82:ea:83:77:2d:b6:4a:b3:bf:c6:33:06:
                    50:45:74:94:b7:02:12:cd:a3:9a:fa:f6:29:3f:7a:
                    0b:67:ee:4d:82:be:f1:1a:8e:05:eb:51:2d:ec:c9:
                    c1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:90:82:93:49:F2:71:DD:93:6B:1C:CF:BD:4D:50:B7:4E:85:A1:02
            X509v3 Authority Key Identifier:
                keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:15:f0:e5:ea:17:15:9d:9b:8d:33:01:99:e3:ac:38:21:
         89:bf:3d:6e:ee:e8:2a:d7:6a:19:f2:57:a8:74:6c:fc:96:9d:
         49:c5:55:55:04:75:c9:58:d2:34:39:48:f5:3a:0c:e1:7a:b1:
         b2:c9:d1:dc:ed:52:48:0c:6c:3d:fa:b3:d1:db:b8:ca:54:91:
         23:d6:b6:ea:46:3b:58:f9:11:c7:82:7e:da:f0:30:d2:ad:b6:
         71:e4:0e:89:61:72:76:ec:ac:a8:59:1f:b2:b2:6d:d5:c0:ca:
         3b:9a:54:3b:7e:a1:24:9a:df:57:15:d8:70:0d:e6:9b:99:a1:
         05:c8:3a:6f:96:5b:c6:04:df:4b:7e:d4:4c:bc:61:a2:69:8f:
         0f:b9:bf:0a:0c:d0:8f:97:5f:8c:a9:8f:d2:5a:d0:0b:1e:40:
         b7:7a:a8:d7:46:0d:db:e8:4c:e1:ec:aa:4e:92:25:7c:b1:8c:
         27:30:6a:cf:66:e4:29:18:11:60:52:32:21:bc:26:48:a8:7a:
         20:22:dd:77:8f:c4:3a:0d:f2:77:db:cc:6d:e1:e1:f1:10:1c:
         3c:41:40:a3:a7:34:c4:77:2b:ba:20:5c:7d:ae:ec:b1:52:f1:
         ee:49:7f:e8:de:78:fd:4d:96:c0:b0:10:92:b0:40:68:2a:6e:
         d1:7c:c5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:11 2026 by rpki-client