Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File:                     yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier:          KfypVa1NkFNgR2umhaNlAvTUuQZrJ84XZmuXPNDT7RQ=
Subject key identifier:   40:81:7D:18:CE:C2:76:C5:2F:EB:0D:EB:74:27:0E:12:F1:18:FB:31
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer:       /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial:       0E45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number:          0E2A
Signing time:             Wed 22 Jul 2026 18:00:00 +0000
Manifest this update:     Wed 22 Jul 2026 17:59:59 +0000
Manifest next update:     Wed 29 Jul 2026 17:59:59 +0000
Files and hashes:         1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: 1fVC2GLCVD4XDRAe6e5DERvT7QYXWzRlHcFidoQIWkk=)
                          2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE=)
                          3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: nT2sh7uqTi1U5cwmoFpAbizu4Ra0Y+5JbyS+sH+1hZc=)
                          4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: YHt1SbNsyMG4Q62rnhZuMa3T8SKHY5G8WGqZLcUa22M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
        Validity
            Not Before: Jul 22 17:59:59 2026 GMT
            Not After : Jul 29 17:59:59 2026 GMT
        Subject: CN=6a610520-933d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:66:29:43:54:a6:57:d7:1b:14:fe:e2:b9:
                    c0:8f:ed:9e:39:aa:c2:b1:d5:81:ec:db:e1:b2:40:
                    e8:0a:bd:ad:b9:f9:44:f6:62:f8:3d:de:7f:a0:1f:
                    85:32:5a:15:04:44:3a:98:ae:42:a3:51:dd:5a:fd:
                    0b:e9:54:96:74:cb:ec:73:a8:84:54:6f:ec:d2:41:
                    4a:01:d2:8b:62:9f:fa:f8:64:6f:21:31:02:e8:2f:
                    8b:81:a8:1d:5f:35:f6:8b:76:5d:97:4b:d3:69:ad:
                    aa:8b:0a:51:ef:77:46:78:a0:11:5b:22:0a:76:8e:
                    5d:82:85:54:ec:eb:f6:3f:34:a0:45:59:2a:31:db:
                    23:9f:b4:aa:ef:ce:60:0c:85:b0:5e:59:f2:b8:8d:
                    21:68:3f:41:f5:a7:2c:d4:2d:3b:33:7a:90:f3:83:
                    8a:32:55:17:25:3b:3d:69:7e:6c:13:7d:53:b5:0f:
                    78:be:63:5d:a9:ea:12:29:af:25:01:c3:30:be:f4:
                    d4:dd:bb:ae:a7:1b:37:b6:71:32:fd:ef:d9:0a:2d:
                    62:c2:53:14:cb:2c:c9:0e:09:8e:50:40:40:d5:6e:
                    89:dd:a2:97:79:de:cd:d2:17:91:06:94:08:dc:cc:
                    52:37:81:d6:53:06:ad:54:15:ba:31:20:e0:2c:66:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:81:7D:18:CE:C2:76:C5:2F:EB:0D:EB:74:27:0E:12:F1:18:FB:31
            X509v3 Authority Key Identifier:
                keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:31:2a:75:15:3a:c2:37:e2:5b:a9:2f:1d:8c:d0:63:99:
         96:dc:ea:ed:4c:0a:70:d9:d3:93:e6:66:35:4d:65:43:62:d7:
         7f:b2:49:77:2a:3b:01:9b:1a:e5:c3:65:ca:03:e1:e9:e1:d8:
         e0:60:40:03:4b:8c:82:28:8b:ae:eb:ae:72:bd:85:01:13:42:
         0f:be:00:f4:33:9a:72:b7:59:0a:bb:9c:38:7c:cb:da:ea:06:
         d3:3b:cd:d6:99:0d:9d:e3:dc:5b:f0:38:37:38:7d:43:4f:fa:
         05:a7:15:31:00:30:a3:a1:f0:6e:b3:ba:37:a9:ed:bc:b5:6e:
         8f:02:2c:fd:fa:fe:1f:52:d2:c9:b7:bc:c9:7f:a1:dc:77:58:
         98:8f:ba:b6:92:d4:c3:e3:38:b5:7d:c4:60:99:90:4f:99:82:
         42:e0:fb:e0:3c:bb:b5:86:cd:0f:b5:c3:b2:8b:9b:a4:76:f6:
         b4:57:64:17:36:72:30:3b:d6:7f:36:45:e0:ed:17:af:9b:2c:
         44:76:13:66:bc:0c:82:03:e0:e8:05:b9:90:4d:e0:bb:63:46:
         9f:4d:36:37:02:79:de:60:97:00:01:f4:2c:6a:a4:43:49:b2:
         42:97:25:87:98:e9:09:11:0f:ff:72:28:67:ce:49:37:af:5f:
         b6:78:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:08 2026 by rpki-client