Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
File:                     Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft (raw, json)
Hash identifier:          HU+sKyvPyg12H/vVpWBO3Z+EDyu20ih5oNqm6+sHMxU=
Subject key identifier:   19:8A:63:B0:5D:DA:B4:E5:B1:7F:F8:B1:98:DB:C1:19:44:4D:25:40
Authority key identifier: 63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
Certificate issuer:       /CN=A91D69B9/serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
Manifest number:          41
Signing time:             Thu 23 Jul 2026 10:28:53 +0000
Manifest this update:     Thu 23 Jul 2026 10:28:53 +0000
Manifest next update:     Thu 30 Jul 2026 10:28:53 +0000
Files and hashes:         1: Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl (hash: B716AMCuSYlaA8oBvfQrddwqM7kuYH4484wh3KscUbI=)
                          2: 743D4A1A245F11F1B445E15AC5833773.roa (hash: I1pnbFkaRNRmC3NYqt0+dVRJnrgUwzqm0Vjq3Hx70aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
                          rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:28:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D69B9, serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
        Validity
            Not Before: Jul 23 10:28:53 2026 GMT
            Not After : Jul 30 10:28:53 2026 GMT
        Subject: CN=6a61ece5-9034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:00:be:71:5c:9e:2e:4e:ed:dd:b3:c4:5c:
                    95:da:70:b2:58:c0:ac:b6:eb:28:21:a1:2f:a5:c3:
                    1a:bd:2c:bf:21:ae:ba:cf:5a:55:ac:22:35:06:c2:
                    61:d6:f1:a0:16:be:69:cd:c0:aa:a0:83:64:37:cc:
                    44:8c:fb:00:62:54:5f:4b:7b:38:1b:ac:b4:44:6f:
                    e4:01:cf:fb:a7:a3:c1:72:54:80:e2:d9:af:dd:2a:
                    37:4f:74:f1:1f:48:03:a7:34:d2:89:ae:67:b5:41:
                    46:38:10:66:28:79:ee:91:ff:0c:38:34:11:90:60:
                    b7:5a:48:cd:59:66:1a:f3:33:be:3d:06:85:c2:df:
                    dd:9e:d7:2a:90:e6:87:bc:80:6b:98:e6:04:bb:5e:
                    59:3d:5b:0b:1d:67:a9:66:46:db:11:4d:71:66:70:
                    6b:4c:be:17:7b:e4:c1:1c:a3:e8:cb:28:28:ca:0b:
                    cf:83:54:2d:ad:7d:cb:88:31:3f:b0:3b:c0:dc:e1:
                    b3:f0:14:90:a9:85:fe:94:ba:92:f9:d9:20:cf:8e:
                    3d:76:a4:09:c3:d4:08:53:e5:a2:9b:3d:34:3c:1f:
                    5d:21:38:41:46:8d:b4:18:52:e0:71:cb:6b:c7:f8:
                    df:92:d4:f8:0c:56:a1:e8:ce:fe:47:73:84:89:76:
                    af:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:63:B0:5D:DA:B4:E5:B1:7F:F8:B1:98:DB:C1:19:44:4D:25:40
            X509v3 Authority Key Identifier:
                keyid:63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:cb:30:30:ef:e0:5d:db:b5:0b:7b:af:61:26:e5:cc:9c:d6:
         a9:75:62:d6:13:e3:6d:3e:44:5e:2c:e0:6f:7f:ec:52:30:80:
         01:f8:e5:26:d8:3f:d3:b0:d6:e9:19:0b:da:da:e6:93:b0:e0:
         4a:a2:e6:4d:e5:17:ee:56:64:41:d6:78:e0:35:28:d3:62:8e:
         67:1b:5d:d3:e1:80:30:73:64:47:5c:25:4b:a3:99:2a:8d:df:
         cc:dc:60:b8:b0:aa:21:b3:4e:05:31:1a:ad:b4:ef:2d:ac:ce:
         46:4a:25:a5:36:06:07:4c:08:ba:70:2a:85:f9:02:65:e5:b8:
         3b:e9:ae:92:0d:60:f1:03:12:3b:51:79:50:bb:6a:76:0f:38:
         74:bd:44:b1:7e:a3:31:c2:30:4f:cd:fc:ab:e9:ff:f3:a5:20:
         e1:a0:bc:82:e7:f0:73:12:73:24:53:50:35:f6:51:68:a3:36:
         11:2b:ba:e2:0f:e6:6f:b5:6f:d8:9b:18:5e:ba:b9:7c:07:3e:
         1a:76:92:ef:8e:e4:fe:44:75:3e:17:8d:02:6b:31:59:40:89:
         a8:6d:56:08:56:34:fe:02:d7:29:af:22:9a:d0:b5:77:69:cf:
         15:b3:b4:50:d8:cf:2d:e2:f4:c8:f6:08:b1:b1:f5:26:ee:a4:
         69:e0:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:04:10 2026 by rpki-client