Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
File:                     YcuQhfAv-PpF5zL1gDQPQkngDKI.mft (raw, json)
Hash identifier:          LSkqIMe1h3GCpPqkgmBFpSQ+aKl8VbZ9/H5a1qseCyY=
Subject key identifier:   EA:30:F4:7B:D0:82:62:C0:40:E9:9B:54:57:82:8E:04:18:0B:BC:D0
Authority key identifier: 61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2
Certificate issuer:       /CN=A91DCB25/serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
Certificate serial:       1262
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
Manifest number:          1256
Signing time:             Wed 22 Jul 2026 17:13:21 +0000
Manifest this update:     Wed 22 Jul 2026 17:13:20 +0000
Manifest next update:     Wed 29 Jul 2026 17:13:20 +0000
Files and hashes:         1: YcuQhfAv-PpF5zL1gDQPQkngDKI.crl (hash: 6CvTyJIp/99FIBvHCrkGbxTZfjXXZ+87FbFSXz/3Cuw=)
                          2: BDC1AB0AFDA611E88FA5E26DC4F9AE02.roa (hash: wLzSSsb1W3A2MYP49E/fklCTD0d/JRiMl3Lul9XwiIg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl
                          rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4706 (0x1262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCB25, serialNumber=61CB9085F02FF8FA45E732F580340F4249E00CA2
        Validity
            Not Before: Jul 22 17:13:20 2026 GMT
            Not After : Jul 29 17:13:20 2026 GMT
        Subject: CN=6a60fa31-ffea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:ef:a2:80:ab:60:9f:88:76:13:20:c4:35:
                    35:59:95:47:2d:2a:23:19:ac:29:90:0e:86:0d:61:
                    73:6b:4d:a0:a3:f5:19:ee:22:ca:71:76:44:6c:91:
                    1d:29:0e:e0:0d:c2:d1:5c:1d:72:f5:8f:35:21:5f:
                    21:94:c5:4b:ac:b5:72:b4:fd:3a:3f:9c:b9:0a:63:
                    fd:8d:c6:47:8e:dc:2e:a8:50:ea:51:ba:e0:3a:90:
                    dc:73:b6:f9:26:c5:33:25:23:be:b3:e4:e7:9b:44:
                    0a:1f:b7:00:9c:98:81:c2:fb:22:78:1d:ec:4e:d5:
                    f6:c6:a9:11:58:0b:1c:df:57:ff:6f:8e:1c:74:d4:
                    65:f9:1a:b1:cd:22:11:46:a0:f2:84:47:f8:05:07:
                    27:7c:6b:91:71:5e:51:9d:df:45:99:b1:b9:bd:91:
                    8b:91:31:0c:1a:49:93:cd:1c:01:ff:5d:2b:01:55:
                    28:a9:d6:e0:05:2d:ba:68:a9:a7:da:74:ae:47:f2:
                    41:64:62:8b:c8:71:a0:d7:06:04:ce:fd:74:79:28:
                    da:27:e0:0b:28:e8:36:a0:0c:02:74:7f:6d:e5:79:
                    63:d5:1e:a6:cb:50:63:f0:e6:af:eb:ae:ac:89:a4:
                    1c:cd:f8:08:0a:81:0c:01:f9:3e:64:3e:bb:1b:8b:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:F4:7B:D0:82:62:C0:40:E9:9B:54:57:82:8E:04:18:0B:BC:D0
            X509v3 Authority Key Identifier:
                keyid:61:CB:90:85:F0:2F:F8:FA:45:E7:32:F5:80:34:0F:42:49:E0:0C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YcuQhfAv-PpF5zL1gDQPQkngDKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCB25/2C60DFD8FDA511E88859C06BC4F9AE02/YcuQhfAv-PpF5zL1gDQPQkngDKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:34:c6:9d:8c:10:9e:21:d0:e8:9d:3b:e3:0d:b9:8c:d0:5c:
         1b:c1:dc:4e:1d:20:7f:a8:e4:6c:7c:ef:53:c0:54:42:51:00:
         cf:0a:ef:62:4a:45:1d:eb:fd:1f:a5:40:13:4d:c5:35:0d:d9:
         51:ec:f8:79:5d:74:37:c2:23:fe:cc:87:13:72:b3:fb:04:58:
         70:3d:61:8b:68:84:85:af:29:8e:c8:4a:4d:c5:ad:42:29:6a:
         de:fc:5d:3f:73:7b:aa:16:ec:52:02:1c:d9:75:5e:93:ca:da:
         53:c6:70:3d:3e:99:33:28:15:6f:b4:4a:7a:62:65:d2:d4:a3:
         bb:2f:c0:cc:2b:e6:f5:32:bf:1e:f0:8b:92:a4:04:39:d1:dc:
         a5:2f:58:4e:da:98:ae:bc:2f:2e:e1:d6:97:67:c7:23:82:80:
         1c:89:48:1b:6b:ce:f9:63:70:0f:21:32:e0:c3:5b:6f:60:b9:
         61:99:b7:5b:a0:e2:89:bc:41:14:10:93:95:cd:37:5b:6b:ab:
         1f:53:1b:86:55:b0:7d:71:90:77:96:b1:b0:89:40:f0:64:56:
         51:20:6c:af:5a:b3:59:81:f9:42:1d:c6:28:67:4d:58:53:b9:
         d6:7a:45:4c:d2:92:c7:54:74:b8:95:ae:7b:ec:1c:9d:84:d7:
         c6:36:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:12:58 2026 by rpki-client