Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File:                     yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier:          h46fpW/acmFDV3q/OMjx8l96aTPoWMR8SAqsXhHMbK8=
Subject key identifier:   0C:2B:0C:0B:F4:B9:35:81:26:E4:10:E0:1D:12:DC:FC:E5:F4:8B:CE
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0A7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number:          0A73
Signing time:             Wed 22 Jul 2026 19:59:56 +0000
Manifest this update:     Wed 22 Jul 2026 19:59:55 +0000
Manifest next update:     Wed 29 Jul 2026 19:59:55 +0000
Files and hashes:         1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: c/qhYvq8xa7kJf8ByHnhVBDjkvC8wHz9QSto+AkLzpg=)
                          2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684 (0xa7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
        Validity
            Not Before: Jul 22 19:59:55 2026 GMT
            Not After : Jul 29 19:59:55 2026 GMT
        Subject: CN=6a61213c-4d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:42:b4:e4:50:e4:93:89:6b:cd:bd:17:b3:
                    7c:a9:ad:a5:d0:83:0e:a7:f5:ee:79:a3:27:66:f3:
                    ae:b5:46:aa:3e:e6:d8:85:d5:e9:41:c7:1b:87:6b:
                    c3:12:66:c2:06:e4:5e:66:67:b7:7e:1b:e9:49:c5:
                    10:31:53:d3:55:e5:1a:a3:58:5a:48:7c:87:04:71:
                    56:bd:63:27:3c:f5:bd:28:7a:b8:fd:39:8a:f3:20:
                    b7:47:08:b0:f9:f8:d8:9e:26:6f:e5:b8:a2:d4:3a:
                    1a:7e:6a:55:5e:13:83:b3:f1:b5:e7:16:d3:bd:11:
                    0e:86:13:ba:77:c8:7b:7c:0a:c5:c5:f1:50:7d:ed:
                    98:c7:ac:b1:3d:ce:36:bb:98:d2:50:a6:ca:ae:a7:
                    e6:9a:a5:1d:03:d3:4a:d9:1a:4b:68:38:a1:6d:ef:
                    bc:fb:6c:c1:48:d3:1d:e5:ec:76:6f:26:79:e2:a1:
                    83:67:f3:9b:2f:d4:e2:1a:e0:d1:5b:53:80:10:55:
                    0c:63:b4:ee:bc:84:4c:01:c0:68:74:c3:31:e6:d7:
                    56:71:bc:0e:13:7d:d1:b3:00:b8:a9:37:aa:1c:38:
                    84:44:86:7b:4a:b7:a9:67:8d:b1:e1:64:7f:35:3e:
                    f4:3e:fa:4d:f4:39:3a:b4:04:ad:9b:5b:a6:17:01:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:0C:0B:F4:B9:35:81:26:E4:10:E0:1D:12:DC:FC:E5:F4:8B:CE
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:47:f6:f7:36:ca:e2:c5:c4:10:dd:2b:0b:d1:38:b1:b6:60:
         8a:08:65:95:79:33:52:b5:1f:df:d5:05:09:dc:df:01:f2:fe:
         57:14:9b:99:1d:fe:69:85:ff:74:b9:c0:1a:0f:0b:a5:01:3f:
         df:0b:4a:13:87:d3:a0:f4:bf:99:bb:1a:ae:f2:b7:cb:85:43:
         45:b7:0f:65:b1:aa:f3:16:63:f1:d5:70:75:9e:15:04:8d:18:
         e6:38:51:ee:57:52:89:5b:0b:b9:26:f4:99:37:f0:7a:77:9b:
         31:78:c1:4c:a5:39:08:fd:7c:4b:f5:56:d5:91:64:71:d4:64:
         24:0d:04:41:47:e3:0f:6c:96:b7:df:58:48:e1:ec:39:d8:4a:
         c6:c3:f3:6c:b3:24:0e:0e:ff:3b:27:cc:08:71:87:6e:9a:95:
         d2:ac:92:e5:dc:f1:dd:60:16:c6:cf:2f:c3:db:09:93:b0:c0:
         5a:1f:48:bc:ae:45:ba:cf:7c:c6:58:e5:78:54:df:fc:25:1d:
         2b:08:f1:bc:60:bf:7a:4f:c5:ca:e6:06:18:1b:2d:12:7e:9d:
         c7:27:e4:6e:8c:69:0d:7f:59:5c:50:a2:4e:f3:35:68:b6:4a:
         59:21:e7:f1:c7:4f:3f:e3:bb:ed:7e:68:04:9f:b3:9d:eb:e1:
         a4:64:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:46 2026 by rpki-client