Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File:                     YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier:          /KD2aErADoPXtuwWQAegUSiSl7UdIE6ZcpRUI+UHMRo=
Subject key identifier:   A3:C8:9F:C1:0D:82:DB:7E:EC:53:E7:02:2E:B6:9B:C8:B7:D4:68:A7
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       0683
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number:          0672
Signing time:             Wed 22 Jul 2026 23:17:33 +0000
Manifest this update:     Wed 22 Jul 2026 23:17:32 +0000
Manifest next update:     Wed 29 Jul 2026 23:17:32 +0000
Files and hashes:         1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: CE7A9xnW01UqR3Stxit/c7yRRAF1jZxvg9LhuChy3J4=)
                          2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: z3K78kKecVQMmJ50EY3GJXcrFCdRmrLxw9yA8ww2hMY=)
                          3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Jul 22 23:17:32 2026 GMT
            Not After : Jul 29 23:17:32 2026 GMT
        Subject: CN=6a614f8d-277f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2a:89:90:b1:6a:e4:45:96:84:f3:31:f8:e1:
                    20:31:c2:79:88:54:bb:c5:13:bc:95:1c:bf:6f:f7:
                    57:8d:70:2e:50:ec:2c:07:f5:65:25:53:fa:2a:c3:
                    0f:b6:4d:7c:ec:5c:61:c7:61:18:cd:b6:74:b2:f8:
                    ef:82:b5:c2:01:56:0c:33:c5:0c:29:0b:23:b2:c3:
                    4f:c1:bb:93:24:a3:9a:bf:34:aa:8f:76:1f:8d:ec:
                    e1:53:12:e1:c8:c0:f9:80:b2:e9:ae:cd:48:d2:fc:
                    01:71:b3:98:41:f5:b6:6c:bf:0b:73:d3:9d:91:6e:
                    55:c1:84:3a:e2:8a:94:2f:e2:d3:ae:17:3e:d6:c4:
                    82:e8:10:ba:ab:cd:f3:82:e1:59:7d:5f:5e:6d:ba:
                    6c:40:64:6d:e9:ac:b4:16:d2:55:2c:c3:75:ae:2d:
                    cf:f3:84:c0:00:08:08:9f:10:af:9d:9b:0e:74:76:
                    c7:7f:ae:83:0f:06:ac:ea:b6:40:7a:1d:7b:dd:22:
                    85:88:7a:63:29:81:f7:72:f8:3d:a3:00:14:6d:43:
                    2f:bc:97:54:eb:fc:8e:37:3b:01:9c:6e:42:1f:a6:
                    a7:73:c7:db:9c:55:a7:2c:80:71:b9:24:85:21:67:
                    1e:1a:3c:c3:bf:a6:f7:7f:4f:5b:0e:5c:97:76:2b:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C8:9F:C1:0D:82:DB:7E:EC:53:E7:02:2E:B6:9B:C8:B7:D4:68:A7
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:ff:ca:e8:01:dc:85:1a:55:b5:16:d8:a2:24:49:e1:e0:
         34:a8:b4:e0:2c:86:1f:59:b4:67:85:12:35:3d:ce:ce:2b:1b:
         a6:a8:5c:4f:fa:a6:37:12:45:19:6d:be:ba:a5:84:33:5a:74:
         40:d8:91:ab:85:8e:22:5b:7f:c4:d5:12:ec:16:cf:ea:5c:0a:
         4f:04:f9:e8:62:13:a2:bb:f2:17:e0:41:11:d0:9c:15:7c:4e:
         2d:ec:e6:b1:7b:77:4b:88:36:a5:dc:c1:4a:8f:00:43:d9:5c:
         e9:43:c3:21:ba:9b:5b:66:e4:1b:60:29:30:aa:e8:1d:82:65:
         3e:1d:f3:1d:65:c3:6f:15:9e:5d:08:ac:6d:cc:f0:3f:42:cb:
         db:99:2d:5e:52:69:e8:6f:61:01:2f:be:fc:ca:1b:c5:00:28:
         9e:83:23:d8:fa:f2:3d:cc:81:98:3f:93:85:49:f3:06:09:98:
         0d:2f:27:76:5b:04:51:8a:20:fe:46:6e:08:07:84:7c:fb:85:
         b7:c5:23:49:3b:02:99:6e:fb:ed:29:39:61:ca:e4:b0:98:6b:
         88:10:f6:ba:ce:7f:c0:09:eb:f7:f0:3e:73:de:e6:8c:ee:b3:
         a7:38:65:fc:e7:11:d0:90:28:e5:2f:f8:b3:8a:09:bf:91:4a:
         cf:0f:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:27 2026 by rpki-client