Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          ehXyHEwxVbS9wMROTWQK2Vi+nS4aGNDPVTPKxEidPqQ=
Subject key identifier:   EF:C3:AA:BD:5F:93:41:75:B7:48:93:04:A3:13:9C:D1:D5:13:0A:BD
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          0177
Signing time:             Thu 23 Jul 2026 06:12:44 +0000
Manifest this update:     Thu 23 Jul 2026 06:12:43 +0000
Manifest next update:     Thu 30 Jul 2026 06:12:43 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: ie3wWp5NLGYOI+fqRVmnm6N5dIiFFyH2zlAoFNqS8rE=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: Jul 23 06:12:43 2026 GMT
            Not After : Jul 30 06:12:43 2026 GMT
        Subject: CN=6a61b0dc-1689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:ca:c6:58:75:08:03:67:76:61:4e:a9:a5:
                    c3:39:4b:03:c3:bb:68:af:08:14:66:b9:37:fc:8d:
                    4a:a5:2d:87:21:c4:be:c2:46:52:93:68:ce:c3:4f:
                    42:9b:23:75:f2:ef:e1:4c:a2:97:6f:17:e2:4b:e4:
                    b4:f6:db:8b:bd:cb:d4:a9:6a:b6:c5:ec:66:0e:94:
                    96:f4:c3:91:61:8d:ee:5b:12:a2:81:58:cf:c8:26:
                    04:08:ca:ff:9d:62:ea:aa:dd:9a:61:ce:08:9b:86:
                    84:b3:05:83:fd:4f:6a:98:8f:92:01:99:49:c8:67:
                    09:4f:97:ce:c7:cb:ef:28:53:9c:0a:2a:d9:a1:a6:
                    e7:1a:2e:a5:b2:65:f8:f4:fc:cb:13:ef:39:16:f2:
                    b0:43:a5:25:fd:13:32:eb:19:51:9d:98:3d:17:f9:
                    7f:32:20:0c:f8:b2:c9:60:d4:ea:de:b2:e4:46:84:
                    6c:0b:b9:e6:39:55:2e:86:97:89:98:cd:d8:ed:47:
                    35:48:d3:b6:86:7e:ea:fd:6c:30:43:2f:d6:36:27:
                    6b:af:f4:37:14:2b:ac:a0:5c:25:96:35:c2:5f:b3:
                    a9:55:87:08:f0:be:c1:88:11:10:1b:b0:87:4d:0a:
                    1a:10:94:09:b9:cd:ea:a2:6a:c6:4f:42:19:da:7e:
                    e6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C3:AA:BD:5F:93:41:75:B7:48:93:04:A3:13:9C:D1:D5:13:0A:BD
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:95:48:a1:9b:01:c8:32:a8:81:9c:f0:5a:8e:21:56:59:54:
         e1:33:4f:95:1f:04:69:47:07:c9:a1:fe:b9:aa:bc:c3:ed:e1:
         03:af:8f:27:84:9f:18:51:26:4d:eb:8d:4a:41:c2:5c:6f:46:
         4a:4d:11:28:83:fc:bf:6b:83:11:23:40:ff:d8:59:8d:8a:4c:
         c3:aa:d5:2e:ec:17:fc:bf:bb:41:28:f6:12:a2:0c:0e:50:4b:
         41:ec:1d:f9:a6:f5:e8:13:36:45:50:f0:05:a4:12:0f:d2:f5:
         60:7d:08:27:73:b3:63:1a:f5:7f:92:1d:88:f2:31:01:2f:1b:
         e9:ab:7a:5f:98:29:a6:0d:e4:e7:42:eb:37:19:a8:97:db:9c:
         8e:33:d3:5f:ff:78:d7:c8:e0:63:75:62:dd:03:27:79:88:6e:
         ee:15:34:3c:f5:9b:a5:cd:14:d0:d7:5e:2f:d9:3a:cc:25:06:
         98:d0:1c:6b:39:2f:4c:71:ef:3f:d4:1d:8b:a6:3c:7a:11:73:
         bb:0b:c9:f0:5e:a8:d1:b0:7c:c1:b1:c9:c0:af:68:f7:32:46:
         7f:2c:0c:de:c4:eb:d2:d6:60:97:8f:fb:ef:e6:6f:71:9d:c3:
         b0:10:db:e8:54:59:31:a0:41:60:68:bb:49:50:cb:84:ce:03:
         3b:c0:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:15 2026 by rpki-client