Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
File:                     y1IFTj13aOoWtrColMdzon3qkho.mft (raw, json)
Hash identifier:          VR7JPWs+JMTfp8Apic3KBlvftsKnKTJrPfNJNpvjql4=
Subject key identifier:   93:98:29:6D:0C:BC:99:1B:E8:95:F0:5A:AA:4B:23:29:82:E8:E9:B3
Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A
Certificate issuer:       /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
Certificate serial:       0CDB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
Manifest number:          0CCB
Signing time:             Wed 22 Jul 2026 18:45:47 +0000
Manifest this update:     Wed 22 Jul 2026 18:45:46 +0000
Manifest next update:     Wed 29 Jul 2026 18:45:46 +0000
Files and hashes:         1: y1IFTj13aOoWtrColMdzon3qkho.crl (hash: RpSZEf2sNrtWHh7ve9S3J0rbtzyOuiS8zzQN/ZByBiY=)
                          2: 12D352766D2911F0B26CB33BC4F9AE02.roa (hash: +veuE7uroMOvZaLX4YYQUXIUo7kDv0lS8n9ppMEUfBU=)
                          3: 9DA63F546D2811F09647053BC4F9AE02.roa (hash: RqF3cRBG8AaHKTEnB008C+GD7GzGFEY6SVWZ6TQ/56s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl
                          rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3291 (0xcdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A
        Validity
            Not Before: Jul 22 18:45:46 2026 GMT
            Not After : Jul 29 18:45:46 2026 GMT
        Subject: CN=6a610fda-11c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9c:71:a9:51:09:15:07:86:20:14:0a:49:a4:
                    df:e6:7f:69:91:c0:b8:07:85:01:f7:d6:b5:5d:79:
                    5c:8e:ad:f4:3d:88:97:39:84:71:55:c4:6e:15:a6:
                    e4:6c:e8:c7:ea:cf:94:61:98:d5:f1:00:fc:bc:6c:
                    0f:43:ff:e6:a8:12:cf:a9:d8:9b:8e:d8:4a:dd:c1:
                    8b:5f:8c:d1:90:80:ef:d6:ed:a0:1e:1f:31:ea:a6:
                    fa:24:fe:4d:34:5c:0d:b6:37:8f:ce:68:a8:88:bb:
                    8c:d1:91:0d:bf:d2:91:16:bc:69:fe:7c:f5:bd:d8:
                    30:30:60:c0:68:9e:3e:28:52:34:3f:1f:27:9a:df:
                    e0:1f:67:b3:2d:d7:62:cd:a6:ab:29:ad:87:cd:f7:
                    75:d2:a9:87:c6:da:d1:80:e3:9f:7e:2a:d2:1d:60:
                    90:d8:05:f4:a9:af:2d:50:a1:92:c0:aa:89:d0:61:
                    16:77:5d:8e:f5:63:80:93:6e:6d:c9:ea:b5:08:a7:
                    8b:e9:6e:5c:da:60:0a:2f:91:81:1c:e9:51:35:c9:
                    c0:e2:40:5b:63:e1:47:de:33:47:37:a7:f9:67:1a:
                    8d:e9:d1:6a:8d:c1:20:f8:36:b4:59:7c:bd:4c:70:
                    ad:95:11:7d:ac:82:af:f4:b1:ad:75:82:e9:32:2b:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:29:6D:0C:BC:99:1B:E8:95:F0:5A:AA:4B:23:29:82:E8:E9:B3
            X509v3 Authority Key Identifier:
                keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:14:98:d8:b7:82:d9:9f:c1:50:96:9c:43:09:94:e1:cf:
         7c:44:43:9a:c0:4d:e1:ac:8b:8f:0c:5e:83:72:73:5e:8f:ed:
         b2:4d:1f:ed:83:a2:3e:42:26:58:67:c9:05:54:77:52:61:3f:
         2a:80:44:19:4e:84:74:56:f1:ae:8f:7b:25:a3:7e:02:76:5c:
         16:bd:05:f8:0b:b7:34:99:cf:1e:10:bc:0c:9e:d6:65:8c:84:
         8d:a2:02:18:7d:61:43:52:d4:c9:fe:7f:90:fe:62:f4:56:09:
         97:52:57:31:05:33:3a:ef:fa:7e:46:3f:1d:e7:49:69:f3:2d:
         71:32:e0:67:f0:24:61:3d:ad:78:ff:4e:02:1d:fb:61:2f:c3:
         b7:1d:bf:20:65:a1:e9:54:ae:8c:88:1a:64:11:53:e4:85:72:
         59:fc:10:aa:c5:ec:77:41:74:ea:d6:51:2b:48:9e:40:ea:0a:
         94:30:57:11:90:0c:5f:60:a3:24:c3:b5:d7:63:f1:88:9d:c1:
         78:8f:94:d3:06:47:95:94:d7:c9:60:28:9a:08:9d:81:72:c6:
         ec:e2:fe:61:d2:4a:1c:47:55:a4:d5:ed:6b:af:67:8c:b2:40:
         4e:d7:03:5f:2e:ed:be:24:60:82:3a:d4:aa:31:10:00:10:af:
         8d:38:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:19 2026 by rpki-client