Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File:                     Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier:          NI8ut0oRBKyJQ62s+6A/yOow3bwkhcX6zP67KiKPyJQ=
Subject key identifier:   16:DC:A0:8C:1D:AC:BE:8F:73:A5:80:78:3A:CF:C2:EE:0A:F8:27:99
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer:       /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial:       0EDF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number:          0ED3
Signing time:             Wed 22 Jul 2026 17:51:28 +0000
Manifest this update:     Wed 22 Jul 2026 17:51:27 +0000
Manifest next update:     Wed 29 Jul 2026 17:51:27 +0000
Files and hashes:         1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: xRkbCzzMmMkmS18PSXrVHM2n9A7+3ZAorQ2aYd+2wXo=)
                          2: BA55D63C415311F1A8AAFB3BCA833773.roa (hash: 5c6lk8zZg9JDdCtbr0MwnxF7u7fQcm0RumOai6GNeD4=)
                          3: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3807 (0xedf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
        Validity
            Not Before: Jul 22 17:51:27 2026 GMT
            Not After : Jul 29 17:51:27 2026 GMT
        Subject: CN=6a610320-100f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:67:94:cb:ea:2e:95:20:5e:26:30:d5:ab:
                    2b:f5:d4:26:2d:93:aa:06:e5:4d:95:71:4b:43:bd:
                    7f:7c:60:cc:bd:d0:c3:1d:31:68:fc:3e:0a:68:cb:
                    3e:07:d3:e3:ba:f2:77:0e:60:cd:34:3f:9c:71:82:
                    4b:16:90:77:40:1a:3f:83:2b:49:2e:bb:c3:e7:6e:
                    53:64:b4:4f:d0:58:46:cf:7c:11:e0:46:22:84:ed:
                    bf:c3:20:c0:7d:98:37:a7:d5:0b:d8:31:25:8c:aa:
                    21:4f:96:4e:2c:51:32:04:b6:4e:4c:ce:3a:43:fd:
                    9a:24:54:d9:49:fa:63:38:7a:b9:bc:98:9a:fd:1a:
                    a5:cf:f8:eb:8d:f0:69:d2:69:c0:f4:ed:18:b5:5d:
                    c2:83:e5:36:46:b5:8b:26:68:07:1a:4b:64:08:ec:
                    9d:de:43:98:e3:cd:41:81:29:75:0c:b4:54:e4:26:
                    b7:c9:71:33:57:1a:cb:b0:9c:16:de:ca:fa:2b:54:
                    20:5f:02:62:1c:69:0a:9f:e2:2a:4c:3e:42:3a:4e:
                    b6:25:77:69:9f:68:3f:3b:77:f2:1c:ad:98:fa:87:
                    ba:86:22:03:38:14:0c:ce:a6:d0:2a:f5:0a:bb:ac:
                    2b:f6:c2:2c:62:e9:41:13:b6:ca:53:64:e5:d7:ad:
                    bb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:A0:8C:1D:AC:BE:8F:73:A5:80:78:3A:CF:C2:EE:0A:F8:27:99
            X509v3 Authority Key Identifier:
                keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:0c:36:23:e9:15:29:12:4b:1c:a6:f8:4e:8a:00:62:9d:
         83:29:20:da:0f:6b:b5:29:a3:15:58:f8:7e:e3:1b:24:30:19:
         78:2f:16:72:89:5d:0c:be:c7:b0:ab:58:51:c6:08:f7:80:af:
         3b:72:61:c2:52:60:86:7b:c2:df:6b:13:a5:17:96:73:bc:02:
         d9:37:8f:e1:d7:b2:44:9f:aa:f1:a9:4f:18:a4:77:9f:72:d1:
         48:2b:9d:ec:fa:1d:64:ab:af:7a:d2:8a:71:ca:23:09:ef:b2:
         16:a8:38:88:b8:9a:d5:a7:2a:e6:b8:a2:90:61:85:47:af:91:
         b2:cc:d6:8b:15:60:1c:f5:ab:6c:84:d9:2a:c2:fa:43:3f:d0:
         04:11:26:4f:86:71:ab:b4:66:99:c0:38:ea:6a:fc:44:02:7f:
         43:c0:31:fa:d1:19:e6:61:22:42:f4:58:17:fb:79:06:23:7c:
         08:ca:48:03:db:2a:6a:97:97:2e:d8:ee:49:bc:f9:66:75:f8:
         21:03:f0:5a:98:fc:70:62:d6:de:23:29:a8:1b:0c:8b:bc:63:
         af:00:73:39:33:71:97:78:d7:f4:d0:15:10:0d:0d:d9:f2:05:
         19:67:31:64:68:6a:69:ae:3a:94:fc:53:56:e8:25:0a:ee:e3:
         3a:df:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:59:45 2026 by rpki-client