Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
File:                     Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft (raw, json)
Hash identifier:          74dR1VH7fgj97GUegbAKxk+veoUIfkhG5fhYcxai7Ho=
Subject key identifier:   06:8E:F3:75:BF:49:16:32:0E:CD:9E:E3:61:F3:73:E5:00:52:AA:9E
Authority key identifier: 37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2
Certificate issuer:       /CN=A91142EA/serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
Certificate serial:       0271
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
Manifest number:          20FF
Signing time:             Tue 28 Jul 2026 16:07:12 +0000
Manifest this update:     Tue 28 Jul 2026 16:07:12 +0000
Manifest next update:     Tue 04 Aug 2026 16:07:12 +0000
Files and hashes:         1: Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl (hash: qHWLdr3Ez1tgSgOkSRgg3R3oAL+wI34OT6nuFzILzZA=)
                          2: 9FD12146ED7211ED8A92041CC4F9AE02.roa (hash: twO+avT1bwdOGN+sO1DTxPWxAD5/Gbl/GY9g75HuCDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl
                          rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91142EA, serialNumber=372F1C7761B1DDC8328C50BAD0EEEDCD99F2E4F2
        Validity
            Not Before: Jul 28 16:07:12 2026 GMT
            Not After : Aug  4 16:07:12 2026 GMT
        Subject: CN=6a68d3b0-c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:69:63:7c:af:75:2a:39:47:e9:73:bc:88:02:
                    22:4f:5e:14:f0:33:ef:10:f8:e5:1b:e7:dd:88:93:
                    c5:bd:5d:24:91:5e:53:b9:67:13:f8:cd:15:a5:47:
                    8f:1c:28:96:7a:3f:67:a3:8f:13:17:1a:5f:89:f5:
                    a4:80:4c:24:1a:28:4c:c6:52:4a:14:44:93:f7:23:
                    88:c2:86:99:3a:03:32:f0:2a:e3:3b:fb:5f:a1:54:
                    4b:26:d0:87:c2:df:48:4e:e1:64:19:3d:15:ce:ff:
                    69:9e:f2:5b:c4:b9:d5:02:24:8d:2c:43:29:b4:e7:
                    fe:32:cb:cf:0e:48:4a:68:2f:6c:35:d2:d3:a1:14:
                    16:52:95:4b:83:73:87:9a:0c:21:82:f5:e6:22:04:
                    50:e2:2d:86:c6:0b:40:bb:05:17:4f:82:e3:c4:6c:
                    0a:cd:d4:04:98:ae:5d:b8:fe:af:79:57:bb:28:d0:
                    18:51:58:db:ef:aa:58:39:de:b8:39:ec:06:e8:26:
                    9c:7d:92:c4:90:08:3a:76:b1:9a:b8:d4:ac:08:e6:
                    6f:c8:d4:27:ac:6e:0a:1f:19:71:bf:3b:9d:cc:ad:
                    56:63:a0:71:47:9e:25:ad:21:40:d3:b1:46:b8:7a:
                    83:6a:75:0c:dd:29:82:17:fa:aa:51:f0:af:fb:fe:
                    1a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8E:F3:75:BF:49:16:32:0E:CD:9E:E3:61:F3:73:E5:00:52:AA:9E
            X509v3 Authority Key Identifier:
                keyid:37:2F:1C:77:61:B1:DD:C8:32:8C:50:BA:D0:EE:ED:CD:99:F2:E4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny8cd2Gx3cgyjFC60O7tzZny5PI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91142EA/F5332D7E84C311E6B9821A81C4F9AE02/Ny8cd2Gx3cgyjFC60O7tzZny5PI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:95:09:41:ab:58:81:08:91:f9:dd:29:8b:75:03:9d:41:
         7a:36:23:1b:d1:46:a4:04:3a:7a:67:e1:60:e4:22:b2:b1:f1:
         cd:d7:6e:83:66:38:5b:3f:3e:c1:1a:c8:e0:df:6a:44:4e:0b:
         02:84:4b:6f:31:c4:a8:60:19:f7:76:8e:1c:4e:37:0e:1d:ae:
         ff:95:22:70:91:b6:f4:e7:b4:98:fe:e6:fa:35:80:1c:dd:74:
         70:3a:fa:a1:2d:f2:0e:a0:26:b9:82:95:71:91:39:c4:f8:7e:
         ec:47:cb:c1:9f:c0:6f:77:7f:47:8c:18:5a:09:0e:6d:9e:1b:
         3d:22:5a:53:97:3e:f3:50:84:63:a6:97:d7:5d:39:b4:10:f3:
         45:b0:97:38:82:9e:ac:bc:57:29:9c:a3:db:97:3d:0e:a5:b6:
         5a:1f:53:81:48:ac:49:bb:23:f2:c2:2f:4b:0b:2c:66:a5:3d:
         3e:e0:85:2a:cb:67:c4:2e:85:88:38:74:10:e9:12:c6:bc:39:
         4a:9d:ef:42:bf:b2:de:e2:20:2f:25:48:4c:19:97:5d:ab:7f:
         b1:5b:56:5b:fb:a4:78:47:25:f6:89:f6:60:c2:2f:04:36:02:
         36:13:2f:a8:b4:72:54:22:78:d9:73:64:90:9f:e5:4c:5b:a6:
         73:8f:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:54 2026 by rpki-client