Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
File:                     jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft (raw, json)
Hash identifier:          NUa+dJB6JQ7qH4q4EcYQclvPrwBWkxqDR2pfF5bSpVM=
Subject key identifier:   46:87:C9:34:8C:6A:41:F4:68:9D:8B:D1:2B:75:2B:62:58:CC:8D:65
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       011A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
Manifest number:          0116
Signing time:             Mon 27 Jul 2026 07:56:56 +0000
Manifest this update:     Mon 27 Jul 2026 07:56:56 +0000
Manifest next update:     Mon 03 Aug 2026 07:56:56 +0000
Files and hashes:         1: jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl (hash: rcghDq9WxezFAR9c52KeJCo+B+mPrcD42IDQazYZuOc=)
                          2: 6C22134AE21D11EFA8E87E7DC4F9AE02.roa (hash: aH/OZI7liUoMXnfYTacg+2z5O4WF8f62aR9XKpewm/g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Jul 27 07:56:56 2026 GMT
            Not After : Aug  3 07:56:56 2026 GMT
        Subject: CN=6a670f48-bb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:d5:89:7a:1a:82:33:04:db:6b:8a:18:8c:
                    f8:0f:83:38:ff:d1:80:5d:75:32:f0:fc:43:bc:00:
                    78:c4:07:ce:56:6e:97:a0:40:a8:8a:12:97:16:1f:
                    e9:f0:50:a4:3c:44:68:19:62:84:e1:9e:5c:60:bc:
                    85:69:5f:b9:ae:3e:19:94:fa:53:36:47:73:f1:e2:
                    87:76:a2:34:9d:1b:78:99:1c:a9:25:df:f1:4b:a5:
                    b1:3c:1a:da:86:6f:52:3d:2a:1c:a1:da:54:d2:72:
                    ba:83:30:39:1e:b6:a6:e0:ef:d0:87:fb:c7:a6:f4:
                    87:1c:34:62:f8:25:d0:43:b2:f3:07:13:00:75:73:
                    c0:5f:a4:c6:c3:5a:91:85:ad:1a:50:7e:b8:fd:5e:
                    f7:b6:ed:17:cc:c2:14:da:f4:dc:66:ea:a8:04:2c:
                    06:60:7e:3b:ab:a1:6d:cb:c8:80:11:cb:8a:21:88:
                    ea:cd:ec:eb:b7:f5:2b:6f:14:94:b0:0c:fc:ca:10:
                    ed:25:31:9f:36:4d:c2:a7:21:62:d9:15:e9:f6:4e:
                    06:3c:9c:0f:13:4a:0b:3d:76:f4:91:b7:37:b7:57:
                    8e:ff:40:75:ec:63:49:61:c7:f7:03:45:e9:0f:9b:
                    b9:d2:ce:55:62:0f:e0:1d:6b:6f:22:4a:4f:ed:bb:
                    0f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:C9:34:8C:6A:41:F4:68:9D:8B:D1:2B:75:2B:62:58:CC:8D:65
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:9e:95:aa:ba:91:ec:7b:ca:05:e1:8d:57:f8:d0:3f:f9:8f:
         fb:f0:d2:d8:71:52:08:73:7b:a2:f5:2c:fa:a5:38:55:70:c0:
         f9:4b:99:e3:5a:4c:a6:cd:19:13:2a:9e:9a:61:5f:72:b9:31:
         a3:6a:7e:07:a6:0e:be:62:40:80:1f:2f:95:31:2a:c2:8c:5f:
         c1:2b:56:c3:55:31:1b:0a:07:8b:cd:74:0e:5b:55:be:a9:a0:
         a7:38:93:ab:90:bd:bd:a5:cf:d4:32:67:26:1f:01:c9:cc:10:
         8c:b6:99:93:16:e9:8b:44:b8:95:90:12:c2:78:c9:56:8f:60:
         c5:5e:88:a8:0b:42:ea:a0:60:cb:51:7b:96:53:c8:cc:02:38:
         1d:e4:3e:af:0e:92:bd:57:de:09:24:03:4a:89:a6:30:32:e6:
         3c:76:7b:6a:26:fb:43:7a:da:60:ce:22:0c:02:88:99:6e:53:
         76:cf:6a:bf:8d:b9:09:43:63:8e:f8:bd:c9:eb:d5:b8:9e:0d:
         82:66:c0:3d:39:0e:5e:2d:8e:70:6c:ca:54:9f:39:28:5b:43:
         9c:89:96:38:3f:2a:70:d0:86:98:78:fd:64:05:61:a0:11:f0:
         cc:09:f8:45:38:ce:3f:4e:85:4f:38:d3:0f:0a:3d:6a:72:f1:
         de:73:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:36:42 2026 by rpki-client