Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          22h911VTfypf9ijrpjek4Qhw/Qw0IJatQHRmxvF9gk8=
Subject key identifier:   72:8C:E2:BF:55:A0:04:96:BC:6E:26:BA:6F:2A:8B:93:42:F8:18:E7
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3564
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3564
Signing time:             Tue 28 Jul 2026 14:59:19 +0000
Manifest this update:     Tue 28 Jul 2026 14:59:19 +0000
Manifest next update:     Tue 04 Aug 2026 14:59:19 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: AMbckOrwm13XN+7JscSm9ckrN/TFVctJuEtxHL4zt68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13668 (0x3564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Jul 28 14:59:19 2026 GMT
            Not After : Aug  4 14:59:19 2026 GMT
        Subject: CN=6a68c3c7-394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:65:f3:78:71:df:f2:1f:e5:49:12:8a:81:
                    75:e3:5c:5e:3b:f5:a6:a5:fe:c7:c4:95:e5:4e:9f:
                    2d:de:a3:b3:dd:fa:60:ef:2d:c6:5f:51:73:17:78:
                    c6:bf:57:4b:ac:97:0c:76:d0:fb:96:18:38:e9:47:
                    70:bb:1c:be:ae:3d:dd:d4:ee:3c:b4:5f:75:95:b1:
                    d1:4d:75:45:f0:59:11:0a:bd:9e:16:dc:71:fc:62:
                    77:37:dd:54:84:00:b7:89:26:36:a9:c6:d4:3b:b7:
                    f5:f1:bb:2e:8e:49:9a:c3:ed:88:2a:3e:c5:cf:d3:
                    b4:62:69:53:3b:23:01:49:19:fc:c0:03:18:3c:26:
                    8a:ed:a5:1b:5a:85:29:7f:ad:fb:a3:53:b2:a2:43:
                    3d:51:d1:00:b2:13:cd:d6:96:fc:59:34:38:7d:0c:
                    2e:22:1e:49:d4:23:d3:63:82:89:ac:f5:f3:52:8d:
                    85:5c:bc:71:b0:9e:c3:22:c9:26:58:fd:31:2d:40:
                    5b:00:1e:2b:f8:ab:cf:36:c9:e0:46:11:a6:99:d6:
                    50:fc:64:17:76:f1:97:8b:c5:19:6c:b9:44:c6:60:
                    77:31:39:1d:d5:aa:83:cc:72:44:3b:6e:5b:06:a7:
                    28:c3:45:ef:cc:b6:a1:cf:4b:ae:d0:a0:e2:ec:fd:
                    c2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:E2:BF:55:A0:04:96:BC:6E:26:BA:6F:2A:8B:93:42:F8:18:E7
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8e:49:39:a9:6a:e4:3e:f5:53:cf:37:e5:ca:81:e1:fd:02:
         ac:a8:60:43:0c:70:15:dd:25:de:84:ff:f2:0b:b6:d7:00:8d:
         de:48:f7:1a:dd:d0:3b:53:75:ba:27:1b:8e:8f:d9:88:07:06:
         a6:00:b5:db:ff:07:45:19:2e:bf:ad:79:ff:e6:40:08:51:17:
         8c:f6:79:1a:48:c4:cc:44:3a:89:95:12:97:1c:0c:00:c4:f7:
         91:d9:4a:47:ed:cd:04:17:75:04:7b:66:94:93:ac:5b:e3:10:
         7d:d1:eb:38:2a:ee:c8:1e:0b:7c:7f:cb:b9:36:af:d1:8f:e9:
         f8:af:4e:96:35:24:2a:d4:cb:57:bb:a3:63:3f:8f:89:ca:a0:
         94:60:8a:1f:14:5c:b5:ff:93:57:84:a8:b7:55:a1:dd:d6:97:
         3f:02:0d:0e:cd:21:83:8e:74:b1:4e:99:67:b6:f3:5a:0a:2a:
         84:e6:2c:97:26:95:7c:f3:98:92:d8:8b:1b:1c:57:7e:af:8e:
         e5:57:cb:fa:98:a2:57:85:01:14:a4:5e:8e:25:f5:54:54:74:
         63:9e:45:d5:58:7b:ca:81:ae:18:74:f7:1a:1c:78:21:59:ba:
         e5:74:92:fe:c4:00:a2:9d:3b:24:e0:61:41:24:2b:cd:21:94:
         7b:85:40:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:58 2026 by rpki-client