Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File:                     Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier:          4UZv2q4agsXSP8J0WJBy6nn5QiVAnoSGKBaZQW322H4=
Subject key identifier:   B6:B9:B0:8C:12:5D:35:5D:E5:CA:8D:0E:99:47:B9:EF:FC:86:61:C8
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer:       /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial:       034B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number:          0343
Signing time:             Mon 27 Jul 2026 02:09:15 +0000
Manifest this update:     Mon 27 Jul 2026 02:09:15 +0000
Manifest next update:     Mon 03 Aug 2026 02:09:15 +0000
Files and hashes:         1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: YJOohtl/KIm706acykZXasN0v/kGQOjsOr7C/cDLZVI=)
                          2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: 36bHjTlr+0HE0f10oYmhOfC+GpQPqJLk/D3JPOs1dH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
                          rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
        Validity
            Not Before: Jul 27 02:09:15 2026 GMT
            Not After : Aug  3 02:09:15 2026 GMT
        Subject: CN=6a66bdcb-1740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:c1:98:11:a9:e7:7c:2e:4b:d8:cf:b0:e8:
                    d7:91:9a:df:fb:11:92:4f:ad:9b:ef:89:6d:2a:55:
                    5e:fd:19:7c:fe:c1:63:ae:ca:7c:10:7e:e6:4f:62:
                    90:2a:bf:b2:cd:6b:a8:5b:54:44:33:3a:9f:77:0e:
                    82:9d:4d:1a:0b:c9:7b:70:9c:ba:5c:71:ff:bc:7a:
                    55:09:1f:b8:09:72:90:fb:1b:05:f4:5e:93:0f:30:
                    8c:b4:05:5d:ef:88:34:5f:99:c8:23:96:10:ce:cf:
                    08:e4:d4:80:0e:f8:74:7b:e2:1a:74:45:0d:4d:00:
                    68:f6:d7:b5:ab:5c:38:87:11:cb:cc:14:3d:8b:ab:
                    cd:07:73:94:46:f9:1e:bf:e9:e5:d4:51:99:1e:08:
                    76:fb:b1:88:a8:b3:b6:a6:37:4a:d5:9b:74:54:0f:
                    bc:90:ec:eb:f3:3d:18:6f:06:30:0c:19:6c:2b:1e:
                    e3:c1:35:f9:66:64:2a:07:5e:b6:30:b5:46:61:ea:
                    4c:76:1d:3c:96:89:6e:a7:0a:ab:29:06:cf:ec:76:
                    9d:b1:ba:e4:a9:5a:6f:f3:b2:f4:c9:af:9b:5f:b6:
                    e7:56:21:7b:c5:c1:50:b5:82:97:6c:28:a0:12:4c:
                    a9:99:ab:07:d4:24:b0:39:d1:6e:83:b8:03:b9:19:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B9:B0:8C:12:5D:35:5D:E5:CA:8D:0E:99:47:B9:EF:FC:86:61:C8
            X509v3 Authority Key Identifier:
                keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:ba:b4:5d:5c:2d:5d:84:f2:b1:7a:bb:d6:2a:48:e8:f8:
         6e:3f:74:0e:9e:8b:24:80:8e:eb:f2:14:7c:d3:6e:e1:8a:92:
         99:6b:1a:ea:cd:06:c5:ec:a6:95:88:5e:ff:71:fa:13:0f:49:
         64:b7:8b:fc:07:d7:f5:e1:4f:d6:c0:b9:fd:d0:7e:c0:22:6e:
         19:86:16:83:ce:54:1a:68:6a:3a:4b:37:73:08:ef:a6:4d:d2:
         41:5b:09:77:30:b7:cd:6f:14:0d:58:e5:20:1d:b8:c4:77:e8:
         2d:6b:78:ea:3d:5f:c7:26:58:5e:fe:8a:00:25:26:13:3b:70:
         15:2b:ba:f1:e4:ca:40:98:27:43:04:b0:eb:96:c0:44:b4:5d:
         86:e1:9f:d7:c7:fd:76:52:97:24:51:c7:a6:d7:13:02:ff:17:
         5e:62:0a:16:8c:9f:0b:c4:88:ea:8c:36:ad:39:f3:46:66:7f:
         63:72:41:ab:4d:d9:17:e6:3f:35:ed:94:d3:df:92:5a:0c:01:
         d5:3c:d5:ec:c5:85:71:24:8d:6e:07:ec:df:cf:35:ab:dc:ce:
         6b:4d:ea:b7:06:e8:9a:c8:b5:2c:47:1d:80:08:70:4a:ab:06:
         09:2b:e0:cb:90:0f:2c:a9:a7:d0:75:08:c7:f5:ab:3d:5b:45:
         30:1a:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:24 2026 by rpki-client