Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          SQu1KcFFbM5QECkKFfwLmiSb/9q2KB7xCOj/sit88O4=
Subject key identifier:   62:20:5E:CE:8D:D1:E7:41:B5:53:82:8E:FB:8D:F9:86:A4:15:3B:39
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          0242
Signing time:             Wed 29 Jul 2026 03:32:11 +0000
Manifest this update:     Wed 29 Jul 2026 03:32:11 +0000
Manifest next update:     Wed 05 Aug 2026 03:32:11 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: fA9TLLse5DqgyKfNak8wGxt8ls4RDWhV71xOX2Blsak=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
                          3: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
                          4: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Jul 29 03:32:11 2026 GMT
            Not After : Aug  5 03:32:11 2026 GMT
        Subject: CN=6a69743b-8750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:70:4c:6f:a2:5c:d1:c3:0e:45:04:6e:6d:
                    96:7e:7a:d9:ac:55:74:e1:4d:1d:fa:12:cd:76:5b:
                    06:51:c0:48:27:6c:8c:a3:94:6a:5b:82:03:ce:ed:
                    d9:a0:ea:b9:2f:b6:84:db:c5:b3:52:6d:4a:fd:3b:
                    8c:d5:81:2d:9e:78:23:13:e8:71:b1:f5:80:36:73:
                    c7:e4:f0:16:99:25:35:00:af:89:4c:5a:19:2c:1a:
                    6f:e5:61:fd:0b:2b:70:0c:0f:81:d4:e2:b3:c9:89:
                    5b:51:99:f0:92:41:75:80:dc:1b:a1:48:01:51:d6:
                    b6:a7:f0:6e:6d:c3:68:04:61:65:8c:a2:63:f3:29:
                    dd:94:bb:04:48:61:52:11:6c:82:df:5c:9b:a1:34:
                    f3:24:26:a9:ca:d8:ce:8b:57:07:c6:69:b3:27:ff:
                    b1:95:f4:35:a2:d6:2b:cb:6e:df:65:5b:d0:8b:3a:
                    cf:a4:14:aa:39:22:e5:3e:e8:c0:31:e2:1c:35:1f:
                    68:ed:57:7a:b6:23:a4:00:a5:43:d7:4e:b1:a5:86:
                    5e:9a:7e:00:55:79:d6:4e:23:a2:7f:50:a8:75:47:
                    56:d7:bb:7a:18:ae:aa:74:a8:e3:11:e0:0f:1f:7b:
                    52:d9:fb:d6:2d:c5:33:f7:d3:0b:8e:30:fc:db:19:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:5E:CE:8D:D1:E7:41:B5:53:82:8E:FB:8D:F9:86:A4:15:3B:39
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:8c:a5:fb:8d:d1:80:85:ca:76:be:12:0b:76:63:7d:b1:61:
         f2:54:db:f4:25:e3:08:aa:e0:b1:03:47:5c:42:ea:87:1f:2b:
         66:78:bc:89:bc:4e:7d:de:15:44:93:93:b0:90:09:50:84:ad:
         65:ee:c3:9b:f4:b3:bb:b3:3f:ab:9a:b7:2c:54:e1:e7:d6:5a:
         d6:3a:1b:68:65:65:fc:25:e9:4b:bd:d3:37:d3:a0:a8:8b:0e:
         eb:47:1c:6b:82:84:84:75:87:68:3c:a1:08:a6:52:53:61:db:
         c6:77:53:36:0a:50:c9:33:5e:c0:4a:54:b0:a3:5d:73:53:9f:
         d5:05:00:37:51:ab:37:86:28:cd:99:35:ee:e6:10:f9:55:4f:
         e9:3a:63:97:f5:21:c1:b0:1a:7c:e9:f6:d7:49:67:a4:1f:15:
         f9:4b:ea:81:df:96:d0:ed:d6:9a:bf:b0:ac:43:b7:5c:8e:da:
         b8:3e:7d:63:52:d8:6f:5a:ee:65:49:69:5a:a5:69:61:0d:a9:
         57:20:53:2b:0c:64:2e:70:86:f6:1a:7a:1b:7c:22:f2:c5:73:
         7b:16:7e:81:cb:2e:f8:ed:0f:40:dc:f1:79:20:4c:d5:df:44:
         9c:37:80:af:f8:e6:a6:26:d7:13:ce:91:0f:34:34:59:0d:40:
         34:72:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:01 2026 by rpki-client