Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          KVYj2uDfbjfa3DUf1NsUoC7w1ARnwAGk/drvfDU6eZI=
Subject key identifier:   DF:1F:BB:0B:0D:1B:3E:81:5B:AB:2D:AF:07:AD:C8:39:66:6E:07:7D
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          01FA
Signing time:             Mon 27 Jul 2026 04:56:50 +0000
Manifest this update:     Mon 27 Jul 2026 04:56:49 +0000
Manifest next update:     Mon 03 Aug 2026 04:56:49 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: XibAeUDwuyhpQIUqRymgyhzsxhwQPb6iPuxBHMOUaLo=)
                          2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
                          3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jul 27 04:56:49 2026 GMT
            Not After : Aug  3 04:56:49 2026 GMT
        Subject: CN=6a66e512-2b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c0:6b:06:b8:8e:f8:b1:4c:55:e5:5a:db:89:
                    72:c4:20:c2:77:e2:ba:47:60:f4:c9:f6:68:4d:35:
                    f2:91:10:32:65:61:97:fd:30:f6:7d:7f:cd:d0:2f:
                    28:21:d7:1d:43:91:d5:e4:ad:e5:58:be:37:b2:a5:
                    40:b1:7d:16:01:79:1c:44:d5:34:2c:de:94:03:45:
                    80:5c:f9:df:7f:f6:72:57:6b:03:29:e1:6f:ec:8e:
                    12:54:87:9a:37:25:b2:78:3a:8d:e0:b7:48:3a:92:
                    11:c9:88:a8:aa:42:a9:9e:29:7e:53:8b:a0:c2:e6:
                    0b:5d:dc:58:66:e7:0b:5d:c8:b7:c9:bb:06:7e:39:
                    d1:fb:05:f8:78:84:2f:42:93:dd:b4:e4:77:6a:5d:
                    71:51:2a:d7:00:87:d6:7c:4e:bd:25:77:fe:eb:31:
                    eb:b6:d3:b0:81:d5:3d:3e:01:58:56:cb:37:34:e9:
                    82:8b:54:f8:9a:30:9f:ae:8b:cf:f5:2f:24:99:8b:
                    64:d7:5f:73:97:54:04:78:45:1f:1b:e2:e2:dd:77:
                    84:3c:fe:52:38:e8:7a:6c:b0:8f:c4:54:25:3e:66:
                    b2:94:72:ae:c9:9e:5d:cc:b6:41:d9:d4:ab:5c:f2:
                    0e:a5:ad:60:58:88:ef:74:e1:bb:df:92:16:24:ee:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:BB:0B:0D:1B:3E:81:5B:AB:2D:AF:07:AD:C8:39:66:6E:07:7D
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:54:16:3e:cc:7f:36:34:65:94:0d:67:96:fd:5d:d0:7e:
         46:ca:0a:84:41:53:d5:c4:1c:07:d6:8f:67:dd:95:2f:5e:6b:
         c5:27:54:eb:11:b8:52:ee:98:a6:dc:0d:ae:1c:41:29:90:20:
         91:fb:78:89:e1:27:1a:11:d7:c8:21:29:87:07:a9:09:82:64:
         c3:f1:eb:5b:0c:e6:84:23:5f:d7:1a:78:37:4e:d4:9e:e0:a3:
         4a:60:44:36:ae:0a:78:d7:43:3f:7b:da:ce:e2:89:a0:d1:40:
         85:40:73:9f:6d:8e:4f:34:f6:f6:d9:22:c0:b6:69:65:5f:92:
         2c:2c:b4:de:bd:af:f3:99:8c:20:30:7c:ec:47:e2:4b:06:a7:
         c4:f7:ce:a5:3d:ff:05:1e:90:aa:19:ba:5d:c6:86:6e:b2:e3:
         97:5d:3e:fb:ed:e3:4d:f1:6e:19:b5:5f:15:92:19:1d:42:c8:
         a0:9d:23:fa:51:9d:14:cf:12:16:e7:7d:81:c2:5c:cf:7c:27:
         f0:4a:d9:94:ea:ba:c6:a9:1a:81:e0:8c:2e:56:4b:ef:b1:6a:
         de:fb:9a:ee:7b:64:bf:e0:6b:2e:11:07:81:0f:ae:e3:79:cc:
         9e:58:7d:03:6f:58:30:a1:17:ed:3f:83:1d:7d:ab:4d:31:ce:
         f3:8d:3a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:31:50 2026 by rpki-client