Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          uN+JmWvG7SOFaSsFAKAIY1mHxiGhkgUiWgcehfnc6I8=
Subject key identifier:   3F:1B:8D:38:0D:4F:62:59:A4:68:D2:B8:A8:B6:0A:3A:3E:3D:18:03
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          0646
Signing time:             Mon 27 Jul 2026 01:15:44 +0000
Manifest this update:     Mon 27 Jul 2026 01:15:44 +0000
Manifest next update:     Mon 03 Aug 2026 01:15:44 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: ER7lUlTWvH1Soejvnk7l42G67fa0GjC7h+ZWKzskVSo=)
                          2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: 228d9Yp5Ujtrc1y20mhpEdshI3yQHTWHhGD/doCyGs0=)
                          3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: EtzqLiy1GfOpWQ6NNxaBO4VxmKVupSX7ugnc/ADUBS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Jul 27 01:15:44 2026 GMT
            Not After : Aug  3 01:15:44 2026 GMT
        Subject: CN=6a66b140-1f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:88:92:9b:72:8a:f2:78:fb:21:76:20:46:46:
                    1a:98:96:b8:44:2c:c3:2f:b7:cf:8d:3e:8c:5f:df:
                    fb:d5:b2:6b:8e:d6:66:05:fc:31:4f:aa:c3:b8:6b:
                    af:bf:9f:0e:6d:21:c0:bd:c0:2e:47:db:1b:4a:fd:
                    6a:3e:ef:77:d7:5b:80:8a:60:59:d4:59:ef:6c:96:
                    ba:df:d7:45:89:58:07:3c:f1:33:3e:51:af:50:52:
                    08:4f:a7:b4:44:e8:72:fe:88:55:d8:27:10:65:e8:
                    b1:3b:83:8d:96:8a:e3:e8:30:d4:ca:e8:b5:82:9b:
                    be:63:04:e8:15:b9:3c:c9:f9:69:3f:ca:eb:1f:f2:
                    97:eb:9c:3f:b6:3b:c2:c6:25:b6:d9:1a:bb:c5:13:
                    76:43:e3:70:0e:05:c0:b7:20:0e:bf:80:6e:90:7e:
                    0b:a3:0a:19:bb:9e:da:28:e3:2b:3f:23:88:25:f4:
                    68:59:da:59:cb:ef:84:fb:d4:cb:d1:02:d1:79:dd:
                    c8:30:f8:65:26:4e:68:0d:49:88:6e:21:8b:ae:40:
                    e2:6a:7f:85:ed:74:a6:45:4f:92:8d:2e:02:e2:e1:
                    a1:ee:35:be:f3:57:6e:8d:87:a4:e3:bc:a0:16:51:
                    ca:da:35:04:7c:d8:a8:25:55:44:4c:bd:81:9b:3a:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1B:8D:38:0D:4F:62:59:A4:68:D2:B8:A8:B6:0A:3A:3E:3D:18:03
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0d:ea:7d:f5:12:9a:75:da:31:5a:23:6b:d5:93:23:5c:f2:
         39:40:ff:23:27:fe:b8:77:84:c5:f8:99:33:7d:d5:dd:33:ad:
         a4:6f:b5:27:70:b2:03:86:b9:e5:a4:d8:07:a9:2a:d9:93:2e:
         e6:bc:ec:65:01:e7:fb:79:bb:5d:39:37:34:8c:b4:9d:9b:c8:
         9e:a7:fa:17:dc:b7:6e:94:9a:c0:51:8a:08:25:cf:b1:34:01:
         1b:0f:ef:98:b3:fa:4c:87:94:8f:a8:4c:d5:bc:00:f3:ba:e6:
         87:36:31:79:22:f1:f8:a0:f4:f8:16:79:25:0a:22:6e:b2:a3:
         bd:d1:d6:ed:58:7a:7b:9f:fe:5a:4c:6a:88:e0:73:34:70:c2:
         be:f2:ba:8d:86:69:75:49:e9:cf:f8:53:94:47:14:95:c0:76:
         7d:02:7e:d9:82:2b:30:26:1a:62:72:e1:b0:a4:24:b8:3c:92:
         d0:7c:c6:f1:10:3c:e1:fe:74:02:3a:10:46:f9:5f:9b:95:ba:
         10:76:fd:6c:dc:8a:a7:cb:c1:a3:5b:e0:88:89:84:0c:cf:ea:
         da:2e:57:77:a3:89:ce:72:64:0c:fc:8e:00:ae:98:43:86:08:
         be:21:9f:b3:cc:5f:ff:17:08:26:9f:d2:01:d2:b9:ed:12:1a:
         7f:02:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:11 2026 by rpki-client