Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File:                     ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier:          5nRnsHPIgVI2ZfWB43T9gHAKrEofoxZZLsxxe0wr5oM=
Subject key identifier:   9E:F8:12:53:F2:82:7F:AB:97:A4:85:80:11:FC:CC:6D:5C:AA:9D:C1
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       25E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number:          25BE
Signing time:             Tue 28 Jul 2026 15:49:39 +0000
Manifest this update:     Tue 28 Jul 2026 15:49:39 +0000
Manifest next update:     Tue 04 Aug 2026 15:49:39 +0000
Files and hashes:         1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: uB4RrQdJyCkXwOGL8L2TbZ2FPmBRU/lZk6BvnIzoZ3s=)
                          2: DD1070A286EE11F19E006003A7EE528E.roa (hash: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M=)
                          3: 6690D57486FE11F194514C90ABEE528E.roa (hash: srPJd4xUL6/Vf1zKO1/lDgBKkQ8LR7aRoLfFW6QTLcE=)
                          4: 04CC562A444E11E88204061CC4F9AE02.roa (hash: wmIlAIzm5QzVVCvvxLGcZrrzi/YZeMwXo33dKH+RNko=)
                          5: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: Oip4/ft1E//qtYhxFVUiNdrRQdmZE92k2cuDNa4P3q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9701 (0x25e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Jul 28 15:49:39 2026 GMT
            Not After : Aug  4 15:49:39 2026 GMT
        Subject: CN=6a68cf93-7540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:f5:94:dd:25:45:d9:24:05:25:00:46:db:
                    b2:02:62:8e:3c:bb:4c:09:9d:8c:7f:18:d8:00:63:
                    4a:af:62:57:f4:4f:1b:2e:01:a5:0f:6a:27:a7:1f:
                    02:69:61:5a:50:46:49:36:95:5f:b2:84:10:ec:be:
                    f4:10:08:79:e9:2d:21:d8:24:3d:44:a9:bd:24:14:
                    74:4c:12:e7:26:19:47:a9:c5:37:2e:55:c5:74:51:
                    47:37:29:e8:9b:74:23:88:9e:a9:1a:9e:4d:67:60:
                    d9:bf:72:57:a8:ae:8f:57:92:1e:4e:61:87:5b:b6:
                    33:9a:c9:42:6e:5b:95:db:f4:2c:54:7a:ce:0c:72:
                    c5:77:f2:11:3d:5f:a6:3a:9a:8f:98:e5:81:fc:fa:
                    9d:6b:ee:94:d7:4d:c8:30:9f:b0:c9:f5:9e:04:1e:
                    43:a9:92:a9:33:5b:04:54:66:78:ea:58:0e:e0:64:
                    8d:0b:37:c3:5b:7b:b5:90:e7:d3:4a:11:a0:03:5d:
                    58:bf:cd:f3:8d:3e:16:47:c6:4e:3b:89:bd:6b:f5:
                    0d:9c:78:82:aa:ff:90:07:36:07:a1:d4:10:cf:2d:
                    36:2b:ff:86:a7:cd:9f:8e:19:09:f4:90:82:e9:3f:
                    26:24:e2:0e:f3:ac:d7:cd:81:28:13:9b:65:65:c6:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F8:12:53:F2:82:7F:AB:97:A4:85:80:11:FC:CC:6D:5C:AA:9D:C1
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:66:c8:bb:14:9d:e0:96:2f:d9:74:e7:1f:ab:7c:c3:54:
         fd:34:6e:48:c9:f0:57:ab:4f:4d:36:d7:75:f4:d5:1b:ed:ab:
         ca:f5:6f:e2:12:e0:78:a3:4d:84:0d:52:ac:91:f7:3b:2d:ce:
         60:e2:0d:96:42:b8:ea:88:0a:ab:a6:d7:67:3b:e9:86:c1:25:
         7d:06:ed:08:52:ac:c2:d6:a7:38:34:bd:89:87:b8:de:01:be:
         11:42:b1:54:59:f2:08:ee:d5:d6:63:02:f5:16:cc:5f:e7:b6:
         f3:34:7a:ec:9d:ed:97:82:b1:11:d8:fb:82:fb:19:c8:9a:50:
         66:68:95:1c:8e:d9:ea:b2:ec:c3:a5:30:f0:46:26:d7:4b:0a:
         92:5a:7c:9a:6a:6b:ca:c3:a1:4a:75:15:da:77:d9:f4:11:db:
         13:76:06:31:9a:d3:d5:39:81:8d:dd:8f:9e:ec:16:0e:19:4f:
         ef:85:88:7b:0e:84:f4:18:e1:01:7b:28:a4:95:6d:9b:98:18:
         db:de:9f:97:f5:cc:8d:19:6c:cd:69:bc:54:05:04:fe:ef:bf:
         55:4f:9d:7c:a2:8d:97:eb:db:e0:ff:95:2f:9d:57:9a:b4:a7:
         5e:3c:a5:18:7d:aa:c0:85:f5:37:8d:46:bd:54:fe:73:02:35:
         8c:3b:2b:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjYwNzI4MTU0OTM5WhcNMjYwODA0MTU0OTM5WjAYMRYwFAYD
VQQDEw02YTY4Y2Y5My03NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhL1lN0lRdkkBSUARtuyAmKOPLtMCZ2MfxjYAGNKr2JX9E8bLgGlD2onpx8C
aWFaUEZJNpVfsoQQ7L70EAh56S0h2CQ9RKm9JBR0TBLnJhlHqcU3LlXFdFFHNyno
m3QjiJ6pGp5NZ2DZv3JXqK6PV5IeTmGHW7YzmslCbluV2/QsVHrODHLFd/IRPV+m
OpqPmOWB/Pqda+6U103IMJ+wyfWeBB5DqZKpM1sEVGZ46lgO4GSNCzfDW3u1kOfT
ShGgA11Yv83zjT4WR8ZOO4m9a/UNnHiCqv+QBzYHodQQzy02K/+Gp82fjhkJ9JCC
6T8mJOIO86zXzYEoE5tlZcYmBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ74ElPy
gn+rl6SFgBH8zG1cqp3BMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm
TFozNzNyZGpnSnVIMHRqMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhsxmyLsUneCWL9l05x+rfMNU/TRuSMnwV6tPTTbXdfTVG+2ryvVv4hLgeKNN
hA1SrJH3Oy3OYOINlkK46ogKq6bXZzvphsElfQbtCFKswtanODS9iYe43gG+EUKx
VFnyCO7V1mMC9RbMX+e28zR67J3tl4KxEdj7gvsZyJpQZmiVHI7Z6rLsw6Uw8EYm
10sKklp8mmprysOhSnUV2nfZ9BHbE3YGMZrT1TmBjd2PnuwWDhlP74WIew6E9Bjh
AXsopJVtm5gY296fl/XMjRlszWm8VAUE/u+/VU+dfKKNl+vb4P+VL51XmrSnXjyl
GH2qwIX1N41GvVT+cwI1jDsrig==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:42 2026 by rpki-client