Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File:                     Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier:          0nR+R/QzzeyWWBu5JDYrU/QwsCK0C/aewKMIyPy+35A=
Subject key identifier:   B4:CE:10:99:36:E8:4E:74:21:5D:7D:EA:1F:20:F5:18:3F:9E:71:E3
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer:       /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial:       0690
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number:          0687
Signing time:             Sun 26 Jul 2026 23:21:39 +0000
Manifest this update:     Sun 26 Jul 2026 23:21:39 +0000
Manifest next update:     Sun 02 Aug 2026 23:21:39 +0000
Files and hashes:         1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: eXaIZ12P3/BkNdK65FdSs7PUHdEgGW8Bkv0WNBTh2WI=)
                          2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
                          rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 23:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
        Validity
            Not Before: Jul 26 23:21:39 2026 GMT
            Not After : Aug  2 23:21:39 2026 GMT
        Subject: CN=6a669683-d5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:91:ff:bd:86:d9:3e:2d:97:23:07:ef:66:
                    e8:16:bf:70:60:dc:1c:d4:4a:40:bc:02:12:d9:9e:
                    09:f4:46:d8:21:b1:86:13:fc:36:fd:fb:d7:77:3a:
                    a1:a5:dc:19:d5:d4:18:f9:f5:ea:7f:9b:19:4b:2e:
                    d6:d3:22:f2:80:57:9d:c4:68:9b:da:9a:85:b9:14:
                    54:1e:d7:d8:de:b3:0e:a0:1c:0b:33:5a:13:7f:76:
                    74:7b:16:25:88:9d:93:f7:1c:0a:14:64:51:2d:c0:
                    a8:ca:35:d6:e1:07:c3:15:1a:a0:2d:7d:06:ef:51:
                    f8:b9:74:d2:2b:1d:15:8e:63:93:43:3f:0e:2f:d9:
                    ae:1d:f3:88:0e:a6:2d:04:07:4f:88:42:2d:44:12:
                    cf:a7:a0:d0:14:aa:87:79:3e:13:49:c6:29:a0:17:
                    a7:02:6b:91:31:48:c4:5a:f8:66:25:86:a5:cc:df:
                    12:9a:06:51:ac:83:11:4d:c4:13:49:c3:0c:dc:d2:
                    68:57:c4:dd:cb:1c:c5:f4:28:75:38:23:8f:2b:76:
                    e9:83:21:af:07:08:4d:81:ef:e2:0f:24:d4:51:85:
                    a7:2f:86:10:50:67:72:ca:c2:8c:08:ce:0d:a6:23:
                    7f:99:0b:95:3b:0d:32:d1:53:1f:2c:a8:cf:70:42:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:10:99:36:E8:4E:74:21:5D:7D:EA:1F:20:F5:18:3F:9E:71:E3
            X509v3 Authority Key Identifier:
                keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:5b:c4:f3:bf:20:90:b8:fe:78:b9:a0:cc:78:50:74:05:
         fb:0d:fc:61:ef:2b:c2:8e:1f:5f:24:39:b0:08:9f:e4:6d:07:
         bb:04:f7:bb:b9:ff:0d:0b:40:17:bd:c9:a7:8b:0a:70:38:30:
         ed:64:6b:43:dd:7a:37:86:00:6b:4f:c5:ef:da:28:6f:37:f1:
         82:53:5f:23:8f:bb:9b:ea:e8:4c:c3:29:eb:04:ab:3e:a0:00:
         e0:ae:ce:2d:fd:64:e5:8b:73:7f:01:7f:82:12:2e:b5:06:51:
         e5:da:38:55:c2:15:c3:5e:28:aa:d9:c1:66:3e:eb:26:a9:4b:
         71:1c:fd:6f:b9:79:72:d9:66:c6:51:14:5b:ce:7a:7f:26:3c:
         d6:d8:18:62:05:67:0c:e9:9e:4b:67:cf:78:d4:12:cd:c5:57:
         07:1a:17:65:15:84:28:e4:99:bb:2f:9c:25:20:51:89:5f:ea:
         c0:30:26:7b:b5:80:4e:63:3d:d4:45:26:2f:b8:0e:f8:c3:56:
         31:61:36:7f:c2:a7:2b:fe:2a:a7:4e:41:63:65:61:29:26:70:
         2e:25:47:c8:1b:4c:a6:ff:7a:58:68:f8:92:c1:9a:bc:e6:de:
         41:7c:c6:49:0d:f0:c2:e5:fb:bb:fb:7f:19:86:5e:69:dd:8a:
         74:0f:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:00 2026 by rpki-client