Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
File:                     YlWvHFTHD2B02LCsoatcuHg4dic.mft (raw, json)
Hash identifier:          Nnit8Z/a35siWagNy0sGTvvIfkZfj0deH4sBCbUxChU=
Subject key identifier:   13:9A:B2:8B:D5:48:65:AC:C6:F1:FB:5F:E3:44:56:05:F4:04:59:9C
Authority key identifier: 62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27
Certificate issuer:       /CN=A9148CCE/serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
Certificate serial:       CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
Manifest number:          CD
Signing time:             Mon 27 Jul 2026 08:52:50 +0000
Manifest this update:     Mon 27 Jul 2026 08:52:50 +0000
Manifest next update:     Mon 03 Aug 2026 08:52:50 +0000
Files and hashes:         1: YlWvHFTHD2B02LCsoatcuHg4dic.crl (hash: FljSqhaRrCDvRQYePdbPdu2Uk4vdp5AZHRoUNZpFeek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl
                          rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148CCE, serialNumber=6255AF1C54C70F6074D8B0ACA1AB5CB878387627
        Validity
            Not Before: Jul 27 08:52:50 2026 GMT
            Not After : Aug  3 08:52:50 2026 GMT
        Subject: CN=6a671c62-8da6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:41:53:4d:8a:a1:2c:08:17:98:b4:0b:50:
                    46:24:85:84:5e:ae:34:17:b0:57:71:1d:28:7e:0c:
                    3f:be:b3:9b:8d:27:38:ce:51:b1:b8:01:e1:00:ff:
                    76:31:94:fc:c7:27:26:e4:0e:df:63:74:8e:5a:ec:
                    2b:bc:b3:d0:1f:da:fc:82:07:bd:75:7a:90:20:f6:
                    47:46:87:d2:41:12:fe:f7:18:9d:37:58:92:75:11:
                    90:9f:63:d0:0a:9b:b4:df:15:b0:c9:e3:6c:1e:a4:
                    00:b7:d9:8c:96:35:a2:d3:fd:e5:f6:6c:de:74:7b:
                    58:85:8d:c0:da:53:99:48:cb:60:35:06:5c:0a:e2:
                    3a:61:fd:2c:d3:df:24:1a:52:44:e6:46:a3:d9:5c:
                    57:df:da:dc:7b:28:bd:9f:6c:0c:50:ad:b0:a2:1e:
                    18:0f:76:87:b6:9a:bf:93:e8:a3:87:9a:0f:28:3e:
                    fc:ac:58:a6:01:d8:e3:57:4e:49:fd:9a:ba:fc:29:
                    65:62:7f:1f:79:63:21:c1:31:bb:af:c5:24:57:3e:
                    9e:4c:22:3a:b8:bf:88:7a:e5:21:46:b3:8c:35:f7:
                    37:7b:fa:45:7e:48:33:ce:80:fa:1b:c9:3d:aa:7d:
                    f3:ee:4c:95:7b:1b:0d:35:ae:90:95:8f:95:54:4c:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9A:B2:8B:D5:48:65:AC:C6:F1:FB:5F:E3:44:56:05:F4:04:59:9C
            X509v3 Authority Key Identifier:
                keyid:62:55:AF:1C:54:C7:0F:60:74:D8:B0:AC:A1:AB:5C:B8:78:38:76:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YlWvHFTHD2B02LCsoatcuHg4dic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148CCE/93EFE2B44FEE11F080379482C4F9AE02/YlWvHFTHD2B02LCsoatcuHg4dic.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0a:b9:9b:33:f3:0b:46:3a:df:2f:ec:37:27:42:8a:39:18:
         9b:62:f6:17:ff:18:c2:ba:47:1b:54:c6:b5:45:f7:a1:10:2f:
         7f:7f:f1:87:53:74:9e:b2:c8:07:fc:0b:e1:5b:66:c7:75:c6:
         be:ae:83:c0:cb:af:a2:c6:86:8a:0e:cb:bf:4d:cd:da:0e:de:
         27:f7:83:2f:e4:a2:1d:78:c9:d0:2a:ba:7a:b6:aa:ff:ec:05:
         56:c6:4f:91:f7:70:94:6e:91:29:b5:3b:ac:95:88:85:f0:56:
         f5:9c:9c:53:b9:39:97:18:1e:a6:da:d2:78:6f:49:88:6d:81:
         94:f3:64:d1:90:04:e1:a1:2c:5e:1b:d7:a6:38:68:bc:a9:f4:
         23:1b:45:01:53:83:2d:29:1f:a4:5c:3d:78:db:2f:60:fa:71:
         39:4b:7b:a1:2b:37:2c:da:a5:9a:1b:7e:cb:93:b7:ac:ea:75:
         2a:92:0a:bb:f5:59:a2:48:2f:77:1c:f6:db:b0:f5:da:0e:ce:
         99:c7:5a:ae:30:de:bb:7f:9a:de:11:d3:0c:5d:4f:4f:89:9b:
         17:52:76:94:70:a9:47:99:4e:ad:67:b2:5f:bb:8c:da:c3:4a:
         35:9c:a6:4f:8c:e8:15:87:37:fc:7e:e1:71:c9:ee:55:91:dd:
         bd:a8:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:15 2026 by rpki-client