Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File:                     P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier:          q6kPZIx/H2LH6fEGQZML3M3LUme1pDGmBmknjsjuLBc=
Subject key identifier:   CB:A3:2C:04:11:8E:1C:B5:C2:59:43:06:CF:1F:7A:B8:47:FD:B9:49
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer:       /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number:          0898
Signing time:             Tue 28 Jul 2026 21:03:04 +0000
Manifest this update:     Tue 28 Jul 2026 21:03:03 +0000
Manifest next update:     Tue 04 Aug 2026 21:03:03 +0000
Files and hashes:         1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: Jp4RJZQKHFiZLaC7PoV1yx4m2B2c8QMHEUtMgs2xuXI=)
                          2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: FgNhv4Lyku+4T14lzJCXvI1aI6pzmBx0dttZBahWL/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
        Validity
            Not Before: Jul 28 21:03:03 2026 GMT
            Not After : Aug  4 21:03:03 2026 GMT
        Subject: CN=6a691908-5f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:6e:68:9c:cb:73:6b:e5:fe:d0:24:be:a4:
                    51:bd:91:97:99:71:cf:23:ae:68:5d:5d:21:6b:53:
                    ed:c2:da:fa:ad:85:78:2c:d6:56:66:c2:34:f5:78:
                    8e:43:52:45:bc:79:88:f7:fa:c3:db:cc:fd:e2:1d:
                    a3:70:52:9a:b2:8f:20:4d:7b:c2:15:4a:f2:08:f8:
                    a2:17:e6:be:96:4c:fc:29:b9:34:94:cf:0b:9f:04:
                    c4:77:ca:82:59:f1:45:b8:5c:e9:c0:89:6d:b5:16:
                    83:15:07:a7:be:59:37:2f:25:f9:94:4f:d5:74:dc:
                    03:31:c1:fa:3a:bb:20:c0:5d:ad:66:57:cd:71:49:
                    f9:46:c4:d1:22:31:de:bb:67:98:c9:c1:eb:c3:ac:
                    26:c9:56:81:71:5d:35:d4:35:49:9d:65:91:99:17:
                    7c:cd:61:ac:5e:fe:28:10:3e:10:67:86:59:75:f2:
                    f0:00:f8:27:12:0c:81:f4:1b:6e:f6:b3:f6:57:a0:
                    52:86:fd:57:a7:4b:03:40:a7:0b:71:90:c5:59:1e:
                    76:f2:3c:de:16:34:29:22:c5:2b:58:f4:76:3c:af:
                    f4:81:e8:0c:59:c9:b4:7a:1f:07:bd:ed:db:d4:3f:
                    f0:47:f4:01:61:80:2c:02:3d:f6:f7:76:3e:16:18:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A3:2C:04:11:8E:1C:B5:C2:59:43:06:CF:1F:7A:B8:47:FD:B9:49
            X509v3 Authority Key Identifier:
                keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:da:1d:64:80:ff:e7:5c:ea:47:46:df:cb:80:4e:ad:9e:26:
         00:04:1b:88:3d:35:8c:94:98:00:0e:01:36:4f:8a:a4:17:36:
         33:82:e2:e1:a5:81:cc:f1:f7:c1:e9:dc:c7:76:1f:7a:8d:1f:
         d9:21:31:86:2f:8f:b1:90:09:48:f1:77:61:9b:0a:f1:47:e0:
         13:c9:a0:60:8a:34:1f:bf:33:81:5a:fa:89:5b:94:cb:99:fd:
         bb:ba:55:5e:ae:8d:1a:21:2f:c0:61:22:44:33:de:7a:21:66:
         f3:67:0e:b5:56:6b:4b:0d:b0:3c:c5:84:53:49:d7:23:d5:f4:
         e3:cb:30:70:c9:99:3a:09:2b:71:08:51:4b:8a:0a:d5:47:cd:
         4c:5a:89:38:2a:49:e3:38:2a:bf:6f:e2:2b:22:81:26:f1:25:
         13:f9:1e:e9:ba:f9:44:c3:5c:ba:f2:48:c8:0c:9d:57:38:e5:
         e2:62:fa:5a:27:a2:47:43:eb:cd:e4:e0:97:1d:ed:b5:72:58:
         aa:f8:85:bd:61:72:cd:6b:32:cd:05:2a:64:41:7f:1b:3d:18:
         dd:ab:7e:79:da:bb:e2:0d:3c:44:64:b6:e0:42:8b:2d:3e:18:
         f2:9c:3b:eb:0a:27:af:ec:a1:e4:35:1d:3e:a5:c5:90:45:a2:
         5b:27:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:20:14 2026 by rpki-client