Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File:                     YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier:          Q+XjUxAG1a6KNL2ZepgsbYZ1HyZK5ktbePgcYXXTLLs=
Subject key identifier:   13:2F:FF:16:1E:4F:63:DE:0C:F1:20:9E:D0:11:A6:CC:D3:F1:6A:67
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer:       /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial:       017D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number:          0175
Signing time:             Mon 27 Jul 2026 06:34:36 +0000
Manifest this update:     Mon 27 Jul 2026 06:34:35 +0000
Manifest next update:     Mon 03 Aug 2026 06:34:35 +0000
Files and hashes:         1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: dF0A0C6OK+KVFxrihml8+7UFo/A/a2UOh/fK0z0fQ64=)
                          2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: HZDNvMXF2Ddy6vd2h5W5yFnu+C+QnMlW7ipSlMoj5As=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
                          rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
        Validity
            Not Before: Jul 27 06:34:35 2026 GMT
            Not After : Aug  3 06:34:35 2026 GMT
        Subject: CN=6a66fbfb-4b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:89:d0:0c:db:48:06:5c:06:a0:a6:b8:4c:
                    69:d3:36:a8:62:77:5c:a2:6e:a4:25:57:9b:6b:93:
                    e1:0c:61:56:6e:18:a3:89:f3:07:cc:63:33:62:44:
                    7a:b6:20:51:71:75:51:e2:b4:59:33:03:f1:83:5c:
                    a0:4a:b2:5b:f4:49:98:5f:db:f1:20:bd:ae:42:aa:
                    12:73:1d:52:92:a0:7b:e8:3f:3e:bb:39:78:35:2a:
                    1e:b8:19:74:44:8d:48:3d:65:a8:1a:f0:23:22:06:
                    c9:52:92:ef:45:19:82:a9:22:e7:58:8e:fc:b3:df:
                    08:8a:92:8f:2d:41:60:44:ad:1d:ed:d9:dd:67:ab:
                    32:cf:b0:e2:79:37:d5:c1:ad:6d:0b:a0:db:bb:dd:
                    4e:28:71:dd:70:af:8a:57:7a:fb:df:09:82:3f:ea:
                    6e:2e:a4:c4:4c:29:12:fd:77:91:25:21:16:81:95:
                    dd:b0:a9:20:ff:e7:20:dd:15:e9:80:cf:1e:d9:67:
                    65:03:e6:ef:87:07:4d:87:af:f6:9f:9c:bf:8a:7e:
                    0c:a7:a5:8b:eb:49:ed:52:86:2c:a2:09:56:d6:a6:
                    96:88:53:d6:ec:25:1c:f5:af:d6:65:2c:4e:f3:75:
                    a4:a8:77:3a:da:bc:b6:6c:03:9b:82:ab:cf:0a:94:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:FF:16:1E:4F:63:DE:0C:F1:20:9E:D0:11:A6:CC:D3:F1:6A:67
            X509v3 Authority Key Identifier:
                keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:9c:8c:b8:08:2f:f8:ca:39:b9:91:b2:9c:62:e8:15:7f:
         56:26:c3:e7:72:87:4e:f7:c3:86:b3:88:c2:b8:eb:37:99:df:
         d1:8e:e1:0d:17:f1:1c:20:39:db:11:34:59:7d:2b:52:d3:66:
         18:17:df:f3:66:a5:b7:94:5f:3c:5e:e2:ff:6f:6b:9d:6e:e8:
         5e:59:b8:8a:3d:92:7f:88:89:fc:7c:78:fb:66:fd:65:93:6a:
         85:5b:c8:e2:ae:26:8e:4d:c7:64:2d:2f:2e:a9:00:39:8d:c6:
         59:95:a1:4e:ec:20:40:16:a0:d8:5e:b9:38:9f:c5:31:44:36:
         07:49:33:91:76:02:e7:ed:56:12:2d:88:77:46:98:58:65:8d:
         de:04:63:4c:3d:e6:f3:ca:b5:d2:8b:85:cd:98:4c:4d:70:5d:
         9b:89:c4:bf:a7:b5:7a:d8:46:a7:7c:b3:5a:fe:c6:8d:0d:68:
         a0:f1:65:96:2f:ec:2f:1a:8e:b2:dc:43:48:d3:a7:fe:e1:18:
         6b:22:40:f0:c5:36:60:3d:04:84:a9:9e:43:11:51:8a:51:68:
         36:a7:d8:b1:23:6c:fc:c4:eb:af:d0:fc:ff:98:c2:bb:c4:8d:
         f1:c8:76:3e:5c:96:7b:ca:36:fa:68:b1:91:1c:85:3d:1a:38:
         3f:84:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:45 2026 by rpki-client