Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          5546WGupqcDrM7aJAmu8ztMfH+t/SDndEp+laPzoDjc=
Subject key identifier:   2A:C0:55:A3:C9:FB:C1:0A:1D:69:A9:B4:CF:A4:CB:0F:A0:6F:BF:26
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          01A1
Signing time:             Mon 27 Jul 2026 05:57:04 +0000
Manifest this update:     Mon 27 Jul 2026 05:57:03 +0000
Manifest next update:     Mon 03 Aug 2026 05:57:03 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: B7YzLj+srobAdh5UZPUDE87uVSpn6A/R2fiK0S5OGmg=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Jul 27 05:57:03 2026 GMT
            Not After : Aug  3 05:57:03 2026 GMT
        Subject: CN=6a66f330-e5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e6:36:79:33:d3:b7:c8:46:0b:1e:b6:05:e3:
                    f7:fe:80:b8:31:39:79:0f:93:80:76:19:6a:81:69:
                    9d:7d:3f:81:7c:c9:6c:a0:26:7b:05:7d:66:cb:b2:
                    04:ef:3e:35:a0:43:f0:7f:1d:79:a6:8a:53:82:74:
                    53:5f:6e:4d:04:5a:a0:a6:27:56:69:fd:16:b9:77:
                    94:e4:52:f9:31:30:29:e2:6c:c0:65:b5:cc:df:47:
                    11:55:c8:e7:4b:48:72:fd:5f:42:ee:49:7e:96:c5:
                    1f:9f:c0:aa:75:bc:dd:51:2b:f0:7e:67:57:a5:44:
                    4d:6e:a0:4c:c1:6f:3a:74:4d:15:f0:00:a9:39:a5:
                    74:eb:b3:ed:9e:49:f3:b3:f2:85:25:2c:af:33:2c:
                    26:27:09:88:7f:7b:33:4d:c2:89:3d:c6:a1:9b:74:
                    79:d2:b9:c2:15:6e:24:ae:1c:d9:d6:68:95:ce:ea:
                    d9:a2:90:eb:4c:a5:9f:fe:e9:7f:2c:17:ac:fd:f5:
                    d4:9f:8d:fd:09:a3:ea:4b:1b:ef:a6:1b:46:aa:5f:
                    57:c1:6f:3b:df:99:c9:f0:9f:a6:b9:d4:56:a9:f2:
                    e2:f2:09:57:0e:7d:da:58:8c:6f:96:15:92:27:e4:
                    82:4d:9a:99:a7:ee:cf:b8:77:9e:5b:35:71:8f:a8:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C0:55:A3:C9:FB:C1:0A:1D:69:A9:B4:CF:A4:CB:0F:A0:6F:BF:26
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:da:74:51:32:c7:43:ec:7b:2b:1e:48:00:58:a9:0b:6b:
         a7:05:b7:26:88:58:e3:f4:bd:c2:7d:d6:c5:28:57:19:50:cd:
         82:cd:c4:5d:a1:4c:c6:64:3d:22:d5:e8:0e:89:9a:74:8f:0c:
         23:90:99:c0:4c:d1:1e:bd:f6:41:1c:9b:e1:91:85:a4:fd:a0:
         c2:85:92:43:c0:56:f1:0b:8f:56:72:ae:67:c1:bd:ed:e9:1b:
         b0:78:79:99:cd:97:15:5e:2d:ed:fc:99:86:c6:f4:c1:fb:6c:
         a6:1f:b4:cb:7e:d0:10:f4:2e:83:3b:df:ce:de:b1:59:b2:bb:
         e7:a5:8b:a0:35:de:da:e0:56:70:0e:55:5e:0c:ae:c8:8b:e4:
         ca:99:53:13:0b:3a:ea:de:99:3f:32:31:7b:93:19:21:94:94:
         05:53:00:8f:0e:bb:73:44:4e:28:48:31:de:90:76:51:78:d5:
         0c:92:45:86:00:0b:be:6c:0c:88:2a:96:f7:3b:7d:f4:c5:2e:
         c4:21:19:45:ab:91:0c:64:a8:58:6c:87:22:ac:78:48:19:a3:
         9d:e0:d6:7a:2c:fd:5c:fe:dd:41:2f:aa:d9:81:c0:16:7c:8c:
         04:0e:37:10:f9:3a:e5:2f:c1:9f:c9:96:45:67:61:59:78:34:
         e0:c2:5c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:49 2026 by rpki-client