Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File:                     03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier:          WFIwe9yuZpGYjnA8Rlta4T4otD9A5J2bLyB+FbQthF8=
Subject key identifier:   D8:53:E0:9C:B3:95:19:D9:99:C1:5E:89:33:47:B2:26:16:3F:99:07
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer:       /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial:       05A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number:          0597
Signing time:             Mon 27 Jul 2026 00:09:11 +0000
Manifest this update:     Mon 27 Jul 2026 00:09:11 +0000
Manifest next update:     Mon 03 Aug 2026 00:09:11 +0000
Files and hashes:         1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: ZMJAnEE5YcolumiDuGwtG/qanwOjhWmudfntfWfqsJc=)
                          2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ekGdq5XwvQSiFAECeI1yOoTTSMBYmajgvzc3Dt6ibs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
        Validity
            Not Before: Jul 27 00:09:11 2026 GMT
            Not After : Aug  3 00:09:11 2026 GMT
        Subject: CN=6a66a1a7-f73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:b7:81:30:da:da:6c:9a:1d:a2:ed:98:24:
                    5a:de:a2:1e:d2:9a:67:d1:06:54:90:b2:05:bd:2d:
                    b6:19:ce:f4:45:48:7b:4a:dd:3a:b9:c4:21:cc:e4:
                    9a:b7:37:cd:f6:8a:4b:8f:2f:64:7b:d8:b2:88:ae:
                    08:8e:55:b6:45:1b:15:07:84:3c:51:5a:64:58:7b:
                    c6:09:a8:6d:0c:bd:11:a8:eb:44:00:a1:83:57:df:
                    6e:f0:65:7b:83:6e:b9:df:21:2a:13:86:be:d1:38:
                    25:bd:af:a1:11:0b:81:2d:19:58:89:5d:42:41:6e:
                    72:8b:79:e6:a4:2f:a6:2d:4b:c1:4a:5e:56:67:73:
                    eb:5c:23:54:86:87:94:6e:8e:31:e8:d6:b9:63:a6:
                    e9:16:25:19:47:80:c0:38:fd:ba:a8:c4:ef:00:f1:
                    70:aa:f1:a4:38:90:8f:72:3a:5e:2c:1d:77:77:f5:
                    d0:b5:4d:c1:ee:69:10:ee:b4:9a:53:ea:40:ef:f8:
                    51:e5:52:19:b1:83:ed:66:44:bb:9b:ec:b0:04:bd:
                    ea:ba:26:b0:c6:cc:7f:a2:e4:1d:ed:95:75:5f:a9:
                    e9:e5:05:fa:79:86:34:20:d3:c5:f0:1c:b4:a8:ad:
                    d5:5b:24:d8:98:c9:b9:ff:ce:a9:27:67:fd:0e:6d:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:E0:9C:B3:95:19:D9:99:C1:5E:89:33:47:B2:26:16:3F:99:07
            X509v3 Authority Key Identifier:
                keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:79:4a:e1:46:22:ae:bb:cf:70:b9:1e:e4:12:79:26:47:45:
         05:a1:f4:87:36:5f:c2:80:30:34:37:7f:d0:d2:b7:26:39:95:
         6f:87:ed:ec:31:c8:8b:2d:4e:06:00:39:be:45:6f:a6:27:29:
         fd:ec:2e:e1:e6:4e:b9:d1:e4:6c:94:8f:3e:70:94:a0:f2:c6:
         a8:47:da:da:a1:53:25:b3:79:26:8a:2d:c2:d5:9d:3d:74:b4:
         c9:63:73:9e:76:14:55:52:c3:f4:a1:0b:4b:68:f8:d7:41:d0:
         3c:1f:ff:b2:d4:c0:00:5c:5f:ee:d6:b9:45:4f:cb:de:d0:94:
         60:24:f9:b3:e6:ac:80:da:ba:88:eb:33:eb:9a:05:07:28:c8:
         46:ba:9a:8f:29:6e:f0:a6:9b:8f:6a:2b:47:a7:d2:0b:85:b4:
         fe:00:5e:6c:d2:15:58:9f:f9:19:28:53:24:00:2f:2b:56:a1:
         ac:20:5b:87:ed:10:94:6e:38:23:aa:50:db:46:e0:2f:46:7c:
         26:ff:2f:fc:e0:c7:31:09:dc:1e:4d:1d:c3:28:35:6a:87:58:
         c7:70:cc:7a:7f:a0:4a:c6:8a:7c:0f:a9:c0:41:44:fa:90:a7:
         12:dd:cd:9f:96:dc:4d:a1:44:14:50:f5:fa:b1:f8:49:0f:a3:
         37:6a:ae:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:28 2026 by rpki-client