Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File:                     ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier:          7BRu4WBgf/r916xbJBo1aYjb7SkdChQ38X99FRXGWyQ=
Subject key identifier:   13:33:5E:91:E4:A6:00:F9:3B:4C:ED:C0:99:0F:52:47:78:88:D1:2E
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       3590
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number:          357A
Signing time:             Tue 28 Jul 2026 14:46:40 +0000
Manifest this update:     Tue 28 Jul 2026 14:46:40 +0000
Manifest next update:     Tue 04 Aug 2026 14:46:40 +0000
Files and hashes:         1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: NTpt/i/irH/m1UNXcb/FK9DaYX4W4qoh0crPmkWLG8k=)
                          2: 929D25381D1711F1981A78170E3D8C67.roa (hash: pkxruOivazr+5qgFvACHs2jVuJZHgefEb08Dy4uHw4w=)
                          3: 4821776AD9A211F092913C6268D3641D.roa (hash: LOgkEDPU6qR9vCf6pUezUGPbjzvlJI1psdU+DoBEifc=)
                          4: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: jzO63g5AOxElScYYdVv06DFzK3TIOCqanZ+0EjTukYM=)
                          5: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: RfZh/c3Oxj+j3RxxpaEAH33yqsib4ZdkZSMoIm68Qac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13712 (0x3590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Jul 28 14:46:40 2026 GMT
            Not After : Aug  4 14:46:40 2026 GMT
        Subject: CN=6a68c0d0-4f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:88:f6:db:7c:db:77:d0:63:83:d7:30:e8:
                    ab:ea:54:d0:d8:cc:d6:96:52:ed:b0:f8:80:bb:dd:
                    38:07:d9:ba:b9:0e:4c:c6:fa:d8:cb:8a:08:ab:a7:
                    8e:67:89:31:81:4f:e6:3e:a8:1a:95:f7:5a:24:4f:
                    49:22:1a:3d:fe:34:ba:d0:b9:d5:4e:31:5a:a3:ea:
                    81:7d:c9:71:05:7b:78:26:95:11:7d:b1:28:db:a5:
                    ba:0b:ea:ca:96:62:78:c1:a1:bb:9f:35:b5:70:85:
                    da:eb:12:8f:c1:11:ad:58:a1:bf:a8:05:c5:69:21:
                    87:38:2c:d8:66:c1:9f:78:96:a8:36:ba:61:3d:b6:
                    d4:be:83:dd:68:14:92:7d:f1:6c:b6:c6:3a:5e:c3:
                    e8:77:7e:f6:8b:68:93:fc:c0:3e:de:42:eb:21:2d:
                    59:be:5f:14:b8:16:8d:96:79:a7:50:57:43:cd:04:
                    a6:74:89:8a:3f:a1:00:f4:18:8b:db:59:90:9c:c6:
                    e0:79:f5:d3:49:33:70:67:68:85:8d:8f:88:7c:cf:
                    85:b5:4c:ab:5b:d2:ae:15:8c:89:84:bc:c7:35:2d:
                    c0:3e:c1:14:03:d0:1d:e7:ef:9d:22:ce:58:bb:0e:
                    fd:dc:04:00:d8:98:f0:71:e2:4d:c7:86:4e:64:5a:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:5E:91:E4:A6:00:F9:3B:4C:ED:C0:99:0F:52:47:78:88:D1:2E
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:dd:12:d3:a4:eb:f2:a5:02:18:48:db:e4:48:ba:45:e6:
         2f:d8:f6:f6:1c:83:b2:77:7a:ae:34:59:c0:54:4d:da:4c:7d:
         58:34:13:02:a9:c2:33:1f:b0:83:f5:e0:30:a9:90:00:e4:b4:
         10:6d:39:d2:bf:2a:f6:79:9f:04:4a:57:57:ef:58:a5:77:99:
         26:0f:59:f1:a4:1e:93:fb:0a:41:59:2e:37:f7:62:3a:39:4b:
         03:7b:c7:22:44:a7:c2:7b:77:70:7a:88:f7:32:37:db:9c:b2:
         c7:a8:0b:f0:ba:85:f9:3d:dd:7a:33:3c:ab:65:c6:bd:db:56:
         fc:b6:5b:31:72:3e:9e:ae:23:5c:f9:27:11:1e:52:71:b8:cb:
         4a:cc:8a:f4:26:9b:57:65:d4:22:41:1b:2c:64:67:d4:45:7e:
         75:c0:68:09:ca:4c:09:95:aa:53:ae:60:a6:af:15:00:f3:46:
         37:e4:8e:8c:b2:41:87:dd:60:a8:62:98:d4:b1:74:33:e6:10:
         13:9b:84:93:02:6b:ad:70:85:7a:ff:4d:cd:20:7f:ad:8e:7e:
         02:90:52:10:7d:5a:62:0e:fd:cb:a7:48:da:d0:cd:6e:79:cf:
         49:f1:07:8c:ba:85:76:92:e0:23:9e:92:e1:7e:5e:08:34:3e:
         66:4f:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:59:20 2026 by rpki-client