Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File:                     vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier:          WZUmfnBldx/WuB8cxVc+BkE0EuqTJA+XQgwtsqtKoOg=
Subject key identifier:   4F:5B:7C:8A:DD:2C:D2:81:63:A3:A6:67:C9:EC:60:73:28:72:8B:5E
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer:       /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial:       1BE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number:          1BD2
Signing time:             Tue 28 Jul 2026 16:19:49 +0000
Manifest this update:     Tue 28 Jul 2026 16:19:49 +0000
Manifest next update:     Tue 04 Aug 2026 16:19:49 +0000
Files and hashes:         1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: doKB9vqzxJwsNRo91Oh8pXYooyJ9cyHMI/o69ia5yyY=)
                          2: F508F35E86EF11F19E006003A7EE528E.roa (hash: Ty3+mGIb6QkvbzK0VW/q7r14uQOfu2AHVHicnCmDQFw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
                          rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7138 (0x1be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
        Validity
            Not Before: Jul 28 16:19:49 2026 GMT
            Not After : Aug  4 16:19:49 2026 GMT
        Subject: CN=6a68d6a5-83af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:10:44:eb:2a:40:8a:4d:50:f8:d3:b9:85:
                    f2:f8:83:00:bc:dc:0e:64:89:be:3c:1a:4c:4e:52:
                    3d:80:5a:2c:0e:5a:5b:1f:18:d4:45:d5:bb:b5:11:
                    99:d1:fa:db:ff:97:d6:5e:9b:cd:7a:20:d9:09:fd:
                    ec:ef:c7:ad:b9:b2:ce:e4:da:fb:22:10:48:a7:3c:
                    a3:c5:d9:5e:46:b6:85:df:11:e1:58:eb:de:a5:47:
                    73:08:7f:35:5b:e3:a4:f8:07:59:e1:92:e7:4e:6f:
                    bc:04:16:4f:ba:7a:33:55:98:bb:6a:68:4d:33:26:
                    eb:78:e6:4b:e8:de:de:3e:e3:1d:18:da:33:c8:82:
                    12:eb:dc:36:8f:72:9f:b2:1f:12:af:e6:5c:1c:23:
                    eb:be:8e:64:f2:65:ed:e8:fe:64:86:61:f7:64:bf:
                    fe:44:07:59:0c:c5:d4:f7:2e:3b:d3:5b:2e:5d:71:
                    79:3b:dd:02:38:38:67:31:ae:75:6f:89:6b:1e:95:
                    fe:42:bf:36:fb:73:9d:78:72:6f:7e:a5:bd:39:f9:
                    51:df:8c:f4:57:b8:8d:1c:34:13:54:fd:1a:4c:20:
                    25:70:7b:c0:49:c8:53:99:50:3d:99:8f:e7:88:e1:
                    23:8d:ec:e1:6f:aa:7a:8b:4c:c4:ec:9d:42:88:f3:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:7C:8A:DD:2C:D2:81:63:A3:A6:67:C9:EC:60:73:28:72:8B:5E
            X509v3 Authority Key Identifier:
                keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ac:30:9b:0c:de:f1:21:ef:9c:be:76:e4:f7:ff:aa:9e:3c:
         d1:ad:ac:d1:5d:2e:fd:2d:75:c9:37:ad:b5:01:ff:2d:fb:f9:
         4e:38:91:b8:c3:64:d9:ef:e2:02:12:6b:ec:82:b6:0e:b4:27:
         a4:e4:fa:3c:79:1d:d6:8b:3b:44:da:07:4f:4f:7e:af:66:da:
         7e:c6:1d:38:c1:88:30:d4:c4:fa:bc:ee:f5:30:bf:47:14:82:
         34:e9:80:56:aa:b4:e5:60:c3:9a:c0:38:2d:b6:d5:ca:6c:0e:
         e0:2a:2a:2c:fe:c4:35:9f:c0:e4:fe:72:80:46:c8:67:76:9e:
         b6:58:22:95:3f:bc:52:fd:25:d3:46:bd:bf:1e:c9:0a:5b:ce:
         d7:7f:04:65:6f:75:37:5f:5f:13:2f:3c:80:f7:5c:e1:f7:6e:
         8f:0d:41:d9:53:01:d7:c0:5d:72:af:20:a4:b8:0d:b3:2a:a4:
         ef:30:09:53:01:91:fb:86:06:8e:bf:76:bf:26:37:a2:f7:4b:
         28:0f:3f:b1:33:aa:2c:d4:22:db:ca:52:75:25:9d:f1:87:20:
         d4:2a:ca:23:bb:c1:ad:ba:c6:1f:28:f9:3f:bd:9a:07:63:67:
         42:a2:31:ee:9b:6f:df:73:9e:f3:4d:d0:1c:34:25:c2:77:b6:
         e2:18:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:42:04 2026 by rpki-client