Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
File:                     YsDafzAgXhQZA4UrhjIw-eHi-c0.mft (raw, json)
Hash identifier:          qVon4XatlVl5vmYaO2Ccb017wWAiAFkDYNt/LfQEvo8=
Subject key identifier:   FD:9E:07:DA:C0:FE:16:98:3F:D7:59:25:4E:64:10:54:22:F1:3F:5A
Authority key identifier: 62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD
Certificate issuer:       /CN=A9175C2B/serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
Manifest number:          021B
Signing time:             Mon 27 Jul 2026 04:25:05 +0000
Manifest this update:     Mon 27 Jul 2026 04:25:04 +0000
Manifest next update:     Mon 03 Aug 2026 04:25:04 +0000
Files and hashes:         1: YsDafzAgXhQZA4UrhjIw-eHi-c0.crl (hash: 8uGDMIBPN21A6S3KMV57F4/BoAj9LsKXp//3+sihX2A=)
                          2: 0EB2F53A59A711EE9419DA2DC4F9AE02.roa (hash: x9i7lDosqgwYLvpZwD0TjYDx5mNzFlCpg7yuoWLzwco=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl
                          rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175C2B, serialNumber=62C0DA7F30205E141903852B863230F9E1E2F9CD
        Validity
            Not Before: Jul 27 04:25:04 2026 GMT
            Not After : Aug  3 04:25:04 2026 GMT
        Subject: CN=6a66dda0-e184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:33:ad:0f:f2:e7:bc:83:7d:2a:8c:e3:7c:
                    ff:f0:fb:4f:4d:5b:5e:e0:74:08:23:53:76:6f:95:
                    f7:93:39:b6:5d:ce:d9:76:17:f5:1e:c4:31:cb:41:
                    10:8c:64:df:aa:d4:ae:3c:a8:f9:f9:66:f2:07:76:
                    b5:06:89:23:86:d1:54:40:47:63:1b:9d:54:6c:c1:
                    d7:98:c6:e4:8e:0c:d3:b8:50:38:37:c8:74:a9:90:
                    7d:6f:7d:06:ba:79:ec:c2:cb:18:14:b6:bd:29:0f:
                    ed:f1:be:50:77:1e:a2:b9:1d:9c:89:c2:fb:0b:66:
                    7f:67:86:f8:fa:1b:94:07:3e:22:3f:f3:3f:9e:07:
                    b3:88:c2:1f:f5:84:67:79:68:d6:4f:28:14:06:68:
                    8b:e6:20:9c:d8:e9:78:c9:1e:3a:27:45:d6:51:4f:
                    70:cb:d8:50:ca:f7:c5:19:4b:33:b7:f3:e2:e0:c7:
                    d0:4d:a4:bb:3e:20:30:b2:5e:75:70:f7:7d:7a:95:
                    f2:41:45:16:93:f2:9e:d6:69:08:92:e5:eb:cb:dc:
                    78:47:d9:93:25:08:cb:c6:e7:6e:1c:6d:df:2d:42:
                    eb:02:cf:11:6b:75:cf:41:70:2c:27:d6:f0:19:10:
                    d4:ea:f3:61:9b:eb:ba:eb:9d:98:f5:4b:ff:81:4f:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9E:07:DA:C0:FE:16:98:3F:D7:59:25:4E:64:10:54:22:F1:3F:5A
            X509v3 Authority Key Identifier:
                keyid:62:C0:DA:7F:30:20:5E:14:19:03:85:2B:86:32:30:F9:E1:E2:F9:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsDafzAgXhQZA4UrhjIw-eHi-c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175C2B/EEBBC116535311EEAEAF0B80C4F9AE02/YsDafzAgXhQZA4UrhjIw-eHi-c0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:7d:13:bb:30:c2:f1:c2:60:75:39:34:b5:24:e0:97:11:
         94:45:ab:43:a7:01:2b:17:b2:35:20:5a:e5:6c:56:74:86:62:
         9a:27:47:a9:28:87:30:33:4d:b0:03:ea:ba:23:55:de:a1:46:
         88:4a:cc:e7:95:c8:dd:53:0a:45:21:b1:be:e8:29:14:f5:ce:
         b5:9f:5e:5b:62:56:35:63:b6:48:ea:99:e6:e7:c9:b6:72:b2:
         20:0d:13:ef:10:47:7e:63:d3:71:f4:23:d3:b9:92:ba:68:5f:
         38:77:67:5f:bc:1d:61:d4:64:37:c7:e7:bd:3e:c1:72:37:41:
         b3:be:25:d1:04:d1:b3:d3:42:f2:f2:fb:3e:fe:30:e2:f9:3d:
         c4:da:ba:89:3f:94:8a:56:df:9c:50:ea:7f:31:55:1c:3b:7e:
         63:b4:56:fb:12:e0:12:53:4a:ac:0b:2d:cf:51:58:26:0f:a2:
         17:11:d9:e0:79:0d:d4:e3:ee:bd:c4:e4:0c:0a:a9:8f:e9:81:
         c9:8a:2a:62:ca:63:fe:1e:43:c8:f8:04:36:80:bf:bd:80:a2:
         95:2c:7a:57:52:f3:9f:5b:ec:0f:49:15:51:17:bf:cb:c4:d9:
         9e:1d:1e:76:9a:1c:aa:97:d5:06:1a:b0:31:2b:7e:58:7a:12:
         40:f6:be:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzVDMkIxMTAvBgNVBAUTKDYyQzBEQTdGMzAyMDVFMTQxOTAzODUyQjg2MzIzMEY5
RTFFMkY5Q0QwHhcNMjYwNzI3MDQyNTA0WhcNMjYwODAzMDQyNTA0WjAYMRYwFAYD
VQQDEw02YTY2ZGRhMC1lMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIAzrQ/y57yDfSqM43z/8PtPTVte4HQII1N2b5X3kzm2Xc7Zdhf1HsQxy0EQ
jGTfqtSuPKj5+WbyB3a1BokjhtFUQEdjG51UbMHXmMbkjgzTuFA4N8h0qZB9b30G
unnswssYFLa9KQ/t8b5Qdx6iuR2cicL7C2Z/Z4b4+huUBz4iP/M/ngeziMIf9YRn
eWjWTygUBmiL5iCc2Ol4yR46J0XWUU9wy9hQyvfFGUszt/Pi4MfQTaS7PiAwsl51
cPd9epXyQUUWk/Ke1mkIkuXry9x4R9mTJQjLxuduHG3fLULrAs8Ra3XPQXAsJ9bw
GRDU6vNhm+u6652Y9Uv/gU8WqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2eB9rA
/haYP9dZJU5kEFQi8T9aMB8GA1UdIwQYMBaAFGLA2n8wIF4UGQOFK4YyMPnh4vnN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUMyQi9FRUJCQzExNjUz
NTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1hoUVpBNFVyaGpJdy1lSGkt
YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzRGFmekFnWGhRWkE0VXJoakl3LWVIaS1jMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NUMyQi9FRUJCQzExNjUzNTMxMUVFQUVBRjBCODBDNEY5QUUwMi9Zc0RhZnpBZ1ho
UVpBNFVyaGpJdy1lSGktYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArq19E7swwvHCYHU5NLUk4JcRlEWrQ6cBKxeyNSBa5WxWdIZimidHqSiHMDNN
sAPquiNV3qFGiErM55XI3VMKRSGxvugpFPXOtZ9eW2JWNWO2SOqZ5ufJtnKyIA0T
7xBHfmPTcfQj07mSumhfOHdnX7wdYdRkN8fnvT7BcjdBs74l0QTRs9NC8vL7Pv4w
4vk9xNq6iT+UilbfnFDqfzFVHDt+Y7RW+xLgElNKrAstz1FYJg+iFxHZ4HkN1OPu
vcTkDAqpj+mByYoqYspj/h5DyPgENoC/vYCilSx6V1Lzn1vsD0kVURe/y8TZnh0e
dpocqpfVBhqwMSt+WHoSQPa+sA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:17 2026 by rpki-client