Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
File:                     TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft (raw, json)
Hash identifier:          slsyZpNCUAFuSok8vNoLR/UDhv/CvjXWUSKalMqy7sQ=
Subject key identifier:   91:B3:9B:61:46:90:3D:56:DC:D6:DD:0F:A7:46:88:EE:5B:01:E4:DA
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Certificate issuer:       /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial:       C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
Manifest number:          C4
Signing time:             Wed 29 Jul 2026 08:21:54 +0000
Manifest this update:     Wed 29 Jul 2026 08:21:54 +0000
Manifest next update:     Wed 05 Aug 2026 08:21:54 +0000
Files and hashes:         1: TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl (hash: aIffoFH9L1TPYgWkgnBfpOjjkVimBdlt4ndOC/nU0JI=)
                          2: A24902C8623B11F0BEB49510C4F9AE02.roa (hash: 9hWkzIMPHr3u4aBMV/4p5NjvOfvSqGpfsyIm9FgrEFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
        Validity
            Not Before: Jul 29 08:21:54 2026 GMT
            Not After : Aug  5 08:21:54 2026 GMT
        Subject: CN=6a69b822-2751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:c9:ac:3e:03:4d:cd:f0:a4:ce:78:61:bf:
                    1b:ca:f6:11:29:bd:be:b8:75:37:a8:95:a4:41:62:
                    ef:45:2c:73:2d:ac:d9:68:97:55:af:df:cf:e2:4a:
                    ca:ad:e4:fa:3a:93:46:65:5d:d5:37:2d:26:04:48:
                    9a:15:4e:d6:d9:55:0b:dc:79:7e:9b:e6:a1:76:41:
                    4b:af:25:cd:a7:21:bf:ad:a2:4f:65:53:ee:b7:f5:
                    65:a1:be:cf:0e:ea:83:73:6b:dc:c9:3e:fe:dd:11:
                    f5:51:6e:80:12:16:15:38:ed:2d:7a:4d:8d:e7:bf:
                    9f:4e:41:53:71:64:f3:ee:cb:69:a9:29:fd:f9:94:
                    d8:a2:50:1b:f7:c6:09:e9:69:eb:c0:ce:f2:fe:12:
                    8c:87:f1:32:f8:f1:d1:f5:65:9b:76:ef:25:e6:21:
                    52:dc:f3:ac:5b:53:57:f6:97:ef:d1:41:d0:fd:d1:
                    e8:c9:81:9d:fc:c8:06:6a:02:12:17:b1:26:57:61:
                    9c:a6:b5:03:ec:6f:cb:1c:9a:94:9b:85:55:eb:1f:
                    59:97:90:b6:22:d7:c8:21:93:85:c6:4c:09:4e:4e:
                    7a:2f:2c:8c:db:95:5a:7b:30:8b:eb:94:52:70:93:
                    0f:e2:ba:fe:25:be:9e:51:1c:e8:1a:53:43:3d:05:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:9B:61:46:90:3D:56:DC:D6:DD:0F:A7:46:88:EE:5B:01:E4:DA
            X509v3 Authority Key Identifier:
                keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f3:f5:2b:fe:87:87:b8:97:5b:33:dc:e7:19:65:5e:f0:85:
         71:3f:57:64:80:18:5f:e4:f7:08:56:3c:b2:7c:e3:71:26:a0:
         b3:7c:e5:a7:10:10:64:c3:fa:b9:f7:7c:30:d8:10:9f:0b:9c:
         a8:ab:b1:5d:ce:e1:b6:32:c6:d1:42:9d:42:68:5e:65:29:74:
         89:a7:56:55:5b:be:7f:d2:e3:15:7c:8c:2c:15:1f:21:a8:b5:
         45:83:ba:2e:6a:94:26:3a:ce:7d:ad:6c:17:35:d6:a8:30:5f:
         a4:e2:72:62:d2:f9:cf:01:25:d6:ec:6f:1a:91:ca:9a:a4:5f:
         04:9f:ba:c1:be:3d:83:c3:c3:81:d0:16:6b:5b:95:bf:14:f2:
         19:27:29:08:51:02:91:11:aa:65:fc:00:e5:3a:4c:6d:b3:57:
         55:15:20:21:39:ea:87:c6:43:3e:d6:74:5e:62:8d:3b:7a:7f:
         7f:07:c9:e1:ff:39:41:12:d2:00:a2:79:f7:bf:b7:64:a4:35:
         f4:84:8e:10:5e:ff:39:91:da:51:a4:04:6c:a7:7c:16:a0:34:
         44:b5:55:c1:27:89:cf:50:07:84:d7:f8:0e:c5:53:6e:4a:40:
         7c:d3:f6:ca:f8:7b:7c:cc:d4:97:f0:4a:9d:8c:ba:5a:f0:4c:
         06:7c:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:38 2026 by rpki-client