Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File:                     yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier:          tPIdy002tQO/oymA9/4IFMe+UjoN2Zn1zpqgcM3IGlY=
Subject key identifier:   5C:DA:83:43:BD:4E:D6:0B:2C:35:C4:3C:0A:6D:60:17:63:5B:00:41
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer:       /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number:          0251
Signing time:             Wed 29 Jul 2026 03:21:47 +0000
Manifest this update:     Wed 29 Jul 2026 03:21:47 +0000
Manifest next update:     Wed 05 Aug 2026 03:21:47 +0000
Files and hashes:         1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: kGLdKi4V3LDqeDlICJsAUshu3A/FUY1rtm+oEA/jjG8=)
                          2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 03:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
        Validity
            Not Before: Jul 29 03:21:47 2026 GMT
            Not After : Aug  5 03:21:47 2026 GMT
        Subject: CN=6a6971cb-fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:4c:e8:8a:27:28:fb:ab:74:41:50:8d:9a:
                    29:9c:0b:57:b9:5d:7a:5c:9f:d4:df:49:c4:c6:b6:
                    dd:5d:3b:fa:7d:ce:9f:39:7e:4a:cf:86:76:23:cf:
                    8b:db:61:5d:4b:4c:dd:de:5e:3a:82:57:d3:76:33:
                    b4:a0:bb:79:39:dc:d5:4a:66:b9:9f:8e:b8:54:7d:
                    e6:df:2b:c2:27:88:c8:f5:d2:fd:0c:d1:56:7a:b7:
                    d7:35:ed:3d:60:30:ad:1d:b8:11:c9:d9:c8:7b:73:
                    42:ec:1d:3c:59:bd:2e:1d:f9:c1:8c:7d:a7:4e:fc:
                    87:a9:5d:2d:b9:8b:63:a0:eb:fd:37:77:e1:3b:79:
                    77:49:3d:76:5e:ab:bc:7e:35:c6:b5:0e:fe:93:c7:
                    f5:8b:b0:8c:bf:3a:a2:2e:01:d5:2c:d4:ff:18:05:
                    39:b3:9e:42:9a:18:f2:52:91:65:5e:c7:ec:a5:20:
                    4f:c3:86:2c:e4:3b:a2:68:1b:78:44:81:bf:25:fb:
                    69:5b:9b:03:fe:00:8e:6e:f9:aa:bb:8b:a0:26:66:
                    5b:19:b2:77:6b:5c:8d:05:b4:6d:f0:ac:00:2e:c4:
                    76:56:9d:cd:a8:08:b7:a1:34:0d:9d:f4:aa:e4:8b:
                    c3:d4:28:82:15:98:a9:6f:e4:7e:70:9c:9f:84:2d:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:83:43:BD:4E:D6:0B:2C:35:C4:3C:0A:6D:60:17:63:5B:00:41
            X509v3 Authority Key Identifier:
                keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:10:27:90:5a:fa:79:4c:4d:17:f6:6a:f8:ac:95:d9:fe:9f:
         c7:b7:52:9b:5e:21:c3:9c:8f:47:64:7a:57:50:6d:7e:0b:58:
         00:ce:48:7d:5f:ae:4d:a9:f2:a4:e0:71:40:e7:a9:39:e3:60:
         a1:bf:af:b2:1a:aa:f5:33:ef:97:65:c7:9c:08:b9:ed:00:1a:
         f5:bf:8d:c1:36:b6:cc:b4:06:f4:f0:f7:f6:c3:e9:4a:39:ba:
         e6:ff:51:ae:3c:df:ec:17:81:a3:9b:11:31:c8:bc:fd:31:c9:
         5e:85:e8:85:60:ec:14:35:d2:ae:89:b4:bf:8e:cc:f7:10:37:
         20:db:d0:87:4b:e8:a1:7d:dd:96:22:f1:97:b9:2d:9d:25:cf:
         88:51:23:83:78:66:94:a6:c5:15:a2:5f:b3:10:d9:16:6d:df:
         36:2f:e4:af:2f:5b:06:c1:84:f6:42:33:19:66:c1:3c:1a:8c:
         ec:98:f9:9a:ad:0d:19:24:a0:42:1b:d4:44:ad:f8:1c:d7:7d:
         97:e0:61:75:35:60:2f:d5:6f:a6:26:4e:8f:f8:df:a1:e0:28:
         4d:01:ef:a1:09:91:75:18:d4:4e:a9:b0:94:70:f2:d6:ae:99:
         d6:19:b8:8a:c5:b3:f7:a7:b1:d6:0c:a2:9a:db:36:ea:30:62:
         e2:7c:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:32:55 2026 by rpki-client