Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File:                     Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier:          OeQwTVdbmOk6jo8ROKfGhZ2JgB1vbuUl/7LOe57VGuE=
Subject key identifier:   67:0C:FE:75:3C:24:CC:6D:ED:D1:EA:5A:D7:1F:2F:95:2A:B5:DC:27
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer:       /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number:          0200
Signing time:             Mon 27 Jul 2026 04:47:24 +0000
Manifest this update:     Mon 27 Jul 2026 04:47:23 +0000
Manifest next update:     Mon 03 Aug 2026 04:47:23 +0000
Files and hashes:         1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: J+wWLsl6tCxjfzbuz+dCo1GW9Bki9b5hgE5O5nFVDOI=)
                          2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: fG2F07ozyOAGX3OfyVFC/xUJQ5PUexYp8MQrIGuykkY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
                          rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
        Validity
            Not Before: Jul 27 04:47:23 2026 GMT
            Not After : Aug  3 04:47:23 2026 GMT
        Subject: CN=6a66e2dc-3b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:9b:f9:80:ab:fb:9f:74:42:07:1b:cf:b9:
                    aa:21:d0:af:64:7c:5a:f6:d3:62:84:e1:be:83:7b:
                    c2:4d:8c:24:2d:89:10:15:b6:92:0f:17:8f:b1:05:
                    99:ab:77:f0:cc:06:56:50:fe:25:25:92:d9:19:c3:
                    9c:86:2f:05:68:31:ec:29:2f:1a:6b:1a:d3:e2:a4:
                    a8:0f:40:68:8e:1b:5d:33:5a:13:37:a4:31:b8:9a:
                    3a:f0:5b:bf:5a:ba:e9:30:2e:08:d8:e9:67:de:e1:
                    f0:c7:03:fe:e5:ec:03:ea:37:ea:d7:6b:59:20:76:
                    c4:a6:9a:aa:39:ee:9e:cf:e2:97:1a:0c:e6:8c:9c:
                    8e:51:34:e4:e7:bc:5e:8c:96:0c:93:72:8f:26:15:
                    37:f0:da:d6:8a:3e:ed:6d:7c:7d:77:3b:9e:64:08:
                    be:03:c8:f2:87:e1:40:90:5a:c2:5d:bd:f3:9b:0e:
                    0e:b4:03:b6:49:95:55:3c:67:cc:8c:3a:60:e5:1c:
                    89:71:18:a2:ca:f3:a1:f0:1e:5e:55:d2:e1:4e:84:
                    6c:c0:ee:4d:02:46:a2:f2:30:90:01:47:00:7b:1d:
                    4f:97:dd:e6:62:db:2c:32:aa:04:e6:19:46:05:53:
                    20:f2:3f:cf:4a:a7:db:ab:db:b0:d8:1c:2b:10:1b:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:FE:75:3C:24:CC:6D:ED:D1:EA:5A:D7:1F:2F:95:2A:B5:DC:27
            X509v3 Authority Key Identifier:
                keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:04:fd:73:9a:c6:31:7c:18:eb:fd:28:f6:54:05:b4:cf:11:
         50:78:7b:6c:92:9d:f0:b3:b1:c1:7d:f8:58:06:a5:65:57:46:
         e1:b7:41:2f:54:da:95:38:5a:48:28:94:78:37:ff:5e:3d:1e:
         03:44:56:c1:d8:61:a5:e1:ac:2d:47:8b:19:13:fb:17:33:0a:
         c6:90:9a:ee:76:25:a7:a4:c8:8d:f0:cd:48:ac:2e:11:fb:9b:
         36:26:5d:8b:c7:61:db:fb:ca:18:cb:b6:1d:0a:75:ae:ed:98:
         62:60:9d:7c:be:1e:aa:d4:88:62:e8:02:bd:0a:93:67:df:4e:
         5b:d8:9d:ed:f5:35:4c:d2:46:63:23:cb:5e:89:5d:ae:24:28:
         a1:34:0e:73:94:c2:b9:9b:0a:7c:fb:ab:a4:e4:e3:a6:11:0a:
         72:fc:a6:94:ad:40:05:67:c8:4c:8a:c5:9d:02:f7:da:6d:5e:
         a3:ed:88:29:38:b2:99:ee:46:b2:db:bb:d0:d0:b5:94:06:87:
         da:af:a9:bc:f4:cd:ce:c4:6c:27:d2:b5:99:4b:8b:18:23:29:
         d8:95:19:a3:4e:3c:1c:dc:d2:a0:7f:eb:08:2f:16:b1:8f:7a:
         bf:84:f7:32:0f:48:92:fd:87:58:d3:1a:9c:c4:31:8a:56:1f:
         ab:92:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:55 2026 by rpki-client