Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
File:                     rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft (raw, json)
Hash identifier:          Smg1g58cG3wjQLjkbu0o5iUxVr+pj/Nx80NH1eJ5MAM=
Subject key identifier:   16:72:F3:04:46:27:1E:B6:63:71:6B:F4:BB:16:4E:70:87:1B:35:08
Authority key identifier: AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2
Certificate issuer:       /CN=A91EF8B6/serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
Certificate serial:       0C20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
Manifest number:          0C12
Signing time:             Sun 26 Jul 2026 19:12:33 +0000
Manifest this update:     Sun 26 Jul 2026 19:12:33 +0000
Manifest next update:     Sun 02 Aug 2026 19:12:33 +0000
Files and hashes:         1: rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl (hash: KJLuIXEJv6bfI5HuDlXFZW6WIwafeKEyZIRexyGa5Xo=)
                          2: FB6D5292263C11EEB9F5DB43C4F9AE02.roa (hash: 9vfMSvXUgFAWrMwGngY+4Eec7WyIf24UFnNt67nkKsk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 19:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3104 (0xc20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8B6, serialNumber=AD84F4BCBEB3C9365F2827153BA69CED2A9912E2
        Validity
            Not Before: Jul 26 19:12:33 2026 GMT
            Not After : Aug  2 19:12:33 2026 GMT
        Subject: CN=6a665c21-97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:05:f7:69:63:15:98:8f:d5:0b:e6:43:aa:
                    2f:e6:2d:3f:ba:e7:8f:14:27:1e:0c:b0:f5:41:1c:
                    53:65:b9:a9:ee:21:0f:8e:eb:eb:c4:d0:a3:64:8d:
                    6b:ed:71:d0:c9:f8:cb:bb:13:7a:e4:92:b7:7f:36:
                    f7:16:6b:1b:76:a0:c2:3c:cf:b6:80:ff:21:43:6e:
                    f9:d8:1a:24:33:54:8d:0c:6c:64:61:2b:36:20:11:
                    bb:8a:9b:06:b1:29:7c:bc:cb:26:50:c0:0d:a4:4b:
                    cc:36:01:cc:de:d7:01:f9:82:92:cc:47:84:59:a3:
                    8e:0d:03:34:ef:fa:02:87:ec:76:0b:74:a8:3a:3e:
                    02:71:41:22:12:8b:45:5f:86:34:d6:6c:27:a2:3b:
                    79:03:d2:b5:b7:73:f7:3c:f8:db:92:1c:f6:af:07:
                    78:b0:5f:e2:23:0b:2a:2c:29:fe:72:8e:ad:cd:e7:
                    2e:a3:fb:8c:f8:6e:c6:ce:10:3d:1c:97:db:90:dc:
                    16:12:64:90:20:79:a4:cf:eb:ad:08:d3:25:a8:29:
                    67:22:97:2d:6e:f5:12:54:1c:fc:93:91:35:23:71:
                    77:6c:5a:9a:37:71:5b:4c:2a:4c:ca:ae:35:9c:d8:
                    d8:58:1e:cc:f7:ec:9e:a4:be:6e:18:70:c4:89:a2:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:72:F3:04:46:27:1E:B6:63:71:6B:F4:BB:16:4E:70:87:1B:35:08
            X509v3 Authority Key Identifier:
                keyid:AD:84:F4:BC:BE:B3:C9:36:5F:28:27:15:3B:A6:9C:ED:2A:99:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYT0vL6zyTZfKCcVO6ac7SqZEuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8B6/40E7FABA3AA611EAAC8F1875C4F9AE02/rYT0vL6zyTZfKCcVO6ac7SqZEuI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:e4:5a:ca:0d:5f:bd:6c:77:f6:d5:53:01:09:b4:f0:3b:
         1c:04:26:e5:56:7c:80:7c:7d:54:61:71:40:66:bc:41:14:3a:
         1d:d4:e8:17:97:e8:bf:65:30:79:aa:53:2b:90:84:e9:8c:cf:
         c8:5f:20:1c:89:8d:9c:a9:60:8f:9f:af:21:4e:02:42:7d:55:
         42:5a:20:34:66:9e:41:3f:52:ff:62:76:b4:79:96:c6:81:64:
         c0:5e:fd:e1:9b:12:18:1e:ac:47:63:fd:25:39:f5:a9:e5:00:
         0b:f3:e7:a3:9f:db:6d:cd:9d:52:9b:cf:68:fd:b0:1f:cb:0a:
         6a:3c:1b:74:37:69:6c:0d:b3:a1:1d:c3:91:ee:77:a9:87:d9:
         c5:54:e5:99:46:d5:2c:1c:76:70:3e:a8:54:52:d7:36:f9:b9:
         d9:f8:3f:ec:06:8a:22:39:d6:ae:44:5c:d6:d7:0d:bd:8a:ca:
         c3:9e:5a:36:d2:8a:30:b8:2a:6b:09:cb:c0:94:b5:ce:02:79:
         83:20:27:e1:3e:e0:57:c8:5f:ce:07:36:a2:5f:3f:3f:b3:1a:
         fd:ba:e7:ef:dc:14:88:05:d7:62:54:e0:e9:fb:23:0e:23:ad:
         cc:0a:00:07:65:c2:d8:0a:fc:77:5c:0e:3e:8d:74:b6:e0:46:
         07:d0:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:57:15 2026 by rpki-client