Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
File:                     1Ycen8b73n3HG36JXIoEw9ACHYU.mft (raw, json)
Hash identifier:          wDrULAKFmhVp6dUouY7cOY4OiTf6C6dRbBoWQSmS3hA=
Subject key identifier:   D3:64:AE:C5:34:C2:58:B8:04:2C:BB:C5:FD:91:6A:9F:88:33:0F:5F
Authority key identifier: D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85
Certificate issuer:       /CN=A91F8A49/serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
Certificate serial:       022F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
Manifest number:          0228
Signing time:             Mon 27 Jul 2026 04:19:18 +0000
Manifest this update:     Mon 27 Jul 2026 04:19:18 +0000
Manifest next update:     Mon 03 Aug 2026 04:19:18 +0000
Files and hashes:         1: 1Ycen8b73n3HG36JXIoEw9ACHYU.crl (hash: jxi+KJ4kqOwbrHb78t4ow/o3v0WZgPZt/Z+xWrBAEcA=)
                          2: A355C1A8B6D511F089793D6DC4F9AE02.roa (hash: h0j3mf/tfCqfATi6s2p0ZWyH9rfUorcBAbjHkKVPs1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl
                          rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8A49, serialNumber=D5871E9FC6FBDE7DC71B7E895C8A04C3D0021D85
        Validity
            Not Before: Jul 27 04:19:18 2026 GMT
            Not After : Aug  3 04:19:18 2026 GMT
        Subject: CN=6a66dc46-a452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:c7:99:22:2b:d5:25:8f:0e:f9:e4:4d:3f:
                    13:95:cd:5d:d5:8a:87:cb:54:aa:dc:97:e7:8c:df:
                    d3:16:e5:71:d0:55:08:a1:88:4d:df:13:8b:9d:df:
                    e0:02:d3:ea:d3:ec:0a:76:71:e8:d6:13:fd:2a:02:
                    fb:db:10:d1:76:07:70:f1:da:62:ca:80:9f:d2:60:
                    07:0f:a3:f9:50:71:f7:78:79:50:3d:07:5c:35:95:
                    b0:fc:1c:e2:b1:37:ab:24:38:e6:2d:50:eb:9f:66:
                    41:49:63:31:c3:91:7c:f8:82:7b:b3:6e:83:83:d9:
                    bc:5e:6f:1b:de:db:ac:ec:c6:93:ba:e6:9c:1b:8e:
                    0f:a9:2a:4d:ad:0c:7a:d5:10:86:76:2c:c1:40:de:
                    1d:b4:2d:c8:94:f5:ef:1e:e9:ba:a8:ae:4d:2c:c6:
                    6b:55:b1:e7:c9:f7:f7:85:3f:42:7b:c9:d1:dd:a9:
                    81:b5:4a:ed:4a:e2:cc:de:e1:29:cf:34:1b:b6:c4:
                    9b:31:98:12:05:61:d0:62:59:4b:de:71:62:b5:24:
                    8f:01:f7:e4:92:b6:33:99:9a:a8:0d:0c:96:8a:f1:
                    a8:6c:bb:15:4e:e4:d8:52:a1:c3:55:5a:f6:3c:21:
                    35:74:48:e1:07:6f:0f:0e:94:2b:e3:43:dd:11:01:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:AE:C5:34:C2:58:B8:04:2C:BB:C5:FD:91:6A:9F:88:33:0F:5F
            X509v3 Authority Key Identifier:
                keyid:D5:87:1E:9F:C6:FB:DE:7D:C7:1B:7E:89:5C:8A:04:C3:D0:02:1D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Ycen8b73n3HG36JXIoEw9ACHYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A49/47D0446447B711EE8A0A9C43C4F9AE02/1Ycen8b73n3HG36JXIoEw9ACHYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:81:98:87:a0:14:e4:4b:09:a6:05:33:ae:d9:81:f1:91:
         b6:2f:60:f0:22:7a:13:80:bf:66:f8:fe:43:63:f1:00:6c:fd:
         5f:fa:04:6e:ef:08:7c:6b:76:7c:f6:16:75:0e:c5:3e:eb:e4:
         a0:48:db:c8:8d:28:d5:c7:1b:b0:e9:73:4f:a3:0b:96:29:c6:
         3c:14:92:84:0b:9f:48:b1:fe:38:ad:9c:29:1e:48:8d:d2:b0:
         7e:6d:ca:af:2f:51:a1:7c:ee:ba:d3:b0:d8:aa:fe:f0:05:5d:
         c7:05:20:bb:ed:54:63:34:08:2e:dd:ad:7e:2c:56:ae:96:99:
         42:29:e0:92:7e:7c:a4:b1:c0:a1:5f:ae:af:58:f8:14:70:2f:
         c0:f5:d0:c3:b8:19:c8:d7:f4:0f:1e:59:d2:2a:bd:53:33:d4:
         dc:8e:a8:33:f4:37:a0:d6:8f:7e:ba:44:2a:8c:91:2e:87:9d:
         51:c5:f8:58:7b:2f:60:dd:9b:90:78:29:a4:44:84:8f:0b:7a:
         86:fa:83:64:ec:4b:6b:01:78:26:37:f2:ac:2e:df:9e:b5:61:
         c0:3f:97:10:83:f9:d7:ba:ce:10:c8:2d:fa:6f:c3:b3:23:76:
         a6:69:23:fb:83:c3:99:77:e5:73:d7:cf:fd:17:7c:a2:0a:df:
         1d:7e:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:09 2026 by rpki-client