Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File:                     yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier:          L+BQwNQFwIVZoksm98R3xUCF3HRnKVInDoxYCHloByo=
Subject key identifier:   1B:80:B5:7B:5E:24:E6:79:60:9B:FD:CC:D9:46:F7:6A:2A:BA:44:D1
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer:       /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial:       FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number:          EB
Signing time:             Tue 21 Jul 2026 08:06:51 +0000
Manifest this update:     Tue 21 Jul 2026 08:06:50 +0000
Manifest next update:     Tue 28 Jul 2026 08:06:50 +0000
Files and hashes:         1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: Yw2miIiBfyPdSRu/I6PWIav9U+AZrvaeZvLnSYs6Gvk=)
                          2: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: TSbzXgPkumBg0cDwPI2XndJNJ0jn2eg2lDv16RkcG74=)
                          3: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: 3KZYWiJqZH8n9U/9eCnSUD7SavXQ/Ekzxh7yjVvlx04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
                          rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
        Validity
            Not Before: Jul 21 08:06:50 2026 GMT
            Not After : Jul 28 08:06:50 2026 GMT
        Subject: CN=6a5f289b-b87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:a8:50:56:bd:62:53:00:b8:f5:47:11:cb:
                    c7:fe:2e:06:2a:8e:db:86:53:fb:a8:b1:6d:18:02:
                    33:84:e7:83:e3:a8:3e:e3:56:92:69:5d:bd:96:ac:
                    48:93:0f:f0:6e:79:cd:18:fa:38:8c:0b:58:ba:ad:
                    79:23:fd:c3:02:24:4e:be:51:d8:fe:61:98:00:aa:
                    4f:f1:b4:03:01:11:dd:bf:2d:09:ad:52:81:d8:b0:
                    aa:12:fd:01:23:37:9a:7a:4f:d7:18:9b:55:8e:88:
                    8e:74:8d:0a:3f:54:2c:cc:31:7c:0b:47:7e:29:bb:
                    b2:5d:4a:f9:cc:cd:15:85:10:9f:39:00:4b:ff:72:
                    0b:f8:29:ad:a1:4c:12:30:2b:8c:25:5d:e5:69:10:
                    13:11:ea:4e:76:78:54:f9:d3:2c:59:91:12:74:6c:
                    d1:80:1e:4f:fa:7f:01:55:58:e8:72:f4:90:1b:d0:
                    49:29:8a:86:4f:8f:84:05:9d:be:d9:88:ca:6d:f3:
                    c7:3a:73:47:3c:45:9e:32:04:62:48:84:f7:2e:ab:
                    a7:d5:c6:f7:79:d7:42:07:13:60:8b:3e:29:99:08:
                    7a:96:cf:b2:df:81:cb:c3:74:f4:ea:e8:b0:5f:f3:
                    a9:ec:35:ac:d3:1d:27:92:8a:7c:7a:8a:c7:9e:22:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:B5:7B:5E:24:E6:79:60:9B:FD:CC:D9:46:F7:6A:2A:BA:44:D1
            X509v3 Authority Key Identifier:
                keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bb:9a:82:2f:e6:58:df:8e:bb:0d:fe:74:89:eb:82:9a:08:
         a8:f0:ff:79:3f:8a:9d:f6:88:a9:0a:90:ae:1a:f5:ec:b9:ee:
         af:42:df:46:1c:c9:57:63:86:ba:b7:9a:98:e0:5c:fc:71:29:
         d9:d2:49:d2:b4:8e:7f:d1:83:32:d6:46:62:b9:96:12:ef:b2:
         d9:8b:79:c8:7b:7d:49:3b:5f:f2:54:ee:8e:41:bc:97:9e:12:
         fd:d7:b7:99:a7:21:33:3d:ae:fc:9b:b8:43:6a:f3:e5:7f:c4:
         ef:ac:a4:01:00:4c:48:d5:60:d3:43:65:d1:11:5a:a7:0f:c3:
         45:07:b2:66:e6:c9:4b:94:19:0e:1d:31:19:f4:a3:ae:84:17:
         96:34:55:79:f2:a1:7d:e7:ad:99:64:61:d4:65:92:14:96:bc:
         01:89:68:02:49:a2:29:e2:17:a4:e3:cc:3d:99:29:e3:29:45:
         a6:60:86:9a:94:30:e8:3e:2e:03:5f:2e:0b:d4:7e:65:a6:e4:
         a5:aa:5b:9c:f2:38:7c:69:54:c8:cd:e3:a2:43:d2:8b:a6:1a:
         6f:65:9f:b5:6a:22:87:f5:0f:2a:72:96:a1:af:56:8a:36:a1:
         ba:94:41:fb:1c:87:d0:08:62:66:0e:7b:a3:4f:6a:45:de:66:
         ce:99:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:54:57 2026 by rpki-client