Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
File:                     4YL5k2lSxCadZw2ldS3syGgjTxs.mft (raw, json)
Hash identifier:          SPkvpzcqt36VeGnmj0vaxE+zkBW8DsqAIwjtwKe3dZE=
Subject key identifier:   72:37:35:44:69:8A:CF:F4:EA:91:E3:83:F7:11:91:51:7D:BF:22:03
Authority key identifier: E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B
Certificate issuer:       /CN=A9126F2B/serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
Certificate serial:       22AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
Manifest number:          2286
Signing time:             Mon 20 Jul 2026 15:56:23 +0000
Manifest this update:     Mon 20 Jul 2026 15:56:23 +0000
Manifest next update:     Mon 27 Jul 2026 15:56:23 +0000
Files and hashes:         1: 4YL5k2lSxCadZw2ldS3syGgjTxs.crl (hash: e9wcDtixVn/WpC7u7Y3YEUbxHDpKawVpa0hDLAdqyqw=)
                          2: A8E9DE704B8511E7BF406610C4F9AE02.roa (hash: IV9u+bL98dY9vhWPzSb2VF1m+KNoLGbMT7wCZc4XtUw=)
                          3: B72206B4554B11E791BA5861C4F9AE02.roa (hash: i8ynNvisFun6KLb9XReq+KAa11jwRPXK2t/Z0bHo3gM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl
                          rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8879 (0x22af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126F2B, serialNumber=E182F9936952C4269D670DA5752DECC868234F1B
        Validity
            Not Before: Jul 20 15:56:23 2026 GMT
            Not After : Jul 27 15:56:23 2026 GMT
        Subject: CN=6a5e4527-1ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:3d:0c:93:b9:ab:48:10:96:fd:0f:cf:6b:
                    7f:a5:ca:ed:24:40:e6:bd:5c:e5:39:b0:bd:e0:9f:
                    76:79:04:83:fc:67:05:5d:65:e9:e1:64:34:6e:8e:
                    1f:90:6f:eb:db:db:94:20:76:f3:c9:a7:6d:3a:f7:
                    c0:d1:77:f9:d3:0e:0b:71:43:1e:95:09:a0:3a:d8:
                    4b:cf:0e:6e:ef:48:b4:fb:41:51:c4:58:73:f0:f9:
                    48:d3:59:e6:31:86:c6:b8:05:49:f4:39:08:ee:f5:
                    e6:08:0e:75:c4:45:13:dd:c3:a2:60:4a:1f:44:40:
                    c4:aa:b3:77:65:54:dc:b8:a6:31:9c:dd:2f:14:41:
                    d7:e2:43:4b:1d:fd:55:d6:75:b9:9b:1b:13:8e:f8:
                    4c:f7:e8:c9:71:b8:fd:a9:6f:ca:68:1d:4b:5a:40:
                    bd:93:d9:91:f3:ed:d5:34:bb:33:8a:ac:53:f9:4f:
                    9e:14:fe:58:04:40:97:a9:8e:ab:eb:62:31:42:4e:
                    57:eb:c2:7a:1d:49:75:b0:43:e6:70:85:47:72:33:
                    e8:af:e6:df:f3:e3:55:c8:42:d2:83:ee:83:b9:38:
                    4b:20:ac:0b:b1:03:8c:e0:ae:5b:31:39:1f:02:4f:
                    98:4b:fd:a2:1f:e2:a2:07:e7:19:28:02:f8:a5:af:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:37:35:44:69:8A:CF:F4:EA:91:E3:83:F7:11:91:51:7D:BF:22:03
            X509v3 Authority Key Identifier:
                keyid:E1:82:F9:93:69:52:C4:26:9D:67:0D:A5:75:2D:EC:C8:68:23:4F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4YL5k2lSxCadZw2ldS3syGgjTxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126F2B/90FADEECD5CD11E5AA426E40C4F9AE02/4YL5k2lSxCadZw2ldS3syGgjTxs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:9c:41:28:bc:95:5f:87:59:c1:f3:28:72:6f:af:b5:c5:
         09:21:c2:9b:5c:a1:91:ff:96:63:69:b7:44:e7:9d:4a:b6:15:
         d0:41:f6:d7:80:ae:0a:50:f7:ff:31:19:d3:16:eb:57:b4:55:
         c8:85:13:57:62:67:d4:2f:bd:55:2f:49:51:0c:83:85:aa:02:
         16:e9:7b:d3:96:4d:83:64:9c:60:e3:f9:a8:80:37:46:8d:93:
         5c:f5:fd:09:88:0b:27:5a:0a:9e:b7:4f:e5:43:c3:a2:65:6c:
         4d:1a:89:4d:6b:6a:b5:05:be:dd:4b:75:51:c8:78:d6:c7:26:
         43:bb:22:f1:9e:ad:62:d6:de:94:21:2b:f8:f4:12:01:86:2f:
         fe:2e:54:75:2d:d4:0d:5c:f7:7a:19:d4:bd:26:ff:f4:e7:81:
         91:72:99:aa:b2:c6:bd:f5:4f:9d:1e:b7:db:15:85:69:9a:aa:
         06:56:65:92:7f:04:3e:de:97:56:b5:bc:d2:9f:77:1b:8b:f7:
         2e:75:9e:b7:53:57:50:c8:1b:c1:c4:20:63:99:94:54:00:a7:
         c1:e3:b2:0e:ec:1c:93:b5:fb:dc:d3:2b:0b:f5:45:b4:e2:d8:
         66:fb:16:79:a2:4f:dd:b4:07:23:c0:06:a7:0c:79:99:52:c2:
         bb:1d:b4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:27 2026 by rpki-client