Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File:                     CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier:          LCvmR5LbuCm2jKIFitvrIa81tctIgr1ovwLHTkarhFw=
Subject key identifier:   26:22:10:40:6B:44:C5:82:19:18:19:81:53:3C:C6:60:87:B4:46:84
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer:       /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial:       0884
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number:          087A
Signing time:             Sat 04 Jul 2026 20:52:18 +0000
Manifest this update:     Sat 04 Jul 2026 20:52:18 +0000
Manifest next update:     Sat 11 Jul 2026 20:52:18 +0000
Files and hashes:         1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: pu/uTBe66p7zyLal1hbEjVyf6AHniYNSQeJ3zKwEG2Y=)
                          2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
                          rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180 (0x884)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
        Validity
            Not Before: Jul  4 20:52:18 2026 GMT
            Not After : Jul 11 20:52:18 2026 GMT
        Subject: CN=6a497282-a28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:25:38:37:61:a1:75:29:99:7e:f7:6c:55:
                    e0:7f:d4:75:c0:6a:26:ad:e6:a0:24:e7:6d:e8:6e:
                    b5:5e:8b:26:70:22:f1:68:61:77:b4:2a:de:66:77:
                    de:0f:ab:f9:38:b3:e1:eb:51:2d:3a:6a:37:ed:03:
                    ce:7d:e1:41:cd:a7:cb:4e:f9:71:64:56:f4:cd:e1:
                    f4:4e:64:d5:dd:d3:45:04:af:03:77:32:22:6e:fb:
                    15:16:3b:25:1f:04:05:6b:ac:77:e4:e8:6a:27:af:
                    b4:91:41:40:34:63:01:c7:86:58:ed:0c:44:93:cf:
                    f0:ea:d0:89:56:ea:92:47:8c:12:d2:58:10:47:4e:
                    b9:de:0d:76:94:a4:e1:ea:ed:7e:49:92:cd:7f:53:
                    21:64:a8:f5:7b:5f:b2:6d:46:b8:aa:76:f0:7c:d4:
                    14:8e:ba:fb:b7:b3:ba:8c:51:12:0e:0b:e9:27:46:
                    b6:95:52:26:1c:36:62:6f:83:32:24:31:9d:1b:92:
                    1b:f7:c1:eb:8c:3a:19:db:fa:89:d3:1e:7c:a1:f5:
                    e0:44:c6:91:b4:74:4e:a5:6e:79:ea:42:a1:75:ed:
                    03:cd:c5:f6:72:3f:33:96:6d:00:d0:e8:15:36:fb:
                    02:be:fa:38:48:6a:62:3a:b7:b7:60:a7:1d:a2:8e:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:22:10:40:6B:44:C5:82:19:18:19:81:53:3C:C6:60:87:B4:46:84
            X509v3 Authority Key Identifier:
                keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:e1:a8:d2:55:36:89:e9:ba:fb:0a:0b:69:c7:dd:f5:1a:
         ea:8c:88:ea:8b:95:4e:bc:89:a6:59:35:75:cc:f0:ac:a4:84:
         64:db:08:94:ff:66:16:20:3d:2c:d0:aa:63:eb:28:db:fa:34:
         c6:9a:bf:cc:e1:a3:25:19:87:14:14:16:5c:ee:86:35:eb:f1:
         1e:7c:b3:2a:6c:a7:76:77:34:f7:a0:f3:24:3c:33:49:cb:d5:
         9b:49:1f:92:ef:01:60:bb:ec:e7:a0:a7:3f:d4:24:8a:9a:3b:
         32:a2:0e:bd:07:86:08:e6:a6:41:bb:38:ae:9d:dc:e9:03:40:
         29:9f:c1:b7:74:0c:63:5d:22:f3:1d:33:91:31:d5:27:2a:ce:
         89:26:bf:d7:17:9e:8c:9e:5d:ba:06:63:92:ca:d0:96:31:12:
         b6:86:68:49:c2:16:71:39:8a:b7:81:f4:c8:76:53:39:50:62:
         c4:ea:69:d9:b4:0f:2a:a4:03:86:68:b4:81:ea:e3:87:db:ef:
         5c:31:4b:a4:79:b1:35:4a:df:02:7f:68:1a:9a:f8:3b:f9:a4:
         15:ee:55:64:d2:87:1e:97:32:18:a4:2d:98:ff:ec:b8:d3:a3:
         a3:fd:79:84:6a:93:ab:49:e7:37:3b:e5:46:16:39:13:0c:1c:
         f2:bd:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:46:42 2026 by rpki-client