Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          oxzJ4K/Zm+Z5T4WZOrs0hCO5oIrIJL4AZQEwvy0idGQ=
Subject key identifier:   B7:36:CE:0C:55:C8:A5:0B:FE:81:3F:8B:3F:8B:CB:CF:A2:4F:71:2D
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          0236
Signing time:             Sun 05 Jul 2026 03:08:45 +0000
Manifest this update:     Sun 05 Jul 2026 03:08:45 +0000
Manifest next update:     Sun 12 Jul 2026 03:08:45 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: 2godH06a6lJKZJcQDQ+Stmd8W4LwGAlNewi8/dNxEgo=)
                          2: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NpABsuTNt3Of0zFwuT3M1C2R99zLqBty3uuQSGUzpfg=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: kgK3NjgQxpDJ05PetKW0f4eD4WtSWH7QBEKwm+5D1qk=)
                          4: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: tRTg+EzOsPEBd/CyA9yv6uVUIfA6399PeHgHdLPDFdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 03:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Jul  5 03:08:45 2026 GMT
            Not After : Jul 12 03:08:45 2026 GMT
        Subject: CN=6a49cabd-9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:5a:4c:89:6d:0c:08:e6:f6:fe:59:24:30:
                    ef:63:c1:47:d3:d1:d0:0f:c4:29:30:90:ce:6a:cb:
                    0e:ec:13:0c:a9:00:27:88:8c:cd:dc:38:f7:40:a9:
                    6d:fb:77:42:45:b5:33:d2:ca:07:f9:84:dd:d4:16:
                    fc:1f:42:f1:a3:ec:2e:ae:16:79:25:1c:08:93:89:
                    3f:bc:26:1b:a6:11:b4:41:84:db:c3:16:64:70:4f:
                    30:a4:d2:25:9c:26:52:2e:e5:7b:98:46:f1:c6:5b:
                    6f:8c:d3:39:9d:45:e9:18:9b:45:82:59:8a:37:75:
                    04:e3:70:74:27:6a:f1:e1:28:de:c9:11:59:1d:d4:
                    3f:23:eb:56:4c:30:71:21:a8:bf:36:7f:c5:96:da:
                    bb:7d:29:06:2e:69:85:a8:d1:68:fd:95:2b:33:41:
                    df:f2:0d:3a:f1:de:45:15:33:c0:1e:d3:43:d7:5d:
                    16:d1:1c:b6:ff:94:13:78:7b:07:0a:55:24:0e:e7:
                    e0:54:34:ee:f9:7b:c7:09:ca:8c:5e:9d:6c:9d:64:
                    b1:31:41:f1:04:65:da:d5:24:6b:c0:4c:14:bb:39:
                    de:ff:14:d5:1f:d9:d7:da:77:85:ef:a1:2a:98:05:
                    eb:27:38:ef:93:10:ed:7a:e0:de:84:7a:5f:db:0d:
                    8d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:CE:0C:55:C8:A5:0B:FE:81:3F:8B:3F:8B:CB:CF:A2:4F:71:2D
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:48:23:4f:cd:1f:94:8e:34:d4:4f:bb:6a:78:af:9f:ef:
         f7:cc:f6:54:eb:bc:59:f4:ad:d9:38:4a:24:df:62:a9:c4:bf:
         31:17:cd:f4:3d:84:8f:d3:b9:d8:70:68:21:1e:70:17:7a:84:
         7b:66:7f:f0:2c:9d:0e:e1:36:67:5a:14:f8:e5:82:bb:9c:17:
         8e:20:27:bf:cc:05:01:f7:0e:a5:eb:20:b4:d5:98:8e:31:20:
         42:39:e0:c2:c9:18:fe:58:66:7c:81:33:c0:51:77:05:d9:32:
         fa:d7:d7:6c:d1:55:33:e8:ce:39:bc:13:87:ef:12:88:1d:5e:
         8c:b8:d1:89:89:b5:a4:f9:9e:b0:61:f0:3c:70:c7:14:8c:85:
         38:6a:13:c5:b6:07:a8:47:80:e8:6c:c9:11:47:a3:bf:f4:28:
         f2:cd:d4:47:c7:74:80:82:08:76:6c:46:06:24:0e:75:51:e5:
         09:e5:e1:c7:af:7a:be:44:d6:a6:7b:c5:fa:50:e6:5b:5c:f1:
         55:45:e7:f6:04:bb:45:ad:cb:ef:00:09:63:c0:ae:3c:b1:ee:
         9e:71:fb:14:9c:1e:9a:27:03:34:ef:8d:e4:fd:d6:59:5e:3d:
         29:8e:e7:a2:e2:1b:6b:a8:bc:61:b1:a7:e0:23:9f:3d:da:d5:
         7e:89:56:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:22:20 2026 by rpki-client