Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
File:                     zYmoJo6xHjMPvUTASHINEyXFpgs.mft (raw, json)
Hash identifier:          R/0wDSNOL8AUiLhMsNF7BdDXhaJuAjowugxiqNMfLKU=
Subject key identifier:   1A:7C:D8:6F:64:DB:76:60:FA:B2:66:5F:36:A8:81:B1:3D:72:67:07
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
Manifest number:          01F4
Signing time:             Fri 17 Jul 2026 04:20:10 +0000
Manifest this update:     Fri 17 Jul 2026 04:20:09 +0000
Manifest next update:     Fri 24 Jul 2026 04:20:09 +0000
Files and hashes:         1: zYmoJo6xHjMPvUTASHINEyXFpgs.crl (hash: lcXAmLifqViOJ+GHg3aLCYu6iMHcTBHTqTz7w3mt3Vs=)
                          2: EEF965C0989011EE982B5B23C4F9AE02.roa (hash: KXFtRkkFX0jxsfltHXamlZ+jG+IhfgzkLv0dS+9a8To=)
                          3: 0DFFB0D2989111EEB7938523C4F9AE02.roa (hash: ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jul 17 04:20:09 2026 GMT
            Not After : Jul 24 04:20:09 2026 GMT
        Subject: CN=6a59ad7a-7aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:24:11:5e:cd:86:7f:81:8a:81:11:07:f9:
                    98:dd:78:56:0d:3c:6b:d4:7c:e1:a1:cc:8a:a1:e8:
                    50:b5:f3:28:d3:1c:5b:ad:d5:4c:c3:d7:09:c5:06:
                    f4:75:4d:a4:46:56:0b:a6:a1:24:2e:46:fb:b8:9e:
                    e3:43:65:7a:03:8e:1b:56:df:92:c1:f8:47:4d:93:
                    63:0b:16:0a:a4:c3:2e:4f:bf:e7:bf:ef:17:c8:bb:
                    76:82:ba:c7:36:02:34:bd:40:10:9d:13:31:b3:8e:
                    f8:64:e2:7f:34:e1:6b:d6:04:71:16:83:09:64:c5:
                    c7:0e:2f:f2:61:39:aa:9b:39:2e:19:bd:ec:ec:81:
                    3c:c3:c0:c1:ab:09:fc:ed:57:9b:27:32:fa:5e:03:
                    f0:b6:26:6d:8f:5d:0b:5f:8a:2b:8f:ba:2b:9c:8c:
                    42:cd:d7:75:23:79:41:09:19:f5:fa:f2:20:10:e4:
                    2f:48:3c:9b:1a:0d:a0:c9:62:64:1a:77:a0:a0:38:
                    ed:f9:2f:9a:41:2a:d0:ed:85:ba:90:3f:b4:13:a6:
                    17:54:8e:83:f9:2f:29:ba:fa:8d:7b:e4:c0:6b:c5:
                    8c:be:e5:3f:56:9a:55:59:f6:56:22:5b:73:17:11:
                    b4:93:b5:b8:2b:99:c2:98:9a:f6:5a:de:2e:8f:23:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7C:D8:6F:64:DB:76:60:FA:B2:66:5F:36:A8:81:B1:3D:72:67:07
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3f:dc:b0:07:de:c4:79:26:e7:7a:b5:e4:28:c2:0b:20:56:
         c3:9c:7f:ae:bf:bc:5f:fe:d5:12:ab:07:e0:c0:06:6b:e6:ea:
         33:a7:7e:b3:6d:07:80:e8:bf:81:66:9d:36:07:c4:56:83:c8:
         df:14:ec:fa:24:24:b8:8c:6b:74:5d:b6:24:94:52:9c:6e:e5:
         d5:79:6d:2b:1e:13:1a:9d:f0:d0:ed:ef:cf:47:8a:f6:78:10:
         0b:07:bb:87:4a:ac:80:5b:b9:c7:cc:47:94:cb:3c:b0:2d:ee:
         70:c1:d5:12:32:53:c1:5b:45:77:b5:c8:e4:b4:aa:67:ce:88:
         62:37:0d:98:8b:2b:ac:c4:3c:1e:38:bf:4d:86:e6:7d:05:52:
         60:c7:71:47:14:25:9b:87:ee:84:ad:f3:ad:fc:94:8f:48:58:
         14:52:13:cf:ae:d0:f5:71:02:b0:e3:09:49:b9:64:0d:42:41:
         90:3f:65:81:fc:9d:68:21:84:7c:ed:cf:5e:8c:77:c3:ef:67:
         52:3c:79:bf:b5:7d:b8:75:80:ff:8e:2b:3a:41:da:fc:51:cb:
         da:ff:b4:a2:9c:b7:2f:a1:09:19:7a:df:16:37:ee:2b:18:d6:
         e3:2c:55:d4:0d:45:5e:9a:bb:c5:db:a4:20:36:a1:f1:35:ac:
         47:c1:8c:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQyNjExMTAvBgNVBAUTKENEODlBODI2OEVCMTFFMzMwRkJENDRDMDQ4NzIwRDEz
MjVDNUE2MEIwHhcNMjYwNzE3MDQyMDA5WhcNMjYwNzI0MDQyMDA5WjAYMRYwFAYD
VQQDEw02YTU5YWQ3YS03YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBckEV7Nhn+BioERB/mY3XhWDTxr1HzhocyKoehQtfMo0xxbrdVMw9cJxQb0
dU2kRlYLpqEkLkb7uJ7jQ2V6A44bVt+SwfhHTZNjCxYKpMMuT7/nv+8XyLt2grrH
NgI0vUAQnRMxs474ZOJ/NOFr1gRxFoMJZMXHDi/yYTmqmzkuGb3s7IE8w8DBqwn8
7VebJzL6XgPwtiZtj10LX4orj7ornIxCzdd1I3lBCRn1+vIgEOQvSDybGg2gyWJk
GnegoDjt+S+aQSrQ7YW6kD+0E6YXVI6D+S8puvqNe+TAa8WMvuU/VppVWfZWIltz
FxG0k7W4K5nCmJr2Wt4ujyN8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBp82G9k
23Zg+rJmXzaogbE9cmcHMB8GA1UdIwQYMBaAFM2JqCaOsR4zD71EwEhyDRMlxaYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDI2MS9EMDY1QkM0Qzkz
NDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhqTVB2VVRBU0hJTkV5WEZw
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZbW9KbzZ4SGpNUHZVVEFTSElORXlYRnBncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDI2MS9EMDY1QkM0QzkzNDIxMUVFQThDMTU0NzhDNEY5QUUwMi96WW1vSm82eEhq
TVB2VVRBU0hJTkV5WEZwZ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEART/csAfexHkm53q15CjCCyBWw5x/rr+8X/7VEqsH4MAGa+bqM6d+s20HgOi/
gWadNgfEVoPI3xTs+iQkuIxrdF22JJRSnG7l1XltKx4TGp3w0O3vz0eK9ngQCwe7
h0qsgFu5x8xHlMs8sC3ucMHVEjJTwVtFd7XI5LSqZ86IYjcNmIsrrMQ8Hji/TYbm
fQVSYMdxRxQlm4fuhK3zrfyUj0hYFFITz67Q9XECsOMJSblkDUJBkD9lgfydaCGE
fO3PXox3w+9nUjx5v7V9uHWA/44rOkHa/FHL2v+0opy3L6EJGXrfFjfuKxjW4yxV
1A1FXpq7xdukIDah8TWsR8GMGg==
-----END CERTIFICATE-----
Generated at Sat Jul 18 08:16:41 2026 by rpki-client