Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File:                     ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier:          fs8xPTwzGcZqAKwkcc46XJnswhM1Qo6twHPBG/LzT5c=
Subject key identifier:   77:38:DC:38:F6:62:0B:E1:F9:69:B5:B6:13:22:D2:2B:4E:5C:5C:48
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       25E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number:          25BD
Signing time:             Sun 26 Jul 2026 15:48:53 +0000
Manifest this update:     Sun 26 Jul 2026 15:48:52 +0000
Manifest next update:     Sun 02 Aug 2026 15:48:52 +0000
Files and hashes:         1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: uLmALyHw8kpScIcfvp6YiOPc/XxBRyiEf0qIiacXOOI=)
                          2: DD1070A286EE11F19E006003A7EE528E.roa (hash: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M=)
                          3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: wmIlAIzm5QzVVCvvxLGcZrrzi/YZeMwXo33dKH+RNko=)
                          4: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: Oip4/ft1E//qtYhxFVUiNdrRQdmZE92k2cuDNa4P3q0=)
                          5: 6690D57486FE11F194514C90ABEE528E.roa (hash: srPJd4xUL6/Vf1zKO1/lDgBKkQ8LR7aRoLfFW6QTLcE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 15:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9700 (0x25e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Jul 26 15:48:52 2026 GMT
            Not After : Aug  2 15:48:52 2026 GMT
        Subject: CN=6a662c65-bb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:38:a5:eb:ea:ac:64:f6:3e:b0:8d:37:46:
                    27:e0:03:d0:4b:29:7f:21:be:af:97:7e:66:52:a5:
                    95:ad:35:6f:39:40:c3:9c:f0:e7:94:3e:30:9c:06:
                    d8:56:ad:1f:cf:0c:21:ad:03:c8:73:f7:dd:c6:65:
                    b2:1b:f9:76:d1:72:de:3c:f3:7a:57:ea:44:c1:fc:
                    e9:01:63:10:3b:81:02:96:9a:42:00:dd:8d:ee:22:
                    7c:ee:9d:83:89:40:a3:09:60:71:c2:4c:0e:8d:73:
                    de:d9:92:da:f3:0d:65:79:fa:dd:42:cf:a6:99:18:
                    d7:9c:2c:ea:3c:cf:0d:26:bc:24:10:56:98:9d:a8:
                    44:8e:06:d4:3b:3c:7d:eb:ab:3f:30:ee:07:ee:20:
                    6e:4b:df:e3:1c:3b:f4:55:b2:27:68:06:b6:7a:81:
                    ca:8c:c4:01:b3:f5:e7:b0:53:da:c9:ef:3f:66:bc:
                    5c:4e:15:2d:dc:eb:28:0e:36:75:9c:81:fc:19:3a:
                    af:61:da:12:ac:11:a2:42:cf:48:03:6b:80:ae:6b:
                    8f:cf:60:f0:9b:aa:e3:e0:5a:d6:0f:8a:fa:fd:20:
                    8b:25:3a:4a:25:86:5d:d4:7a:0b:2e:08:fa:08:43:
                    4d:ca:f8:ff:a8:c3:ee:f3:34:eb:1a:30:72:0f:cc:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:DC:38:F6:62:0B:E1:F9:69:B5:B6:13:22:D2:2B:4E:5C:5C:48
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:df:03:26:08:53:51:00:87:17:97:cd:9a:af:23:61:ff:
         d2:62:11:e0:df:0a:50:84:ee:5a:b9:86:25:62:66:dd:2c:74:
         ff:a7:6d:30:65:41:4d:17:a1:4c:4d:f8:80:f5:34:a4:53:7d:
         b2:fd:f8:17:9d:2b:b2:6e:cd:fb:94:37:e0:1e:bc:34:13:a6:
         06:48:2b:44:7d:9c:e6:cc:44:b5:b5:74:61:75:95:88:e4:c6:
         85:1f:10:38:53:c6:00:2b:3a:0c:4d:7f:b9:39:5a:91:63:e3:
         47:9b:e0:bf:c4:cb:32:33:79:3b:1b:3f:41:ea:e9:4d:2b:34:
         de:e7:42:6c:0d:f3:c3:e2:dd:f0:3f:0a:06:87:86:fd:f4:a3:
         e0:e1:33:0f:8d:e3:bc:48:66:4d:b4:a4:f2:9a:40:ea:89:30:
         d1:8b:5a:35:7c:35:ab:ae:be:e6:d1:d3:18:2d:f0:fd:15:72:
         17:4a:5f:2b:88:e4:aa:a3:bd:1a:d3:5e:b8:34:b2:bc:be:f5:
         9c:d3:96:bf:77:f4:5b:42:91:d0:f8:5b:8d:05:24:b6:56:da:
         85:c8:08:b9:e2:15:91:c0:3a:06:89:06:a8:3e:54:d7:3d:63:
         48:34:c3:33:4c:f9:93:b2:fc:83:8f:ec:9c:27:75:f9:3f:8e:
         ea:69:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:05:36 2026 by rpki-client