Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          NzqrjyMgKzarX4OVK5UlhUkIK8c46FdQW35miFmrSi8=
Subject key identifier:   15:F9:E3:94:CB:C3:AA:00:9D:46:22:DF:A3:28:2A:A2:B2:8A:58:11
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0A8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          0A87
Signing time:             Thu 02 Jul 2026 19:44:48 +0000
Manifest this update:     Thu 02 Jul 2026 19:44:47 +0000
Manifest next update:     Thu 09 Jul 2026 19:44:47 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: LPGNjke4+kcWValboqFnRc4uvm2zWjHex0bINaXMrqk=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: gzbpBLHjuyIbIn1f9T7JlFlrPpRUrvtd4lxp7A9hka0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 19:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2703 (0xa8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Jul  2 19:44:47 2026 GMT
            Not After : Jul  9 19:44:47 2026 GMT
        Subject: CN=6a46bfb0-c3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:b5:2a:73:36:c6:ea:23:ac:d8:3a:df:fb:
                    ea:ff:45:6b:d2:04:81:63:00:8e:58:f7:ff:07:c2:
                    65:92:3a:d5:fd:72:2a:77:98:b4:e1:53:6b:f2:4c:
                    73:5e:50:f7:26:97:86:0a:51:53:7c:4c:62:fc:34:
                    21:6a:6d:ee:c5:56:a7:8b:ab:5f:5e:08:33:8e:24:
                    a3:78:d3:ee:6a:38:9c:53:56:41:d0:c2:7f:33:f5:
                    77:79:35:ff:fe:02:6f:c4:e1:94:e4:18:eb:84:95:
                    b8:d4:ec:bf:ad:52:d1:37:8d:f8:70:a2:63:fe:09:
                    be:9b:48:47:43:4e:12:94:50:fe:74:7a:4e:2c:02:
                    35:bf:44:0f:c0:b6:7d:34:36:51:58:f8:db:90:16:
                    9c:48:d7:8e:fa:8b:df:83:c2:f9:98:71:da:84:df:
                    06:4e:01:86:f3:c5:b7:ff:3d:9d:0e:e0:af:29:59:
                    5d:dd:fa:2d:f0:6c:6b:2f:31:f4:e6:95:d4:1d:8e:
                    b9:bc:7d:70:43:d5:78:ca:23:4a:15:b4:29:01:69:
                    80:ac:b5:85:0b:ca:47:64:d3:25:cd:17:ce:d5:26:
                    97:18:1d:c5:ee:98:1f:22:c0:41:77:db:c1:09:10:
                    1b:2c:27:62:fd:e7:9d:b3:39:80:5b:c6:14:ad:fc:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:E3:94:CB:C3:AA:00:9D:46:22:DF:A3:28:2A:A2:B2:8A:58:11
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:87:ef:10:ef:47:c7:ee:72:22:e9:a1:af:4e:c1:1e:9f:
         c8:8a:f2:14:b9:ac:cc:ce:38:a1:05:79:75:bc:f8:90:14:1e:
         a2:54:40:34:28:65:fd:c7:1e:64:01:69:d0:0b:f9:b4:d9:f4:
         ea:24:e4:15:de:74:4f:df:f4:1e:d9:a9:25:e7:f2:b7:75:6e:
         63:25:db:13:c4:3a:3b:07:f7:d5:3b:95:39:f5:57:8f:e7:c0:
         6c:6d:f1:10:ea:21:be:bd:7e:1b:e7:14:78:a2:30:89:f2:48:
         c1:91:fa:38:5f:0a:54:63:3e:ef:89:c4:57:31:f4:df:cc:93:
         bd:04:a1:b8:65:e9:2c:ce:0f:0a:a0:a3:bd:a2:d5:61:c6:8c:
         20:6a:40:73:e5:b2:ec:dc:6c:74:9c:00:66:b2:b2:b5:fa:8b:
         bb:8d:de:62:80:0d:be:7e:19:99:4e:3f:17:c2:1f:52:3a:47:
         71:7c:92:03:ef:96:af:5f:e6:f6:89:5b:aa:a9:1c:40:71:b1:
         f8:b6:b0:2f:8f:3a:23:78:22:a9:41:98:39:f0:69:d3:a3:f5:
         cb:72:2b:f8:4d:5c:c9:d8:ca:bb:6c:82:21:7f:a4:a7:45:65:
         f4:74:b0:63:67:60:d1:a3:d1:92:ae:40:d5:d1:b2:02:88:c6:
         f0:3e:6d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:49:14 2026 by rpki-client