Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
File:                     y-PSoWWxlLlY7sO2qURXdyo6CSo.mft (raw, json)
Hash identifier:          Ga2RvxnL11kuzOHtonX2SFhAESQNnvDG67qIDExQZvA=
Subject key identifier:   BF:F8:5E:FC:91:A0:BA:6B:E5:C9:9E:95:93:67:5E:20:B8:BC:E7:7C
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Certificate issuer:       /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial:       0913
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
Manifest number:          08F7
Signing time:             Tue 04 Aug 2026 20:37:36 +0000
Manifest this update:     Tue 04 Aug 2026 20:37:35 +0000
Manifest next update:     Tue 11 Aug 2026 20:37:35 +0000
Files and hashes:         1: y-PSoWWxlLlY7sO2qURXdyo6CSo.crl (hash: zVaCDsV3rR6nVGU2By8tQV9rdVEG3LkK8CCIDG5gGis=)
                          2: 4B3AC7DC5FC811ED869A6956C4F9AE02.roa (hash: gwFMK8dXQ0BUy50EitJsxHltkOumkaciXIm9wu0O67s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
                          rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 20:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
        Validity
            Not Before: Aug  4 20:37:35 2026 GMT
            Not After : Aug 11 20:37:35 2026 GMT
        Subject: CN=6a724d90-0360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:29:58:cb:75:67:75:db:36:60:2f:e1:1c:
                    7b:60:a8:af:ad:2a:50:bc:d5:29:00:83:36:6b:eb:
                    ff:a9:41:2c:71:fb:81:d9:9d:8e:a3:f4:c5:d2:4c:
                    f0:9e:af:5b:c1:0a:19:68:54:5c:94:a2:7c:d1:dd:
                    36:60:d0:0c:4c:13:ec:5b:f7:63:32:06:0f:a4:c0:
                    80:fc:c2:f1:78:3a:cd:69:29:4b:74:6e:aa:31:7e:
                    25:13:94:77:e6:cf:bc:c9:ad:72:bb:95:fb:63:8a:
                    27:10:ef:ee:41:87:a1:27:fa:36:81:af:50:3f:6e:
                    cb:1a:da:ac:75:7b:13:33:e1:c2:dd:0a:58:75:7a:
                    d1:3c:b5:d7:1b:bb:dd:ab:c0:76:56:91:fe:3c:db:
                    1c:c2:19:11:7d:85:31:d0:8e:c7:50:b4:8f:e3:7e:
                    da:45:48:46:c1:3f:9e:2f:6e:ec:b1:b0:bd:4f:31:
                    16:a7:9e:af:c8:ca:4e:7f:ce:b0:ec:9d:c0:f6:3f:
                    3f:3f:f4:7e:4f:fa:17:25:3a:dd:aa:8a:cd:57:e0:
                    1f:5d:f7:59:7d:e3:33:4b:0c:b8:54:7f:d7:5e:f2:
                    29:99:c0:6e:b5:ec:c6:e3:e3:e6:cf:17:ba:40:a5:
                    b9:84:14:d5:a5:ce:da:16:68:cf:a1:ae:2e:9f:c6:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F8:5E:FC:91:A0:BA:6B:E5:C9:9E:95:93:67:5E:20:B8:BC:E7:7C
            X509v3 Authority Key Identifier:
                keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f2:b5:eb:72:d3:0e:8c:11:2d:31:4b:a9:39:e1:f8:b8:1a:
         91:93:ff:ff:4f:92:19:1b:f5:71:82:53:87:ac:9a:c3:11:1f:
         bc:0a:68:1b:3c:4b:74:b9:d8:35:92:fb:08:43:1b:74:36:c8:
         ed:6e:d1:c1:4a:22:63:bd:ff:32:45:b5:b3:0e:f9:95:9b:18:
         b3:1b:d0:fb:3f:7f:11:bf:3c:08:7b:f5:7d:25:fe:e1:98:81:
         5b:83:d8:24:8f:d7:92:13:55:62:62:ce:e3:c2:9a:5e:b8:8c:
         25:50:16:ff:5c:0c:66:c1:65:9a:c5:b6:f5:db:52:90:74:07:
         52:37:e8:19:3d:85:89:fe:44:bd:e3:c6:38:8c:6c:b5:5f:6a:
         aa:14:93:75:a3:f2:ce:d3:51:cb:e0:9e:f6:31:56:01:d6:62:
         a9:85:0b:60:50:d6:dc:42:74:56:28:03:00:20:69:bd:04:ab:
         8f:1c:7f:1e:89:38:0c:1a:4f:1d:29:cb:f2:12:46:61:4d:98:
         55:7d:a1:f5:56:b2:6f:f8:7d:67:68:ba:8f:44:0f:8c:43:a5:
         44:36:6f:7a:0f:b9:12:ea:e9:f3:8c:74:da:28:f3:b4:02:15:
         1d:4a:81:7e:3f:44:2b:a7:b5:51:e9:bc:67:33:cd:2e:a7:1f:
         c3:8b:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 06:32:33 2026 by rpki-client