Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          Sio9GY9IlKe7iFIgPITOJGbTNsWvlNPq4SNiJVLnoE4=
Subject key identifier:   A2:80:25:CD:43:40:52:E9:2D:FE:52:17:AD:07:3E:B4:38:A3:13:E5
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       06BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          06AE
Signing time:             Mon 22 Jun 2026 22:28:42 +0000
Manifest this update:     Mon 22 Jun 2026 22:28:42 +0000
Manifest next update:     Mon 29 Jun 2026 22:28:42 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: eHmDzAtCMmAuY5+DC0r87/pf75dFOoCQQLxaRIJIfy4=)
                          2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 22:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Jun 22 22:28:42 2026 GMT
            Not After : Jun 29 22:28:42 2026 GMT
        Subject: CN=6a39b71a-8831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:4c:52:3a:bc:95:47:f2:90:c4:83:e1:3e:
                    54:04:10:f5:3d:12:bc:e6:91:c8:90:92:ed:64:18:
                    b0:f8:d8:99:28:3c:68:c8:2f:2d:22:c3:85:54:96:
                    46:ab:f8:95:99:11:6e:9a:39:21:37:a4:09:c0:d1:
                    39:37:26:57:db:d5:09:5b:49:03:b1:bb:ce:c4:06:
                    3a:c7:b5:02:a8:61:89:e6:86:40:21:0f:0e:fd:dd:
                    28:3e:97:d3:71:fd:e6:6c:8f:e7:ec:1b:d9:61:04:
                    86:7e:06:79:2c:93:6b:b6:32:10:16:70:1a:41:6b:
                    a1:3a:22:87:d6:40:5e:de:83:67:0a:16:64:03:d9:
                    a9:22:13:81:77:04:35:d6:21:31:f0:49:c8:04:ce:
                    2f:ac:9b:3c:47:b1:90:78:cd:d3:cc:d1:ca:9b:12:
                    17:31:7a:44:d4:e8:69:47:06:8e:b9:04:c6:da:e5:
                    1d:ca:72:6f:51:87:28:d7:e2:a3:f0:fe:59:28:0d:
                    42:e8:28:05:ca:33:34:d8:5b:20:88:52:af:3e:2c:
                    f3:b3:3d:cd:c6:34:ca:77:97:2e:50:63:e8:9a:ca:
                    e2:06:8b:52:67:2f:b4:bc:ba:70:29:ce:a9:da:2c:
                    bb:81:3a:28:68:7e:8e:89:99:15:85:31:59:b7:d5:
                    9c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:80:25:CD:43:40:52:E9:2D:FE:52:17:AD:07:3E:B4:38:A3:13:E5
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:57:a3:38:44:12:43:86:0c:99:fe:e1:d4:c2:19:48:0f:ae:
         1d:ea:c4:bf:2b:6d:8e:c2:13:62:0e:a1:08:4b:c7:d1:6c:93:
         a9:55:bb:09:d7:6f:4f:57:67:40:70:f7:48:46:4f:bc:04:e5:
         01:1b:26:51:71:fb:bd:da:65:c5:23:19:88:23:74:91:b5:7d:
         70:43:af:db:b9:5c:1b:4f:17:5f:b2:74:7e:80:5e:10:71:1c:
         33:39:51:09:71:a3:8a:d6:08:e5:1d:29:c7:7b:db:ec:39:05:
         e0:56:9e:28:18:f3:38:8a:ca:d9:57:6d:34:29:f7:ad:d5:92:
         be:2e:23:fa:a5:a6:34:34:9f:45:0b:22:67:1b:2a:04:c4:fe:
         0f:57:00:1d:c4:22:b9:de:4e:28:e6:f6:35:c9:d7:4c:08:74:
         80:3f:eb:20:a0:fa:14:b8:fc:94:91:75:41:7a:74:c4:48:5c:
         c1:9c:d2:6f:41:70:03:e8:96:94:03:80:75:35:26:9f:9f:b7:
         b8:f1:a4:e2:be:b8:95:0c:72:0e:6b:da:59:0d:8a:4c:06:03:
         84:2d:fe:e8:b0:7e:24:2b:c6:f6:00:ed:84:28:c5:92:28:7e:
         c0:f0:d9:f1:fa:72:28:fb:93:19:0a:a6:ba:20:9f:2c:bb:a4:
         98:40:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:30 2026 by rpki-client