Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          +UtWf4Nya8MA44e+UBXIg2VaSLLiIgGlCS+X27HGkYU=
Subject key identifier:   81:DB:F9:19:02:69:E5:0A:F1:94:C2:58:BB:E1:E9:1F:F0:A9:2E:CD
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       01C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          01AA
Signing time:             Mon 03 Aug 2026 05:26:40 +0000
Manifest this update:     Mon 03 Aug 2026 05:26:39 +0000
Manifest next update:     Mon 10 Aug 2026 05:26:39 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: stbwtIhtWQaWt1qhhtCMX/6C1E6Kn+cNdnnhFKb1SXc=)
                          2: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=)
                          3: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=)
                          4: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=)
                          5: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: x10D9pADYHToKbPS6t/synxTqCGYuiAeyckivfclbFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Aug 2026 05:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Aug  3 05:26:39 2026 GMT
            Not After : Aug 10 05:26:39 2026 GMT
        Subject: CN=6a702690-2e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:bc:46:5c:da:86:42:9a:74:1d:4a:30:10:
                    57:ff:13:bd:32:8c:21:da:f1:62:ec:c5:89:90:db:
                    fb:84:c6:30:5b:d5:a6:19:40:3d:46:a1:82:22:d8:
                    f4:05:11:43:8b:73:e6:a2:33:2b:e7:fb:6e:ee:50:
                    4e:60:57:8e:59:83:75:7f:2a:7c:26:fa:36:71:6f:
                    41:ed:c3:e1:3a:ca:16:15:ab:d9:23:76:75:d3:f3:
                    bb:c7:01:25:32:73:28:bc:f8:61:1f:c3:93:5d:7e:
                    e4:00:5e:31:d9:b8:b1:d1:31:c3:3a:2f:f7:ad:78:
                    54:88:19:bb:09:94:39:1c:f5:f3:4d:dd:6f:73:bd:
                    eb:f3:ea:0f:ea:61:c0:71:13:a3:7e:2d:5b:23:fa:
                    65:b7:c5:34:f0:b5:df:55:09:60:5c:f8:30:cc:8f:
                    c3:fd:89:e3:43:40:f9:7c:ac:57:1a:c4:3d:f0:1e:
                    ea:b6:25:43:cc:e6:76:4d:94:05:9c:01:20:dd:7e:
                    01:9e:32:40:74:26:3d:97:d9:fc:cf:1d:25:49:04:
                    0d:0b:d4:37:62:74:f6:05:9a:90:48:18:b1:ff:e4:
                    93:d9:42:dc:4e:87:41:4c:95:f0:0b:64:8c:82:a8:
                    98:1f:de:1f:24:68:e2:e4:62:ff:bd:d8:37:b8:2d:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DB:F9:19:02:69:E5:0A:F1:94:C2:58:BB:E1:E9:1F:F0:A9:2E:CD
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:58:6a:e2:e1:91:5b:fc:e8:74:2b:27:82:61:5f:2a:a3:bd:
         9c:5b:be:17:96:87:5c:ab:4c:a3:79:2b:8d:2a:22:c9:74:3b:
         64:77:36:12:a6:93:87:4f:cc:1a:b5:3c:24:cf:59:bd:a8:18:
         41:cf:d8:dc:0b:4f:da:fa:89:1b:57:aa:29:50:c4:67:1d:d6:
         27:71:a4:b5:9c:2d:59:92:87:62:d3:bb:a2:6c:a6:b4:06:41:
         ee:3b:c0:37:fd:3c:a5:8e:1a:49:43:85:33:d6:e8:7f:ad:7f:
         97:68:5f:12:5f:a6:0e:6c:59:ab:d9:30:7e:78:6d:32:a4:e1:
         a5:e3:fb:0e:77:99:89:66:65:db:c3:57:90:38:19:14:10:ad:
         3d:e0:ef:81:c0:71:bc:1f:89:02:4a:e0:05:ac:cd:5d:ca:23:
         b8:53:1e:00:1e:1b:6b:27:34:64:cf:40:79:6b:5d:d2:6c:b2:
         68:f4:17:a2:ba:5b:b6:b2:58:c0:0b:78:3b:85:35:e1:e3:a1:
         37:cb:4d:50:6a:98:ed:df:ad:3b:5b:88:d9:da:9b:c6:c0:bd:
         95:e4:a3:ef:e2:35:4a:af:c1:63:76:14:c5:e5:29:da:98:2b:
         36:24:97:b7:1b:09:45:dd:65:cf:3f:54:c7:55:8a:fb:d5:1f:
         b8:fa:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:28:25 2026 by rpki-client