Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          HkFoZT0BrMbeRBew1mijOHcKhctod6YLXiZkw0irYcg=
Subject key identifier:   B1:4A:F3:AB:AF:F2:74:2E:02:9A:31:46:B0:09:AD:B4:2E:93:87:44
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       02B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          02AF
Signing time:             Mon 27 Jul 2026 02:48:07 +0000
Manifest this update:     Mon 27 Jul 2026 02:48:07 +0000
Manifest next update:     Mon 03 Aug 2026 02:48:07 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: fkLbn2cDouy/rjyKGgveJZ2bLxe6DXpBiBNjcHR9mYk=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:48:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Jul 27 02:48:07 2026 GMT
            Not After : Aug  3 02:48:07 2026 GMT
        Subject: CN=6a66c6e7-ff41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:1d:91:72:42:50:78:75:fe:e7:d7:c6:7c:
                    4a:16:59:78:8c:7e:67:9c:15:f7:f7:af:11:1c:6c:
                    2c:dd:b8:38:e0:a3:9c:49:9a:ea:6d:47:fa:39:c4:
                    69:f4:62:3d:5c:52:a9:23:93:b3:9e:fd:e7:89:b9:
                    e0:79:e8:5c:e6:eb:ee:31:9d:c4:20:da:8b:f9:84:
                    45:68:45:20:58:a2:b0:41:be:3c:14:71:e8:0e:0f:
                    8c:22:4b:79:bd:ba:f5:a5:cc:ba:cf:2f:53:2b:61:
                    bf:33:77:18:b7:1a:95:39:ef:73:37:86:75:1e:be:
                    4b:40:0a:f6:5a:cd:7e:35:90:0f:2d:37:72:f1:21:
                    1d:ef:00:de:1b:fe:64:32:ad:7f:29:bb:fd:85:c5:
                    b2:36:e8:1a:21:15:00:1f:99:25:1f:4e:9e:ce:14:
                    43:76:5a:28:9b:66:37:dd:1e:16:cd:7b:d1:70:12:
                    22:32:56:26:ad:d4:5a:56:57:02:d8:6e:40:73:39:
                    13:dd:5e:aa:68:48:7f:20:24:68:83:be:42:38:9b:
                    83:99:61:25:e0:d8:c1:70:08:2b:b5:c6:03:3f:dd:
                    4f:87:94:f6:5b:b0:c6:1a:53:74:f2:f4:69:25:e8:
                    80:b7:d7:5a:15:8d:7b:49:48:bc:50:67:8c:54:64:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:F3:AB:AF:F2:74:2E:02:9A:31:46:B0:09:AD:B4:2E:93:87:44
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:a1:e8:23:a3:52:be:91:de:ad:b8:fe:44:23:0e:c6:8d:
         0a:aa:cf:ec:e2:23:1d:4d:bc:7f:8b:ed:7f:30:47:ec:7b:e9:
         92:76:d5:90:4e:ba:73:51:7b:6c:81:a4:15:7b:51:5a:be:1b:
         9b:21:12:9a:f0:bb:00:de:c4:4e:b5:11:85:d3:2e:97:b1:9e:
         7e:df:a8:c8:58:fc:d5:76:f3:8b:a4:da:05:77:8c:40:9a:56:
         1a:7d:ad:56:78:6d:d4:24:ec:63:a4:a5:92:75:df:6e:9b:4b:
         dc:b2:92:6b:12:d6:da:94:03:1a:85:11:93:75:8a:c0:fd:4f:
         c7:13:ab:6f:41:fc:0a:79:df:a6:d4:bb:a9:be:dc:18:46:a9:
         b5:8a:ad:17:46:53:e7:ee:da:a1:f7:ce:a7:ae:d1:94:0e:20:
         47:89:d7:84:ed:61:92:05:52:d0:a8:33:0a:71:7a:1d:43:40:
         24:fa:13:83:54:7f:0b:76:4d:40:20:1f:a1:9b:04:b6:eb:d4:
         71:cf:a5:54:53:b7:80:36:71:12:12:d0:13:0a:85:56:31:89:
         d5:5e:d7:55:ea:9a:7d:c8:b1:79:68:fe:62:66:89:ce:01:a0:
         90:a7:2f:1f:2b:9a:85:22:26:5a:c3:93:bf:58:82:3e:9b:8b:
         e7:ff:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:20 2026 by rpki-client