Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
File:                     pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft (raw, json)
Hash identifier:          K9Ws/QZIsrUidE1AuWmKOcXfZMcAWJayB1W+moQ3Azk=
Subject key identifier:   57:1A:43:0C:4C:86:C0:88:BA:07:32:83:62:DD:84:3F:31:79:F3:90
Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Certificate issuer:       /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
Manifest number:          04A3
Signing time:             Fri 17 Jul 2026 00:32:50 +0000
Manifest this update:     Fri 17 Jul 2026 00:32:49 +0000
Manifest next update:     Fri 24 Jul 2026 00:32:49 +0000
Files and hashes:         1: pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl (hash: JpwkDYFEhTVlJt29cexZTwIhd0okv2Sf/edvTTcDRcI=)
                          2: 1DD9F6A83F0411EDB1462810C4F9AE02.roa (hash: CmwyNOMcxqbsaQQe+naR5AW1qBeX6twl6NXVPLR2NpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
                          rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 00:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
        Validity
            Not Before: Jul 17 00:32:49 2026 GMT
            Not After : Jul 24 00:32:49 2026 GMT
        Subject: CN=6a597832-2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:06:77:6a:97:b4:5a:d2:98:89:29:14:8c:
                    74:f7:51:fe:ba:45:93:c5:19:ed:50:ee:0a:e7:3f:
                    dc:b7:4e:0d:30:8d:0d:9b:42:30:fe:20:8e:3a:29:
                    bd:f4:d0:46:67:96:6f:87:65:04:f0:db:ab:2d:42:
                    61:f0:80:e4:43:d9:c3:86:33:ff:62:80:36:2d:ba:
                    26:1c:58:be:14:f9:fe:e5:25:b9:5d:b1:17:00:18:
                    59:6b:95:8b:c8:ee:1b:5a:e6:8f:42:fd:df:18:2c:
                    d8:fb:d0:9b:dd:7f:da:ae:71:24:5f:3f:ae:3f:d0:
                    fc:49:f1:34:cc:c3:72:66:8b:55:81:f8:6c:67:0f:
                    1d:28:65:73:23:9a:ea:3c:ef:85:eb:f9:48:49:60:
                    80:14:5c:3a:ed:23:61:45:63:95:bd:ca:6d:6d:35:
                    3a:4e:c7:91:6b:de:7d:71:80:66:32:45:07:c7:b0:
                    20:74:74:38:6a:b3:d4:14:43:04:b8:ac:47:4e:09:
                    19:45:9a:c2:3a:83:da:cc:eb:8a:72:9a:56:58:ce:
                    04:58:4f:72:15:67:15:29:d0:c2:50:44:04:3d:6c:
                    7b:f7:8c:c3:a0:99:05:b0:b3:93:21:ac:f4:32:3e:
                    99:1f:ac:e0:ca:16:18:7d:da:b2:78:30:75:66:c7:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1A:43:0C:4C:86:C0:88:BA:07:32:83:62:DD:84:3F:31:79:F3:90
            X509v3 Authority Key Identifier:
                keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:42:29:ff:c2:1c:52:55:7f:07:97:a8:b4:aa:0b:23:50:bd:
         2c:9f:8c:6f:c3:56:cf:bc:d1:16:57:5d:1a:65:90:49:b6:47:
         dc:ff:d3:f7:63:81:0f:52:90:16:40:01:ea:bc:44:e3:39:77:
         80:32:27:1e:f0:96:0c:b3:39:1e:22:c0:32:6b:08:da:79:f6:
         5c:f0:57:49:24:c5:b3:80:1d:40:4e:58:c8:db:ea:c5:68:84:
         ee:7e:23:8a:f3:f6:01:5c:64:7f:34:b7:86:b1:e0:ab:61:15:
         ab:ab:17:b5:e4:1d:a5:f3:00:9b:81:f3:99:68:5a:a2:fb:5b:
         b9:c4:ae:8b:d9:22:53:7e:7b:43:cc:55:8f:a2:01:3e:3a:be:
         5e:04:be:5b:46:05:23:03:e4:5d:ec:b0:b5:d1:53:99:80:ef:
         c7:02:11:ee:1a:96:2e:5f:d2:cd:47:a0:68:8c:c0:98:55:3a:
         94:11:f4:ee:39:2d:94:d2:0a:94:96:72:ac:41:f0:50:84:53:
         d7:9a:c6:63:49:6a:fa:3c:b8:d3:5e:23:60:50:44:7a:b6:34:
         2f:2e:70:ac:ae:a2:43:8c:62:68:76:18:61:75:aa:81:f4:85:
         0b:08:49:7b:40:12:ac:4d:de:da:f8:fb:5b:f4:50:52:c4:76:
         29:d5:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:31 2026 by rpki-client