Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File:                     yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier:          ycbz676wKKvntvQaWnlNLFF3D4VY2dYEx3V6ktqzqJE=
Subject key identifier:   EB:C5:EE:3C:84:23:D6:F1:74:DF:4F:C2:D5:9D:D5:97:4F:D5:4D:54
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer:       /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number:          010A
Signing time:             Sun 05 Jul 2026 06:46:25 +0000
Manifest this update:     Sun 05 Jul 2026 06:46:25 +0000
Manifest next update:     Sun 12 Jul 2026 06:46:25 +0000
Files and hashes:         1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: feJf9M3UU4R+xT2X39oF4uDj33FhTo5sMFBkiiPw9FU=)
                          2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
                          3: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
                          4: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
                          rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 06:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
        Validity
            Not Before: Jul  5 06:46:25 2026 GMT
            Not After : Jul 12 06:46:25 2026 GMT
        Subject: CN=6a49fdc1-22c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:f4:da:a5:28:89:86:19:2a:b3:2b:c0:58:
                    74:69:a7:38:a5:6d:b5:9a:0f:96:39:24:ba:58:d7:
                    ad:d8:4d:b0:11:cd:d8:ab:e9:4c:45:59:19:a7:2b:
                    90:1d:bc:cb:3b:c9:94:bf:7d:c9:d5:8c:21:43:da:
                    49:3a:5e:9a:28:be:2c:e2:5d:34:50:2d:ce:d7:dc:
                    f9:f7:74:40:a0:71:66:c2:ba:93:87:a8:a9:ee:40:
                    06:67:73:f2:2c:df:92:4d:23:7b:8c:88:46:01:01:
                    73:e6:57:eb:18:35:db:c0:ee:ba:2b:0d:65:c4:98:
                    fe:39:9f:ed:8b:80:2c:13:11:ab:5e:37:30:2a:6e:
                    a5:01:46:7c:16:c1:ba:c3:e2:44:b0:1e:47:f4:44:
                    22:b5:28:d5:2c:e2:16:d2:a8:40:5b:c2:66:5c:c5:
                    fe:42:44:0b:10:a6:7e:b7:c8:a5:72:de:9d:fa:04:
                    16:aa:6a:67:db:0c:97:0c:12:f4:de:c3:c1:a2:ee:
                    3c:a1:b8:a1:7d:0c:ef:47:9f:a5:93:b8:08:00:fd:
                    40:1c:78:28:e5:69:3b:06:fc:78:69:51:75:cd:01:
                    3d:51:89:c9:48:8e:56:2c:76:cd:3f:50:65:76:2c:
                    b1:72:8c:e0:0a:64:fb:43:22:9d:b4:5c:f2:55:ef:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C5:EE:3C:84:23:D6:F1:74:DF:4F:C2:D5:9D:D5:97:4F:D5:4D:54
            X509v3 Authority Key Identifier:
                keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:e9:1d:ea:5f:92:b2:a6:aa:6c:e6:33:3a:ba:34:16:65:
         42:d0:e2:07:fe:5c:59:f6:24:3a:31:30:b3:58:45:dc:12:a0:
         c7:de:46:1a:f9:68:89:12:0f:cc:40:80:94:07:73:fb:e1:0e:
         ba:25:33:d5:71:9f:ef:28:a2:58:87:74:01:67:9d:31:63:83:
         51:e9:c3:f8:9f:95:9b:a9:eb:97:a4:60:e3:b6:d7:db:d9:3c:
         ce:65:5f:02:5e:c1:ab:35:55:b6:56:58:46:4b:46:2c:fc:84:
         dd:d3:3a:a5:4e:b8:7a:4b:15:11:a8:33:be:b3:a6:f8:e7:8a:
         9a:c2:cd:2c:34:73:25:0a:c7:d4:5b:ce:61:4e:19:76:be:9e:
         ed:91:c8:8f:df:71:a0:e1:65:4e:19:62:c9:53:86:20:1c:42:
         f4:26:ed:c7:28:9a:a7:59:31:94:54:e3:e3:e3:5b:c8:e1:2b:
         a2:ad:3e:e2:be:cc:7a:d9:3b:c4:23:64:6c:c8:69:aa:a2:15:
         c0:31:8f:09:9e:b5:8a:e3:e6:50:6b:63:43:89:c4:96:ac:88:
         37:ed:f7:58:dc:b4:9d:e1:28:e8:27:c2:e2:88:56:4e:cb:e2:
         ce:32:af:fa:7f:6e:a7:9d:a2:54:44:a5:27:1a:6c:77:46:f6:
         3c:e9:e7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:26:19 2026 by rpki-client