Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File:                     yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier:          XXEuluY4x4VDtHbxnnNp9GqJNB3eF0Qy7Wwe4E0Ky3g=
Subject key identifier:   D2:61:83:95:EE:AC:D3:BE:AF:47:B7:6C:64:6B:C3:C4:03:EA:7D:B8
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer:       /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number:          025B
Signing time:             Tue 23 Jun 2026 02:24:34 +0000
Manifest this update:     Tue 23 Jun 2026 02:24:34 +0000
Manifest next update:     Tue 30 Jun 2026 02:24:34 +0000
Files and hashes:         1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: gZX4fD9o7JXAYv7brHzEbNdozAJoigkHpi9OG3aTZAA=)
                          2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: 4Ttg6a+Izn8a70sY4W6bAM3oSgGKBOsCI9uHmrpaOfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
                          rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 02:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
        Validity
            Not Before: Jun 23 02:24:34 2026 GMT
            Not After : Jun 30 02:24:34 2026 GMT
        Subject: CN=6a39ee62-3723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ed:cb:97:de:8d:a4:47:23:08:5f:17:c0:a2:
                    0e:5d:8f:09:80:0f:3a:cf:9c:25:2e:6d:6c:6e:d0:
                    64:df:8b:15:4d:e3:0f:a2:47:f7:ec:85:45:d2:9c:
                    6c:23:d6:38:92:a3:e5:f9:db:68:6d:b8:82:12:fd:
                    c6:d2:ee:df:58:3b:f5:1b:25:5c:74:35:4b:cd:49:
                    2b:64:30:c3:16:99:d4:22:e3:0c:f9:42:1f:ab:f0:
                    cc:a4:27:1e:75:9d:65:8b:73:78:27:f7:99:31:82:
                    b0:3b:ae:0b:98:bf:12:6c:04:66:40:ff:b2:f8:5f:
                    ea:e6:73:02:5b:e9:96:94:4c:94:d5:e5:3a:6b:5f:
                    41:b2:9f:8d:cb:b0:43:e8:03:0f:ef:3a:00:e6:2c:
                    8d:64:d7:b2:83:d4:29:48:ea:23:89:3f:77:2c:99:
                    97:82:50:a5:96:ed:be:37:98:90:d3:07:08:49:02:
                    e9:f8:2f:bf:31:4f:66:50:e2:97:b3:ca:ef:4b:87:
                    b2:3f:01:08:8e:08:4b:24:ad:09:85:ee:33:2b:6a:
                    03:a5:1a:d6:3f:61:10:41:9c:b9:38:f6:c2:69:fc:
                    a5:ed:13:0c:c2:ba:97:08:b5:de:ae:bc:6c:aa:0a:
                    91:02:79:4c:40:11:bf:cd:2c:02:fc:45:a0:bf:72:
                    9a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:61:83:95:EE:AC:D3:BE:AF:47:B7:6C:64:6B:C3:C4:03:EA:7D:B8
            X509v3 Authority Key Identifier:
                keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:90:be:16:91:6f:fb:e5:29:f6:8a:c8:c5:e8:af:61:bc:d0:
         f1:a3:68:b5:6c:35:c8:e1:ba:12:29:e9:f7:ec:5f:28:5f:32:
         ed:f1:ed:7c:d8:3e:ec:71:e8:72:f9:1a:70:c2:32:28:88:60:
         b7:a3:cc:a3:93:8d:32:f2:41:57:f8:94:e6:57:73:f4:b4:cc:
         bd:10:47:0c:70:48:04:44:00:a5:10:a6:15:a0:2b:d8:22:58:
         a1:b8:f6:1d:86:f7:ed:99:af:88:1f:5b:08:4d:a8:a6:e2:c6:
         68:03:ba:4a:69:41:6b:11:56:3d:32:8a:dc:fa:24:75:c2:b9:
         33:0b:9b:78:11:11:52:40:2b:23:a7:9c:39:c2:8d:9c:a4:74:
         65:7f:8a:f6:95:52:4a:1b:bd:a5:3d:20:5e:a4:93:78:83:35:
         97:03:9a:0c:68:f8:6b:ee:b9:d9:5e:4b:6e:24:eb:e0:49:3d:
         72:05:5c:c5:c5:8a:8e:6e:b7:d6:df:c5:47:83:c4:ce:7f:6b:
         4a:cc:38:3c:69:27:ea:a8:bb:66:c4:19:ed:b9:99:05:f8:a5:
         02:e1:2f:ad:fe:37:df:9c:b1:f4:29:f1:8f:25:0e:6e:7c:dd:
         96:4f:18:f7:39:d8:d5:9e:1b:82:90:d4:42:9e:2d:df:57:78:
         cf:ac:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:30 2026 by rpki-client