Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft
File:                     Yv18a2FzzDKVZktYaAWS-ybSuHo.mft (raw, json)
Hash identifier:          RPWL5YhL8VIPit4s8odD1YBCPvstnRyAWk8UzIhmZq8=
Subject key identifier:   E3:65:04:65:89:50:22:25:A4:4C:6E:B1:57:BA:62:B3:EC:55:72:31
Authority key identifier: 62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A
Certificate issuer:       /CN=A91B488A/serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
Certificate serial:       083B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft
Manifest number:          082B
Signing time:             Sat 04 Jul 2026 21:18:49 +0000
Manifest this update:     Sat 04 Jul 2026 21:18:48 +0000
Manifest next update:     Sat 11 Jul 2026 21:18:48 +0000
Files and hashes:         1: Yv18a2FzzDKVZktYaAWS-ybSuHo.crl (hash: K5orERQNqKInFJdJjBJpXQvA6wk9fbCqpuhaMFaNBy8=)
                          2: FACB1DC6595911ECBE6ACC6BC4F9AE02.roa (hash: ZNFuEnLNSz/AETesD6LS6NACVKHnv5ek22MB08BzsTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl
                          rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 21:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B488A, serialNumber=62FD7C6B6173CC3295664B58680592FB26D2B87A
        Validity
            Not Before: Jul  4 21:18:48 2026 GMT
            Not After : Jul 11 21:18:48 2026 GMT
        Subject: CN=6a4978b9-e0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:99:cd:e1:10:5f:52:c6:e6:9a:e9:cb:35:
                    0f:a9:42:e0:16:a1:14:7e:ca:60:9a:d0:88:e1:97:
                    9e:f7:e6:c5:fa:5c:fe:7c:ff:18:af:46:be:ba:fa:
                    ec:6f:59:2f:92:b7:9c:a8:5a:30:3c:44:65:0b:5a:
                    f1:b5:c9:0c:d1:be:2b:5c:35:2a:8c:52:4b:92:ca:
                    14:c8:bb:3e:06:5f:12:9b:0b:12:bf:fe:82:0d:0d:
                    43:0b:91:2f:a1:22:21:05:2d:11:4d:c7:e6:1b:20:
                    cc:ca:e1:69:e7:41:c3:bc:3b:bf:28:66:80:9d:03:
                    2b:c3:59:02:f6:dc:7e:0b:6e:8d:d4:d1:59:49:21:
                    15:2b:09:e9:ca:37:79:e3:68:e9:f8:bd:4a:fb:3b:
                    b0:92:51:4e:a6:6c:f5:13:f8:69:f6:42:6d:41:50:
                    67:23:b7:1f:61:34:fe:8a:73:81:e9:ce:7c:e3:19:
                    49:97:ef:98:fe:c3:30:4c:e6:29:cb:0e:9d:47:de:
                    2d:3a:fd:e1:d5:53:39:0e:c7:49:de:e3:68:1c:e5:
                    c5:f4:a0:85:f6:41:78:3f:6f:96:d5:d0:07:b6:57:
                    dc:68:2c:c9:cb:aa:c7:8d:43:f2:32:af:60:d7:2b:
                    22:97:27:b2:2f:99:34:7d:01:94:98:73:ef:09:20:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:04:65:89:50:22:25:A4:4C:6E:B1:57:BA:62:B3:EC:55:72:31
            X509v3 Authority Key Identifier:
                keyid:62:FD:7C:6B:61:73:CC:32:95:66:4B:58:68:05:92:FB:26:D2:B8:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yv18a2FzzDKVZktYaAWS-ybSuHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B488A/9AEF23DC246911EB8CAE3380C4F9AE02/Yv18a2FzzDKVZktYaAWS-ybSuHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:be:f3:52:c7:a9:fe:15:d9:45:03:f8:0f:04:5d:21:96:
         e2:6f:ff:db:1f:4f:49:96:5e:da:15:1a:88:41:7f:4c:ae:03:
         1a:95:9c:26:d4:f3:53:60:a8:80:6b:05:fb:69:73:c4:3a:76:
         b0:8d:8c:dc:3c:71:ee:ba:f1:48:f0:64:5b:a3:e6:ed:e5:ca:
         a2:a6:ff:c4:b7:5d:08:39:41:d5:67:88:de:35:85:a7:d3:95:
         b3:ec:df:47:e7:a1:87:33:2b:32:45:73:bc:2c:18:6f:b3:e6:
         f1:78:71:f7:08:c8:bb:7e:4d:13:07:6d:0a:f0:b3:0c:0c:48:
         4d:ca:34:d2:fa:a5:48:0f:78:9e:c7:99:7c:32:bf:dd:a7:24:
         2a:49:5d:8a:f1:57:f4:17:46:53:d2:93:af:be:eb:b9:7d:0a:
         2d:c8:bf:74:99:4e:07:35:21:d2:65:dd:66:e9:fb:3a:54:ef:
         01:9e:2f:a1:2b:d3:cc:c7:5e:27:2e:3b:be:84:32:16:f3:6c:
         a1:41:49:b5:6c:7e:95:fb:6d:08:4d:64:84:25:12:00:6d:6c:
         e4:a0:af:f8:28:09:f8:22:90:0e:25:26:11:f1:ec:64:d4:da:
         7d:e1:01:de:19:a4:34:d8:b2:78:f1:67:08:9e:98:f6:eb:31:
         d1:5a:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 07:52:15 2026 by rpki-client