Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
File:                     IY_bC_-9DsQ8Nb53hZviztXFQOo.mft (raw, json)
Hash identifier:          R+S1RJ6y2S4Xis8MTmRH3kYL5jWT314NWWL1xs+Z/UA=
Subject key identifier:   AB:8F:11:07:B8:B4:5F:20:02:2C:4C:7E:67:E4:C1:19:FE:1C:5B:E1
Authority key identifier: 21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA
Certificate issuer:       /CN=A91CF477/serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
Manifest number:          0C
Signing time:             Fri 17 Jul 2026 10:28:45 +0000
Manifest this update:     Fri 17 Jul 2026 10:28:45 +0000
Manifest next update:     Fri 24 Jul 2026 10:28:45 +0000
Files and hashes:         1: IY_bC_-9DsQ8Nb53hZviztXFQOo.crl (hash: y2MeG4BJf+Ef8e6t7GExxCBhc0fkJGO+ph2n3fjb4xU=)
                          2: BB05DCBA712511F1BDAC11CB6EA30FBC.roa (hash: P4GuX5ou/U+Rpw8seN62fuLfOYRcHVXRnnvShlDFcO0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl
                          rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CF477, serialNumber=218FDB0BFFBD0EC43C35BE77859BE2CED5C540EA
        Validity
            Not Before: Jul 17 10:28:45 2026 GMT
            Not After : Jul 24 10:28:45 2026 GMT
        Subject: CN=6a5a03dd-fefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2a:9e:28:9a:5d:ec:20:96:22:f0:45:67:f9:
                    fa:73:4f:7a:c3:f5:a1:43:30:1a:fa:0a:e2:20:c8:
                    a7:06:3c:e1:3e:b1:e0:bc:7d:88:c6:27:24:ce:b5:
                    b6:66:80:97:2f:4a:08:5e:1a:0c:a9:7c:52:02:92:
                    79:66:97:54:80:a6:74:86:7d:61:ef:b3:dd:21:e1:
                    56:54:02:e1:88:bb:b0:7a:fd:aa:b1:15:42:8c:94:
                    78:8d:36:e9:c2:79:03:6a:36:b3:1d:f2:89:48:34:
                    11:3c:87:6e:cf:10:98:40:78:37:be:27:43:fb:f0:
                    19:00:7b:f6:ea:2c:33:4f:cf:fe:9b:0c:ec:09:68:
                    c8:41:1c:5f:c6:87:36:15:2c:eb:a7:fa:bf:87:e5:
                    23:6b:15:b1:17:4d:e7:62:8c:dd:ff:e6:04:67:4d:
                    1b:f4:98:99:00:c3:66:6e:d7:13:db:23:1d:34:f8:
                    08:02:08:3e:a1:ee:fd:df:9a:73:67:74:49:71:23:
                    87:a7:2b:7c:63:96:b6:17:9f:fa:2a:c6:c4:93:d8:
                    c1:cd:0f:df:02:e1:5e:df:43:c4:31:76:11:a9:a1:
                    5c:c5:a4:19:44:09:63:b7:c2:92:9c:3f:67:63:0b:
                    23:e0:7e:4d:49:50:00:8d:c2:5f:0b:0d:52:2c:85:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:11:07:B8:B4:5F:20:02:2C:4C:7E:67:E4:C1:19:FE:1C:5B:E1
            X509v3 Authority Key Identifier:
                keyid:21:8F:DB:0B:FF:BD:0E:C4:3C:35:BE:77:85:9B:E2:CE:D5:C5:40:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IY_bC_-9DsQ8Nb53hZviztXFQOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF477/6542C644712511F187EAADCA6DA30FBC/IY_bC_-9DsQ8Nb53hZviztXFQOo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:32:12:24:9c:db:b9:62:45:de:a7:2e:66:0b:a4:5f:b7:
         60:2c:2b:78:7d:27:8c:7e:75:da:66:66:aa:a3:f5:ec:f9:51:
         ea:8e:7f:74:ae:7e:e9:9b:67:de:eb:da:5f:fc:d4:71:08:6c:
         0e:88:46:77:cc:44:f9:b7:28:df:75:a5:bb:61:ea:41:19:8f:
         28:71:9a:2c:29:ef:7d:e2:35:ce:d9:f4:61:90:f5:b7:5a:b8:
         a6:7b:e7:37:64:23:37:ae:0e:1c:bd:81:1f:7e:4f:9e:be:58:
         53:69:05:89:5d:b4:d0:03:c1:d4:b1:86:52:e0:2e:eb:5a:c7:
         fa:fa:21:17:1a:67:ef:36:42:2c:ef:7a:44:31:00:29:0b:e8:
         20:b8:58:51:b8:35:f3:a3:a7:57:04:d5:1f:61:43:54:72:75:
         5e:97:ed:4f:a2:ae:7b:e6:56:99:23:b5:db:8b:2c:1e:e7:0e:
         a6:3a:d1:c0:23:75:07:02:45:41:d3:da:2e:80:e8:50:f2:27:
         26:d6:be:ac:56:76:0e:79:5a:bb:9e:95:0f:83:0a:f2:fe:5c:
         e8:7a:fa:77:a1:0f:97:85:b6:63:4b:ee:aa:e6:96:8d:08:d9:
         fd:88:ea:b1:79:35:24:19:cf:cf:a8:dd:8c:37:cf:fa:73:93:
         02:96:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:58 2026 by rpki-client