Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File:                     yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier:          TgmTBsAPDDqOESPeaniPYuaoc+8p7SB3WLxWDrNqt8w=
Subject key identifier:   91:D0:28:3C:18:20:D5:77:88:B0:08:C6:3E:8A:78:09:24:4F:99:D2
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer:       /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial:       037A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number:          0373
Signing time:             Sun 05 Jul 2026 01:14:22 +0000
Manifest this update:     Sun 05 Jul 2026 01:14:21 +0000
Manifest next update:     Sun 12 Jul 2026 01:14:21 +0000
Files and hashes:         1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: 6UAOauPu38cxobppUvBj/DY1VswNR3kjFKs/zE1wHz0=)
                          2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: eTFcd93Ik05dvYU83eyYl+NfNuBY+EuLqHvO4+8nNVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 01:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
        Validity
            Not Before: Jul  5 01:14:21 2026 GMT
            Not After : Jul 12 01:14:21 2026 GMT
        Subject: CN=6a49afee-db57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:87:8b:62:c2:49:b0:a3:06:cb:e1:7f:18:
                    6e:84:26:c4:19:e9:de:60:ae:6a:5b:2e:70:1f:1a:
                    87:26:40:61:7e:16:99:43:b4:71:51:91:9e:67:18:
                    7f:00:be:ba:55:b0:df:0c:bd:2a:2e:eb:02:99:c0:
                    81:48:64:07:de:66:03:5c:16:25:f0:13:bc:5c:bc:
                    8b:f6:cc:c3:7f:5c:c4:17:ac:9c:b3:5e:b7:fe:d9:
                    32:33:d8:bd:44:a5:03:d2:14:fd:cf:a2:27:34:a2:
                    e0:ba:f6:9b:5d:c7:28:a9:85:ca:20:9a:ac:8a:35:
                    e2:17:09:54:68:b5:6b:c2:33:03:5e:b1:9c:06:62:
                    9b:5d:e1:60:e7:4b:7f:85:08:ea:65:34:80:0e:aa:
                    fb:6d:05:15:29:62:7d:a5:f6:cd:3a:ef:e4:c8:a5:
                    bc:70:0a:2f:30:04:75:c2:77:e0:66:bd:63:35:61:
                    43:4f:b0:04:ca:6b:ed:c7:6e:7c:38:54:35:36:e2:
                    53:19:ca:81:2c:95:77:f1:5b:4b:6c:77:76:99:e6:
                    26:93:6c:ac:92:e6:2b:70:08:00:8c:a8:96:e1:26:
                    67:e5:05:e2:5c:cd:83:9e:82:2a:8b:47:ae:5d:f1:
                    2d:08:a8:6d:3a:44:16:28:de:36:b8:7d:ea:88:5d:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D0:28:3C:18:20:D5:77:88:B0:08:C6:3E:8A:78:09:24:4F:99:D2
            X509v3 Authority Key Identifier:
                keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:da:e9:3b:77:c5:42:27:0e:94:57:66:fc:70:9e:be:76:d4:
         64:21:77:ac:a9:6c:53:fa:97:ec:7a:a1:cb:74:a6:be:c8:48:
         e5:ea:73:25:35:6a:da:4a:5b:96:f9:94:04:cc:38:7a:f5:e0:
         43:1f:ec:ff:e8:39:07:67:45:ef:fa:7c:cd:d2:75:0f:1c:9f:
         71:4e:a7:74:a3:4e:93:20:0c:40:c6:b3:08:90:39:af:c6:3b:
         c1:12:19:d8:91:00:ac:f7:ac:0d:63:2e:5a:63:16:06:c2:bb:
         ce:69:c0:50:d9:9b:47:a2:e0:d2:27:8b:9f:67:b4:1a:fb:da:
         f7:00:5d:ce:23:9e:f7:55:5d:ea:43:81:45:f3:37:01:8c:45:
         18:c8:41:a4:93:45:b8:9e:eb:51:81:ad:6d:ad:c1:57:82:e6:
         1d:b5:cd:bf:c9:be:c3:3a:cd:29:40:59:30:58:a4:bf:0a:de:
         9a:73:74:86:75:9b:52:c3:36:e0:8c:17:64:84:9c:d8:38:57:
         0d:a2:41:59:0e:d3:ad:c4:a2:0f:b5:04:69:74:46:21:97:cd:
         82:0d:16:a7:f4:32:27:9d:35:9e:81:2f:82:61:c1:3f:a9:4e:
         de:cf:4b:f9:54:dd:f7:5e:b7:33:ae:5b:e9:b6:f5:e2:b6:20:
         13:0b:94:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:06 2026 by rpki-client