Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
File:                     ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json)
Hash identifier:          9UfLEI1YmQDAuKGDl6GmmOnP5vi2bz06hzyD9sVLDcQ=
Subject key identifier:   60:D9:10:B6:75:58:62:9B:A1:2C:D3:25:C9:EF:A7:E6:A8:BD:3F:C7
Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13
Certificate issuer:       /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
Manifest number:          1E
Signing time:             Fri 17 Jul 2026 10:17:12 +0000
Manifest this update:     Fri 17 Jul 2026 10:17:12 +0000
Manifest next update:     Fri 24 Jul 2026 10:17:12 +0000
Files and hashes:         1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: Xrb5s0vDfboewu2dT3j4Lt8DnXoq18rHwURbKNaPB4g=)
                          2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl
                          rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113
        Validity
            Not Before: Jul 17 10:17:12 2026 GMT
            Not After : Jul 24 10:17:12 2026 GMT
        Subject: CN=6a5a0128-ae0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:70:0c:d9:73:cd:41:68:2b:db:ea:6e:e8:
                    02:e7:b6:55:f0:22:c0:58:02:02:c6:0a:b7:73:bf:
                    97:30:74:2d:81:c3:4b:df:36:48:9d:a8:22:ab:04:
                    2d:cf:ad:40:15:cd:e5:8b:6f:af:55:3a:43:59:1c:
                    3b:88:a7:89:71:30:51:fc:76:49:c5:2c:41:4c:db:
                    a5:2a:e4:c0:d5:ff:d7:50:e7:ee:d8:bc:a2:ae:7e:
                    18:2d:1c:82:3f:bc:80:33:45:ff:07:4d:15:91:88:
                    9c:dc:9b:ca:41:c9:c0:4d:8a:ef:67:64:83:41:9a:
                    16:80:58:8a:53:0e:e6:02:56:ac:73:eb:60:32:33:
                    70:f1:08:8f:f4:83:6a:2c:a4:9d:7c:52:4e:88:8a:
                    f9:cf:16:10:b0:54:3d:03:41:61:58:b7:fc:fb:d4:
                    da:e7:a3:f4:63:51:69:d3:06:33:37:68:8d:5c:49:
                    7f:59:77:ac:7a:bf:59:b2:19:35:b4:a1:a2:6f:3d:
                    64:a7:ad:9f:bb:28:cc:65:6e:7e:56:cf:7c:26:93:
                    ca:c3:12:a3:cb:6c:9d:8e:97:52:f8:bc:4c:12:4c:
                    13:8e:ab:83:6e:27:12:b1:ff:37:e3:92:8a:de:e7:
                    49:52:34:b5:85:e1:f9:93:aa:26:19:2a:f7:79:d3:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:10:B6:75:58:62:9B:A1:2C:D3:25:C9:EF:A7:E6:A8:BD:3F:C7
            X509v3 Authority Key Identifier:
                keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a1:b1:c7:99:16:ea:b7:84:ab:e1:46:ed:96:4a:73:41:29:
         2e:c8:4f:7a:f4:aa:c6:d7:e6:aa:b4:30:ae:d6:82:22:55:68:
         ec:e7:ba:c4:55:74:31:77:fa:54:e2:b2:f2:63:53:6d:d7:75:
         a2:0f:1a:b8:8f:ec:dd:53:c5:9b:37:b9:3d:ff:d3:dc:61:81:
         90:62:22:91:12:23:da:d5:47:8a:17:d6:82:41:37:6b:e9:b8:
         e5:e3:ca:ac:d5:e2:92:d9:72:37:46:82:5a:9a:1f:f0:b6:a8:
         ae:2a:a6:5b:01:2e:08:00:2f:2a:60:8b:1c:8a:74:28:9b:b2:
         b7:c8:70:f9:1b:48:4d:4f:5f:b2:f7:22:10:c4:dc:87:6e:4f:
         6d:df:8a:44:60:9d:c9:63:c4:ef:6e:42:cc:80:7a:df:eb:75:
         29:d5:6f:17:c8:36:bd:91:9e:61:06:88:f5:b4:76:24:60:5a:
         d4:5b:1f:74:a6:fb:51:4b:e7:df:8b:f9:c6:0e:ff:01:5b:42:
         af:2a:f1:04:28:48:ab:90:36:f7:2a:06:f2:66:23:3f:86:ef:
         a7:ad:d3:e7:42:45:f7:76:44:9a:cd:c6:3a:0b:76:f6:e2:08:
         fe:fd:d5:ee:38:f2:75:1f:c6:c4:f6:83:64:52:0f:a0:2e:9d:
         cf:31:0a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:51 2026 by rpki-client