Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File:                     y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier:          kRhtbQj7WdjcBkCcZKQSD7C4GVTeJmvTLyZ3dAYxAQM=
Subject key identifier:   D2:05:D3:03:7E:38:5E:01:09:61:51:5E:C5:89:A5:16:E6:4E:41:AF
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer:       /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number:          0174
Signing time:             Fri 17 Jul 2026 05:47:39 +0000
Manifest this update:     Fri 17 Jul 2026 05:47:39 +0000
Manifest next update:     Fri 24 Jul 2026 05:47:39 +0000
Files and hashes:         1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: dztJbY+tTOqTHmz04hA9Sixne0YIBme4NETIPkcTwbk=)
                          2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: N0mjQ3paWd02SrbPugyLiWD2jfFiR2KxN4PTpCiYbDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
        Validity
            Not Before: Jul 17 05:47:39 2026 GMT
            Not After : Jul 24 05:47:39 2026 GMT
        Subject: CN=6a59c1fb-0f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:65:f4:69:23:99:ac:3f:28:13:26:b5:30:
                    dd:ed:b0:72:e3:9d:bd:d2:24:4a:cf:06:bb:ec:d0:
                    4f:a7:19:bb:de:ce:b6:43:69:de:b4:56:a4:59:7c:
                    fc:c4:95:df:c4:6b:de:8a:d8:b7:35:c6:2c:28:5a:
                    16:13:95:a4:ae:ed:91:92:93:e3:c8:ce:b7:aa:7a:
                    db:99:d2:99:b1:08:b6:38:44:47:6c:61:7f:8e:6a:
                    64:4f:4c:05:08:dd:06:c1:8a:ac:2c:72:42:74:0c:
                    f4:41:9b:49:20:75:08:6a:6d:68:e7:bc:48:26:20:
                    20:ec:c3:3c:79:fe:40:4d:93:35:af:ed:54:ee:26:
                    6a:4a:cc:43:9e:ee:ba:ca:35:59:1a:99:ab:3e:3d:
                    f9:e1:9f:f1:51:d5:6c:5b:82:a2:4f:b8:8b:4a:fe:
                    c8:70:90:60:bf:fb:60:94:4d:d5:77:dd:6c:a9:26:
                    0a:78:85:8a:ae:5c:af:db:69:ea:15:a9:75:02:48:
                    ed:b0:5f:30:18:f2:f6:96:ae:fd:12:70:70:ad:db:
                    38:c3:91:d7:e5:c1:e6:1a:46:c3:88:11:8c:d1:68:
                    39:1b:b3:0e:e7:39:27:06:18:03:5f:e0:1f:95:f2:
                    24:29:b7:1e:a3:89:2d:4e:c9:0f:38:4d:13:75:2c:
                    6e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:05:D3:03:7E:38:5E:01:09:61:51:5E:C5:89:A5:16:E6:4E:41:AF
            X509v3 Authority Key Identifier:
                keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:02:7c:65:4a:17:bc:38:7c:d4:7a:0e:12:5f:a9:ec:7d:06:
         69:4e:c3:88:09:b0:12:a8:3d:f5:4c:d6:e5:df:a6:1c:4b:ed:
         71:ff:b3:7d:94:f0:36:a4:8f:bb:78:de:ee:18:62:00:53:5e:
         72:0f:93:6f:94:b4:dd:ba:3e:82:66:bb:ed:aa:e2:d8:c8:2a:
         2c:d6:34:e8:20:ec:0c:c8:38:75:02:04:ba:c7:4b:3e:e1:44:
         57:e8:d9:a0:80:28:80:2b:89:bb:80:a7:79:eb:7a:24:e5:2a:
         00:c1:c6:a3:c9:df:de:c3:f1:11:32:30:f2:2d:af:fc:e3:f5:
         80:56:f2:78:da:14:85:0d:8f:ac:cc:9c:78:c1:76:69:1f:df:
         45:79:55:9a:9e:70:e7:a7:3f:c4:b1:0f:94:c5:94:d3:e2:1d:
         81:77:12:fc:ae:e4:65:82:e1:a1:e8:df:7e:c9:3e:33:e6:75:
         db:3f:08:5b:30:85:0a:09:32:96:82:82:06:24:e3:ec:20:e0:
         fa:3d:46:6c:80:e1:21:20:49:76:b7:95:80:97:3b:3f:b8:25:
         64:9a:d5:b3:95:b7:4f:1c:d7:df:1b:b3:f3:d3:0e:c0:7a:35:
         32:0d:0a:84:ce:fd:9b:ca:8c:b5:4a:73:8f:07:03:52:e6:78:
         10:e5:a7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 10:26:15 2026 by rpki-client