Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          KbRn+BvMLy2lYc1l3Cs8WhSTn5PfNLzARacO4z1RCSw=
Subject key identifier:   46:60:EA:59:6E:B0:9D:9A:2E:88:2A:E9:3D:90:C1:84:76:FC:64:60
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          7B
Signing time:             Sun 05 Jul 2026 08:24:35 +0000
Manifest this update:     Sun 05 Jul 2026 08:24:35 +0000
Manifest next update:     Sun 12 Jul 2026 08:24:35 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 8B60KEOgwEpyJ28+c4+JnbQhJk5+crLIAueM7qW2gAo=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Jul  5 08:24:35 2026 GMT
            Not After : Jul 12 08:24:35 2026 GMT
        Subject: CN=6a4a14c3-abb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:44:45:b1:01:ce:bc:da:c0:46:0e:59:6d:
                    85:4e:dc:66:f0:e2:de:14:a0:54:9d:66:97:1b:43:
                    ac:f3:f9:6d:45:e0:3e:34:72:f3:ca:aa:2e:8b:7a:
                    d4:be:20:04:f1:1d:98:07:ee:cb:22:f4:f6:a3:50:
                    fd:79:f2:30:72:74:f1:bf:ee:6d:67:05:44:ea:f4:
                    63:81:80:0d:60:c1:6b:87:d3:e5:1b:2e:ff:b7:f1:
                    5f:5f:0d:0a:ca:77:e7:4a:03:62:39:82:4e:3a:fd:
                    6e:87:09:08:15:6e:f7:90:ee:77:8a:23:bb:ae:2d:
                    a2:26:bb:ea:1e:7c:27:94:00:63:af:6f:9c:05:0e:
                    17:fb:66:a2:63:09:01:a2:ba:72:b7:4d:f5:5c:08:
                    21:63:1d:bd:ce:da:32:a4:b5:95:c4:d2:c9:0d:56:
                    33:1e:e3:d7:e1:d5:8e:a0:cf:d4:40:6b:b7:67:46:
                    9d:5e:d9:78:14:ba:d1:77:96:ac:85:6c:4f:dc:9c:
                    f8:6a:02:1f:90:65:cd:97:a6:5b:d8:b6:69:a8:2f:
                    7d:91:76:47:81:41:a4:fc:f7:7c:71:7c:48:56:f7:
                    63:f5:49:1d:91:26:4a:83:e3:61:14:c9:03:46:73:
                    62:0d:67:49:87:f8:93:4f:cc:76:b5:e1:79:4c:ba:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:EA:59:6E:B0:9D:9A:2E:88:2A:E9:3D:90:C1:84:76:FC:64:60
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:93:18:68:5b:8e:96:c3:5a:92:ed:79:a2:ea:2f:d4:7c:
         88:05:1d:7c:6a:f0:46:ba:87:46:ce:9e:06:e0:26:99:ea:44:
         4a:4f:66:7b:bf:2d:eb:d8:98:07:91:84:4d:64:88:1a:dd:60:
         b7:e6:c9:4d:58:d2:e8:cf:0e:fa:c0:55:f4:d3:82:dc:72:4d:
         12:c9:51:23:cf:70:0f:a9:2d:80:08:1f:4b:cc:ab:e9:55:cf:
         e5:15:e8:96:60:3d:27:19:26:b3:3b:c8:ea:f4:16:fc:fe:4d:
         0d:a4:64:34:37:51:d8:11:da:6c:98:02:53:3d:0c:4f:45:53:
         d0:d6:e6:49:ec:28:63:53:b4:64:5f:cb:65:5e:07:58:7d:59:
         87:d0:e5:88:9d:be:40:4d:7f:ef:58:04:8f:68:56:3f:c1:b3:
         01:05:fb:38:ba:70:8a:79:f5:b3:18:f9:c6:df:45:06:88:12:
         ca:da:2c:de:dd:ad:9f:27:43:a0:0d:96:09:04:c6:65:fc:f6:
         9f:7a:ca:b8:df:9f:e6:d0:c1:85:ac:6f:4b:ed:23:05:f8:a6:
         ec:10:88:4f:09:5c:77:a9:c4:6a:97:f4:89:21:a1:41:cf:9b:
         34:aa:64:c7:df:54:27:99:01:8e:ff:18:b1:07:6e:36:de:ea:
         d9:d8:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:34:37 2026 by rpki-client