Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
File:                     Y7ooHVb6T-blNbEl4W34AdEvgJk.mft (raw, json)
Hash identifier:          E7R+zbNMxvLeIdUFkEhRJd1oQnQSA8Id7PIyju2N7eQ=
Subject key identifier:   ED:C6:28:B5:0A:95:A9:F3:31:1C:2E:7C:26:D3:E1:36:E9:EB:74:91
Authority key identifier: 63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99
Certificate issuer:       /CN=A91ECBD9/serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
Certificate serial:       0178
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
Manifest number:          0172
Signing time:             Wed 19 Aug 2026 05:23:48 +0000
Manifest this update:     Wed 19 Aug 2026 05:23:48 +0000
Manifest next update:     Wed 26 Aug 2026 05:23:48 +0000
Files and hashes:         1: Y7ooHVb6T-blNbEl4W34AdEvgJk.crl (hash: 3Bk1Rko1y2wtupp1EZ7LO8Byoj/6SpS8A5q4Qc9vuzM=)
                          2: 4E67247C681911EFA2640B43C4F9AE02.roa (hash: An9B7CLoNHGvXF2LPRgaQFUn7qwdjlLJ8zqshc1cw7U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECBD9, serialNumber=63BA281D56FA4FE6E535B125E16DF801D12F8099
        Validity
            Not Before: Aug 19 05:23:48 2026 GMT
            Not After : Aug 26 05:23:48 2026 GMT
        Subject: CN=6a853de4-4874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:6b:1b:30:21:4b:15:3d:46:0a:43:af:e6:
                    55:65:06:a0:82:c3:1a:49:fa:12:6d:96:b1:44:56:
                    b3:56:2e:c0:65:2e:fe:c9:e4:6b:0a:0d:0c:97:01:
                    6b:33:a3:9c:0b:44:15:01:80:a0:55:4b:56:20:dd:
                    a5:30:72:50:36:66:23:12:0d:71:9b:32:83:61:15:
                    a5:1d:c1:76:1c:d9:cd:79:a0:52:47:10:04:92:4f:
                    16:f6:31:63:cf:26:af:be:1a:3b:46:0e:73:66:6a:
                    50:b0:99:66:49:77:f4:7d:86:e7:eb:cf:7e:6f:ca:
                    f5:28:c5:85:20:48:65:11:ad:e6:41:86:77:0c:38:
                    0d:fc:89:af:4d:de:d0:b2:9a:6b:a1:16:92:f2:05:
                    c1:52:75:54:da:c2:dc:35:65:fb:9d:e7:ee:70:5a:
                    51:19:8c:98:2f:79:5a:9f:f7:11:68:a0:1f:87:65:
                    9f:5a:ca:72:6b:dc:f0:22:df:01:6e:11:c3:ee:af:
                    7b:0b:18:5c:f9:e0:7c:ae:1c:6e:7c:1e:11:d7:a8:
                    ec:ec:9f:f5:11:3c:1d:eb:9b:46:50:ac:36:bf:f1:
                    20:da:c3:55:89:a3:10:8c:74:f3:6a:f9:f7:ee:2c:
                    43:97:14:f4:1e:f8:7d:94:ca:09:96:6c:b1:48:cf:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C6:28:B5:0A:95:A9:F3:31:1C:2E:7C:26:D3:E1:36:E9:EB:74:91
            X509v3 Authority Key Identifier:
                keyid:63:BA:28:1D:56:FA:4F:E6:E5:35:B1:25:E1:6D:F8:01:D1:2F:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7ooHVb6T-blNbEl4W34AdEvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECBD9/E046B0B6681811EF9A53E918C4F9AE02/Y7ooHVb6T-blNbEl4W34AdEvgJk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d9:6c:2d:af:92:8e:38:0f:aa:4b:30:e4:a0:6e:e4:44:ae:
         62:45:e5:f4:a6:54:9b:9f:a8:1a:33:3f:d3:ba:3a:97:e4:96:
         f0:c7:37:da:9d:5e:a8:92:d4:58:aa:e3:48:f0:16:42:8f:59:
         6c:26:89:96:63:71:93:aa:4a:46:57:09:08:ba:57:15:b4:6e:
         57:6f:5c:58:5c:70:96:12:01:c6:f2:7d:4b:6c:22:d2:4a:a9:
         78:2b:0e:3c:5f:b8:08:08:bd:7f:3f:d6:8d:e0:34:22:35:96:
         1c:5d:82:5c:de:b8:17:5e:4c:44:49:8d:be:d2:e8:cc:6c:fe:
         f1:39:76:0d:42:57:89:d7:5c:57:fd:d8:42:a4:95:79:f2:51:
         4f:e5:83:bf:e6:e1:02:54:7d:c3:bf:4a:06:e7:80:26:2a:8f:
         5c:67:92:aa:fe:47:59:d3:d2:00:d8:fa:bf:39:be:5a:9b:f7:
         f7:41:7b:b2:64:40:35:67:99:d3:aa:7a:75:0e:0f:0e:1c:a8:
         a7:05:5a:f3:24:3a:dc:e3:71:2c:4c:1e:da:6a:e0:76:8b:a3:
         c0:1f:d9:dc:31:35:0b:b1:14:d8:bd:91:14:e4:56:c0:e9:90:
         43:8e:26:75:9b:25:74:18:5b:13:f1:60:5e:2f:e7:d5:e6:32:
         c6:ae:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:50 2026 by rpki-client