Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
File:                     YwwCddFRnD7kuqftn9t0UvPhDEs.mft (raw, json)
Hash identifier:          MNVXyjist5hnxQuGrnL+JbBeGYhaAKKHRihueQJbYKo=
Subject key identifier:   E2:F5:86:DF:AE:E2:A9:5C:9B:41:60:E1:71:30:64:01:3E:51:D1:0B
Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Certificate issuer:       /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Certificate serial:       04
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
Manifest number:          03
Signing time:             Tue 21 Jul 2026 13:08:04 +0000
Manifest this update:     Tue 21 Jul 2026 13:08:03 +0000
Manifest next update:     Tue 28 Jul 2026 13:08:03 +0000
Files and hashes:         1: YwwCddFRnD7kuqftn9t0UvPhDEs.crl (hash: 2kqrekd7WPJ5Hza8BxPIyHExvsQqghavzQJWQ03A5gM=)
                          2: 32701246850511F19B0544DB68A30FBC.roa (hash: lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
                          rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 13:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
        Validity
            Not Before: Jul 21 13:08:03 2026 GMT
            Not After : Jul 28 13:08:03 2026 GMT
        Subject: CN=6a5f6f34-02f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:1b:b4:f2:d2:62:e7:73:92:94:38:d6:0c:
                    05:0b:4c:0b:69:49:ef:d7:e3:a0:c2:d7:2c:4c:bb:
                    8a:67:bc:4a:b3:20:74:be:a4:45:a7:e2:d8:65:72:
                    68:e9:6f:56:71:0b:61:4c:48:2f:8c:46:32:f6:c6:
                    04:e1:f6:08:72:be:55:97:5f:90:65:a4:0b:75:8f:
                    4b:30:64:01:70:0a:d5:2e:d7:44:40:4d:88:9e:27:
                    41:cb:a0:98:b3:5e:b2:fa:3e:72:85:c7:ac:c1:20:
                    5a:ed:74:fc:85:dc:6d:68:97:63:e8:d6:22:7e:c8:
                    9b:62:42:04:34:eb:11:6d:ac:12:0e:9c:27:68:73:
                    71:92:15:d8:35:b0:27:e4:ca:77:19:b2:96:76:4f:
                    aa:7f:57:d0:09:67:7a:18:0c:83:68:9c:b8:e5:d1:
                    73:2e:0e:70:b9:87:1a:41:f9:e3:0c:cb:dc:d0:48:
                    5f:7d:c5:8f:2c:8b:88:0b:98:a6:c9:3f:81:e6:8c:
                    13:6b:17:5c:0a:8d:80:2a:87:7c:9b:d7:55:d5:fe:
                    84:c6:22:a9:8e:61:47:48:bd:99:d3:f9:4f:fd:19:
                    ff:c7:bd:83:fd:d0:7f:f7:f9:cf:c7:05:af:fa:b3:
                    c9:15:96:1e:65:c0:26:9f:fc:bf:ef:4c:00:a7:7c:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:86:DF:AE:E2:A9:5C:9B:41:60:E1:71:30:64:01:3E:51:D1:0B
            X509v3 Authority Key Identifier:
                keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:b4:04:b9:00:4d:85:36:1b:cb:9a:4c:c1:d1:52:10:6c:
         43:77:57:3f:a4:28:00:2d:dc:1e:f4:62:b3:86:c7:43:1b:7b:
         1a:ba:db:7e:07:03:d1:70:9d:c4:c5:35:25:51:8e:34:69:33:
         ea:d0:45:5f:d5:74:1d:7d:1e:45:7e:36:82:15:e0:e6:a4:68:
         ea:04:31:98:82:93:ca:3b:69:55:a5:5e:a5:da:73:f8:20:79:
         50:ee:33:a4:d3:cd:3a:06:57:e3:92:ec:88:b4:07:c0:1b:23:
         d4:80:c8:fa:93:1f:df:b3:82:e3:51:32:49:bf:d5:a4:0c:ae:
         e0:c6:ab:14:10:42:b6:25:8a:76:64:f1:34:26:a4:3e:a8:67:
         76:14:df:da:75:e3:87:52:9f:b1:31:f5:55:5a:04:e0:9e:65:
         d2:87:b8:d9:9d:39:78:5d:70:58:e0:c7:fa:5d:84:f4:83:7a:
         10:8b:fb:bf:07:ab:51:d3:1f:4d:cb:d9:8e:9c:59:47:54:85:
         af:54:42:98:83:c1:79:d7:08:90:37:5e:0a:f0:32:e4:d8:bc:
         b6:28:81:17:e3:7f:d9:a1:a3:ec:c6:23:d9:79:af:c5:3e:9b:
         8d:b3:ae:66:68:ed:d5:d7:aa:b9:a9:61:1a:6c:3d:ab:f7:27:
         c8:12:3a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:07 2026 by rpki-client