Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
File:                     r0YdV6kKM1svp3p6rsFnNJVJI7E.mft (raw, json)
Hash identifier:          VbA1OE9AVHVTXP/Hsu1YdXeBZbM0cb87y35or0HQZaI=
Subject key identifier:   2B:E9:FC:5D:17:93:45:69:30:DF:2C:0E:A9:62:66:AC:A9:34:AC:1E
Authority key identifier: AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1
Certificate issuer:       /CN=A9114EF6/serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
Manifest number:          012B
Signing time:             Thu 23 Jul 2026 07:29:09 +0000
Manifest this update:     Thu 23 Jul 2026 07:29:08 +0000
Manifest next update:     Thu 30 Jul 2026 07:29:08 +0000
Files and hashes:         1: r0YdV6kKM1svp3p6rsFnNJVJI7E.crl (hash: J1yi3EKHzIilA4AIRh090LJynYMOYhS8tia+2GpJGEE=)
                          2: 7EF2846AD16911EF9ECCE01FC4F9AE02.roa (hash: ytF+Ga6u8T83+pz2nu9bDRMDy5//nap2u0HT6T2VLwM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl
                          rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114EF6, serialNumber=AF461D57A90A335B2FA77A7AAEC16734954923B1
        Validity
            Not Before: Jul 23 07:29:08 2026 GMT
            Not After : Jul 30 07:29:08 2026 GMT
        Subject: CN=6a61c2c4-b7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:ce:41:97:4c:c1:34:d3:06:65:ad:9e:4a:
                    06:63:e0:ab:ac:69:31:54:fc:fe:82:ba:03:00:74:
                    6f:bd:03:dc:7e:11:67:5e:e6:6a:3d:f5:f0:87:93:
                    17:0d:8a:01:4d:a0:7b:bb:1d:a0:ee:64:08:c9:a2:
                    f7:80:bd:18:db:20:48:6e:2e:db:6a:88:34:25:db:
                    13:33:52:e6:0a:c8:95:ed:0d:52:04:4d:c7:79:cf:
                    9e:1c:d8:9d:c1:13:46:19:b4:31:a6:b9:e8:36:5e:
                    66:47:a0:b8:2a:f7:81:b1:57:c2:ba:d8:b6:20:fd:
                    b7:00:5c:1e:ec:df:36:ac:1d:cd:f0:28:08:09:fb:
                    68:34:7c:0f:7c:00:43:3e:8c:a5:f8:b8:66:ab:4b:
                    b7:49:2e:33:df:63:61:6f:35:03:37:92:fb:91:ef:
                    49:93:6e:e1:ea:c7:9d:a5:40:fe:b9:a0:06:e4:ef:
                    ed:1f:e4:c6:80:b1:7f:4e:d5:a3:f9:1a:b7:d5:90:
                    76:ff:2c:66:04:6c:aa:b5:a5:19:47:78:e8:83:74:
                    4c:e2:c3:03:e4:62:0e:1c:9c:8a:47:37:9e:04:d7:
                    5e:72:53:6f:d5:a2:9b:ae:aa:92:13:f5:6b:f5:c1:
                    8f:3e:b3:44:fc:d9:88:5a:1f:49:24:6e:30:56:be:
                    dd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:FC:5D:17:93:45:69:30:DF:2C:0E:A9:62:66:AC:A9:34:AC:1E
            X509v3 Authority Key Identifier:
                keyid:AF:46:1D:57:A9:0A:33:5B:2F:A7:7A:7A:AE:C1:67:34:95:49:23:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r0YdV6kKM1svp3p6rsFnNJVJI7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/8DAE05A0D0D411EFBCD5123EC4F9AE02/r0YdV6kKM1svp3p6rsFnNJVJI7E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b0:42:57:24:4b:94:51:b1:d4:24:4e:20:72:7f:1c:70:52:
         a3:e5:8e:e0:53:9b:fc:7a:c0:d0:d8:b5:b0:db:7d:57:70:73:
         7a:97:20:12:2a:03:33:bb:92:b6:a1:53:63:01:47:7b:27:6d:
         69:ee:0f:c1:a7:84:02:ee:86:4d:3a:c4:ca:36:46:f5:1f:80:
         fc:95:e0:48:7f:f0:7d:67:3f:a1:dc:34:ce:17:04:54:b2:72:
         7f:4e:ea:2d:fd:9f:36:21:bc:70:80:10:80:59:a5:39:d3:b3:
         7f:fc:8f:d8:0e:da:46:36:1a:99:25:8d:48:40:89:c3:b7:6f:
         82:9c:b7:1f:b3:d6:c1:83:07:18:4e:c2:3a:91:39:4e:b1:50:
         91:4d:03:b1:5e:92:84:cf:d9:63:6b:85:eb:44:9c:cb:d3:a1:
         3f:da:a0:21:73:15:85:02:37:76:36:3b:28:86:92:c9:4a:af:
         f3:33:39:2e:b3:66:dc:cd:30:77:2d:c4:32:b3:e6:fc:33:af:
         70:0b:81:ba:b0:d1:6d:9a:ac:d1:39:37:e5:f0:2c:d4:e0:21:
         d1:ca:6f:a4:1d:83:59:26:4d:7f:06:af:5f:50:99:5b:b6:d9:
         95:41:79:46:36:63:08:f6:2a:52:0b:6a:8b:46:c1:6f:38:56:
         1a:3f:d2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:59:01 2026 by rpki-client