Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          2wQcj0o/1Ew96O4V3Gy9IMY8x4JpBRifLqDaOKzOOsc=
Subject key identifier:   88:E7:8A:E8:4B:9E:54:71:56:3F:5E:CD:FD:6E:F2:9B:5F:25:1C:29
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          086D
Signing time:             Thu 23 Jul 2026 00:26:09 +0000
Manifest this update:     Thu 23 Jul 2026 00:26:08 +0000
Manifest next update:     Thu 30 Jul 2026 00:26:08 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: N40fmhhMUhqV/boNYIcH4P8uZaU1Nev+OkruQqRVf0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Jul 23 00:26:08 2026 GMT
            Not After : Jul 30 00:26:08 2026 GMT
        Subject: CN=6a615fa0-aa24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:4b:c9:8c:45:4f:9e:d0:ed:45:14:e3:70:
                    89:71:4d:9d:b1:fc:fb:8e:64:c6:ab:c3:1d:d2:37:
                    ab:0c:78:ec:13:77:62:5c:40:fd:18:d9:e4:bd:7f:
                    f5:4b:d9:2c:43:ef:fe:cd:53:ef:20:d5:6f:03:fa:
                    a3:7a:48:04:75:82:58:48:1e:e4:a8:13:21:f4:94:
                    fa:d5:a3:64:08:bc:66:61:1a:ae:42:59:02:4f:59:
                    14:00:49:ad:e7:52:98:fa:4f:fb:40:14:43:81:c7:
                    f6:d9:3a:31:c9:da:8b:9e:17:10:78:db:0a:56:a3:
                    bc:75:76:ab:fb:25:61:40:7e:06:1c:07:87:30:75:
                    39:4e:01:a6:e1:b3:d1:d6:92:16:bd:c9:5e:16:2e:
                    f2:22:00:3e:64:c6:40:09:31:9b:f3:89:17:6c:39:
                    7f:fc:69:c2:28:36:55:a8:d9:aa:5d:fc:3b:ca:de:
                    90:7b:5b:00:3a:d7:0b:e6:af:5c:94:dc:b7:dc:a6:
                    e4:da:34:eb:a1:87:77:5f:5e:69:71:59:ff:27:95:
                    b1:b4:2e:4b:9c:92:a9:0a:df:57:1a:d9:75:56:a1:
                    b7:6e:63:35:6a:29:3b:03:f8:96:eb:7b:b8:ae:a7:
                    ed:8e:88:43:3e:99:bb:62:de:42:ee:23:6c:c3:a4:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:8A:E8:4B:9E:54:71:56:3F:5E:CD:FD:6E:F2:9B:5F:25:1C:29
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:c3:9b:77:5f:8e:a9:69:0c:f3:47:b3:33:1c:9e:3c:72:0a:
         74:ec:18:6a:2e:3a:5a:44:4d:0d:88:ac:e6:0a:a7:24:3e:5d:
         4f:5c:68:e9:31:54:de:f8:d3:dd:3d:6e:6b:fd:1c:ed:f6:f5:
         64:43:57:8f:42:b6:f7:98:e3:72:ff:4c:52:2e:b9:05:7d:a3:
         38:8e:09:86:d7:92:58:05:f8:6d:13:9b:b6:81:45:d6:92:67:
         55:18:4a:6e:98:c5:d5:92:5e:74:20:59:f6:7f:63:b6:f4:48:
         0a:33:78:e1:d3:52:3c:57:79:67:32:aa:8c:c7:0e:fa:7e:47:
         9e:7e:75:f1:1f:7a:a7:6e:b9:76:eb:3e:ae:87:4e:6d:ff:f9:
         6b:81:f7:8d:2d:cb:6e:dc:53:2c:91:fb:a3:66:f4:58:a2:5c:
         37:b7:91:78:73:b0:e6:60:1a:93:ae:49:eb:40:d3:09:eb:37:
         53:56:fd:eb:d3:0f:c7:ff:11:5a:05:c3:f0:c5:cd:8b:ff:5c:
         4b:2c:e2:7c:d7:58:44:8f:1a:9c:09:9e:56:5f:bb:a5:fd:e5:
         91:ab:56:a8:bc:7e:3c:6c:bc:7d:cd:e4:07:94:db:65:2c:af:
         5a:3b:ca:81:71:9d:2d:ea:a5:7a:e7:57:0d:7c:77:7f:25:7a:
         1e:08:40:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzNjMxMTAvBgNVBAUTKEM4QzI1QzYzREVGNTY3MDBENjU3RkM0Mzk5NEE1NTFG
RTQwQ0NEQzcwHhcNMjYwNzIzMDAyNjA4WhcNMjYwNzMwMDAyNjA4WjAYMRYwFAYD
VQQDEw02YTYxNWZhMC1hYTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ZtLyYxFT57Q7UUU43CJcU2dsfz7jmTGq8Md0jerDHjsE3diXED9GNnkvX/1
S9ksQ+/+zVPvINVvA/qjekgEdYJYSB7kqBMh9JT61aNkCLxmYRquQlkCT1kUAEmt
51KY+k/7QBRDgcf22ToxydqLnhcQeNsKVqO8dXar+yVhQH4GHAeHMHU5TgGm4bPR
1pIWvcleFi7yIgA+ZMZACTGb84kXbDl//GnCKDZVqNmqXfw7yt6Qe1sAOtcL5q9c
lNy33Kbk2jTroYd3X15pcVn/J5WxtC5LnJKpCt9XGtl1VqG3bmM1aik7A/iW63u4
rqftjohDPpm7Yt5C7iNsw6SE4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjniuhL
nlRxVj9ezf1u8ptfJRwpMB8GA1UdIwQYMBaAFMjCXGPe9WcA1lf8Q5lKVR/kDM3H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD
QkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3RFdWX3hEbVVwVkgtUU16
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lNSmNZOTcxWndEV1ZfeERtVXBWSC1RTXpjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3
RFdWX3hEbVVwVkgtUU16Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2cObd1+OqWkM80ezMxyePHIKdOwYai46WkRNDYis5gqnJD5dT1xo6TFU3vjT
3T1ua/0c7fb1ZENXj0K295jjcv9MUi65BX2jOI4JhteSWAX4bRObtoFF1pJnVRhK
bpjF1ZJedCBZ9n9jtvRICjN44dNSPFd5ZzKqjMcO+n5Hnn518R96p265dus+rodO
bf/5a4H3jS3LbtxTLJH7o2b0WKJcN7eReHOw5mAak65J60DTCes3U1b969MPx/8R
WgXD8MXNi/9cSyzifNdYRI8anAmeVl+7pf3lkatWqLx+PGy8fc3kB5TbZSyvWjvK
gXGdLeqleudXDXx3fyV6HghAtw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:13 2026 by rpki-client