Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File:                     YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier:          97eBMSIL6UWo6lsepQ7ywiPqBzn0RUaDcWhNrLK4DyE=
Subject key identifier:   B8:31:75:3C:14:63:BE:69:B3:02:CE:45:68:F5:27:64:0D:9A:E4:A5
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer:       /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number:          016E
Signing time:             Thu 23 Jul 2026 06:20:11 +0000
Manifest this update:     Thu 23 Jul 2026 06:20:10 +0000
Manifest next update:     Thu 30 Jul 2026 06:20:10 +0000
Files and hashes:         1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: KS/OEvmLeLfzClmpx0aJVqND/kc4GWus5HPnWyewrVs=)
                          2: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: BuxXyoL8osjsOVkcemiUlr0GNXekE0nxlamBP/kmyXM=)
                          3: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: UsVYh0cMVNRpr+Gc87SWu7LilmsEheyEv/IWx8kKIpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
                          rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
        Validity
            Not Before: Jul 23 06:20:10 2026 GMT
            Not After : Jul 30 06:20:10 2026 GMT
        Subject: CN=6a61b29b-b977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:b3:35:0a:de:b5:1e:62:a1:0e:64:b0:b8:
                    d2:28:7d:4b:49:6c:f1:20:15:12:05:58:f4:86:a0:
                    1c:ff:d8:02:4b:98:c3:11:5a:08:df:8f:77:e3:df:
                    be:da:19:99:9e:6c:aa:20:fd:ec:59:55:73:98:12:
                    f9:e2:53:bf:39:3c:18:87:44:6c:a7:f8:ce:34:85:
                    fe:6e:a9:a9:9a:ea:f1:c5:cc:bf:91:5d:96:bb:9f:
                    29:b1:1d:67:60:86:42:a9:cc:76:fa:f7:04:d0:4a:
                    e8:b5:b1:95:07:ec:37:94:05:28:d5:ba:2c:27:e1:
                    91:4f:cb:e8:2e:4a:ac:1c:4d:e3:42:70:ed:7d:21:
                    3e:67:f8:1d:9a:b4:fd:6d:53:53:b8:dd:02:cc:5d:
                    51:de:55:ad:00:08:9b:9e:6b:e0:31:47:94:42:07:
                    40:51:00:01:eb:ba:9f:80:ee:79:20:b7:15:be:1f:
                    73:ce:ff:0e:7f:03:53:5b:ea:bd:df:33:0b:3c:f8:
                    d1:59:10:4b:25:6f:30:63:02:d7:6b:14:3e:27:e7:
                    04:a9:e0:b7:14:9d:0f:dc:12:67:c9:7b:35:1a:83:
                    28:a9:ab:ef:e9:d1:47:4a:6e:4f:a5:e7:db:09:55:
                    df:02:e2:5b:f4:9d:74:dc:78:7b:7d:7a:b1:3b:0c:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:31:75:3C:14:63:BE:69:B3:02:CE:45:68:F5:27:64:0D:9A:E4:A5
            X509v3 Authority Key Identifier:
                keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:55:97:bb:f4:ab:8b:51:d4:75:e4:ea:de:ae:11:89:e7:93:
         dc:5b:1f:3d:60:a8:a0:69:c8:5c:e7:e7:2b:48:69:56:1d:14:
         f4:2c:3b:0c:64:5e:0a:cb:35:44:cb:db:fd:b1:e9:86:1f:12:
         49:e0:7c:6f:16:0f:a6:8b:23:25:15:9d:41:03:0a:d6:23:c5:
         11:ec:57:53:10:ba:2d:93:97:3b:ce:3b:5c:cf:89:81:d7:c7:
         47:ea:c0:27:a4:89:b3:f4:fa:1c:24:ef:f2:e3:54:ef:43:81:
         3e:ea:ca:62:61:69:14:ae:75:a2:38:78:af:5a:ef:7a:2b:56:
         69:e5:c4:36:e9:51:aa:73:2a:1f:aa:95:96:3b:10:aa:21:a5:
         e4:ff:b8:5e:3b:04:c7:81:89:f9:aa:18:dd:65:5b:00:e8:5b:
         37:9e:27:76:55:bb:d7:ca:b7:69:dc:61:75:1f:03:98:a7:17:
         a9:67:cd:62:db:60:6c:a9:3c:53:3d:13:11:5b:7b:9f:7e:09:
         89:8a:ca:e9:01:83:d3:1b:a1:20:db:22:3e:0e:b9:b2:8a:69:
         53:8e:fe:96:42:e7:4f:40:32:6d:72:71:33:75:83:93:5e:28:
         d3:29:3b:de:b9:f7:9e:5d:6d:f3:48:a1:38:f8:41:3d:33:11:
         96:2b:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:27:40 2026 by rpki-client