Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File:                     1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier:          Fd6PeAZjUiBwRhQ4WAtrFqsgefYdf7krAG8yJ3vWYqs=
Subject key identifier:   E3:69:17:F7:43:15:7C:AC:39:F1:A9:38:F4:6E:63:98:7C:10:0E:C2
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       026A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number:          0DF6
Signing time:             Wed 22 Jul 2026 19:26:07 +0000
Manifest this update:     Wed 22 Jul 2026 19:26:06 +0000
Manifest next update:     Wed 29 Jul 2026 19:26:06 +0000
Files and hashes:         1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: 34IwZcV1Xz7C9BB41wOXmOMm3bTXTq9bYoPiARmSwio=)
                          2: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=)
                          3: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: tr2lD7o9Jj2eezYb6KX+vn/JZs+QxwzBoXg4U7YfC4M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:26:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 618 (0x26a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Jul 22 19:26:06 2026 GMT
            Not After : Jul 29 19:26:06 2026 GMT
        Subject: CN=6a61194f-35b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:98:c9:45:4b:6c:e2:2a:aa:09:f0:44:b0:
                    8d:d2:1e:e8:a5:ad:fa:f3:68:af:f1:3a:92:44:ae:
                    8d:6f:2b:c5:2d:16:08:05:99:06:94:24:54:b2:16:
                    01:c2:ef:46:a5:3f:53:f9:c6:d6:97:f0:0b:32:5c:
                    28:9d:0d:73:60:24:4f:f5:89:8f:f4:bf:e5:70:04:
                    bf:39:76:b8:60:81:16:6c:24:13:cd:fe:72:5c:81:
                    d7:00:60:0d:d8:6e:50:f7:60:a6:20:e6:de:f1:8f:
                    d9:b7:15:17:b2:4f:93:b9:1d:d4:55:2b:37:1c:65:
                    7a:bb:52:db:ac:92:ac:6b:38:a5:fe:84:6f:2a:36:
                    7e:cd:84:ce:d7:26:9f:39:21:4d:0b:f1:f3:59:0e:
                    60:91:9e:0a:84:48:80:b9:3f:69:36:e2:94:8c:19:
                    a5:da:cd:5a:1e:a3:53:38:66:85:57:e3:e4:05:f4:
                    67:8c:26:8f:04:6a:94:78:05:ab:54:7e:d3:3c:d4:
                    e8:f3:43:e6:be:cc:a9:36:0d:02:85:ce:38:34:eb:
                    ae:16:f0:34:cb:2f:c2:69:70:4e:67:d1:af:71:79:
                    fa:75:5c:82:dd:ba:fa:5c:3b:f1:3b:75:9f:54:20:
                    70:80:03:bf:36:b7:4a:ba:48:af:91:89:b1:55:0d:
                    2c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:69:17:F7:43:15:7C:AC:39:F1:A9:38:F4:6E:63:98:7C:10:0E:C2
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:95:06:8d:d4:37:51:d8:f6:a2:e2:a3:00:11:01:72:af:20:
         77:d2:0f:86:24:0b:d5:94:3f:b5:95:0d:e2:5d:a7:88:fc:84:
         6c:a1:0a:f6:aa:62:ca:18:5c:f9:e4:4f:94:0e:a6:53:b1:3d:
         83:f7:00:00:58:23:f5:12:52:ea:23:80:e8:4f:c0:98:be:1c:
         a3:e3:c3:a1:97:95:42:31:79:fa:cb:d0:3e:b1:4f:34:2b:2a:
         bd:99:d9:b1:dd:d6:eb:33:12:d8:01:e8:61:40:82:25:17:33:
         1d:fc:42:51:b9:09:17:ea:97:fd:7c:68:05:16:e5:e6:19:dc:
         14:6d:97:6b:4f:5f:92:1e:2e:5f:da:78:82:6f:bc:3b:71:d1:
         fb:2b:fe:85:19:08:fa:50:25:6f:f8:a2:ec:f9:c2:b7:86:14:
         d1:4d:11:40:15:75:21:2e:2f:1e:a2:09:22:6e:7d:6f:72:fe:
         95:19:82:26:e9:5c:7a:58:b6:45:4e:17:82:44:c7:88:e1:62:
         c2:8b:da:e1:c3:7a:16:fe:49:f8:25:49:e9:01:ac:5e:82:0a:
         cf:06:65:ea:e6:cc:dd:18:79:a7:52:05:d8:63:c5:f5:b2:f5:
         b5:39:d8:04:75:ce:eb:0b:61:bc:09:7a:06:48:f7:7a:3f:c5:
         88:c6:ca:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:41 2026 by rpki-client