Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
File:                     LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft (raw, json)
Hash identifier:          Smx+XOopr4xarElzHfma84ktoHDtTrxLsOxsAgi00SQ=
Subject key identifier:   32:F6:A3:A1:B7:FE:87:29:FA:65:21:11:7B:21:24:F9:F1:FD:8C:98
Authority key identifier: 2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25
Certificate issuer:       /CN=A911F85F/serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
Manifest number:          28
Signing time:             Thu 23 Jul 2026 10:50:38 +0000
Manifest this update:     Thu 23 Jul 2026 10:50:37 +0000
Manifest next update:     Thu 30 Jul 2026 10:50:37 +0000
Files and hashes:         1: LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl (hash: yh+TugGW72f3aw49bvn9iriyCPLAjWQ8QsWq5exl41Q=)
                          2: C136E3D4491D11F1954C6C159E833773.roa (hash: dBt147+my2tXexbIdXHCR7XTVGrFV/mewlu8hdTPrGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl
                          rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F85F, serialNumber=2F2CD2C71A111A3749687F4EE71220378A40F325
        Validity
            Not Before: Jul 23 10:50:37 2026 GMT
            Not After : Jul 30 10:50:37 2026 GMT
        Subject: CN=6a61f1fe-0664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:08:87:e3:d9:77:42:0e:8a:e8:41:7c:73:
                    e4:ac:f1:b3:f6:8c:07:a9:fb:bb:7f:47:65:46:05:
                    7d:5f:0a:75:9b:23:dd:30:89:0a:a5:7b:3c:4e:b4:
                    c0:f4:91:cc:55:e6:b0:1b:39:0a:9e:3f:95:02:f8:
                    7c:66:72:7f:a0:e1:c7:0f:97:18:fc:08:f8:92:b4:
                    7c:41:fa:13:5f:6c:33:43:1c:0f:d3:06:4d:0a:c7:
                    ae:71:6c:7f:a6:ea:3e:32:69:71:a6:4f:20:10:13:
                    b7:0d:7a:ed:04:3d:7a:7c:7a:89:ba:5f:04:69:cc:
                    04:20:57:6b:f2:eb:84:e4:cf:1a:c2:db:70:11:de:
                    43:76:e4:54:1f:e7:06:e1:d4:18:95:b9:8c:83:08:
                    22:20:8e:60:20:d7:f4:ed:df:91:e4:29:e5:e2:26:
                    bf:6d:35:c4:0f:71:69:64:cc:5d:79:05:23:80:7b:
                    79:51:6b:d2:15:55:f6:0b:ee:0d:2f:d8:46:e8:f2:
                    d8:fc:2d:d5:93:6e:65:1e:98:d6:12:8e:f0:aa:88:
                    7d:78:86:80:41:12:58:09:67:c9:b3:4e:ea:3a:41:
                    c8:0f:21:69:2f:d3:67:ea:88:1a:53:ae:7a:35:3b:
                    9d:3a:0b:65:23:cb:35:a4:09:d2:1f:b7:b9:e2:fa:
                    fc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F6:A3:A1:B7:FE:87:29:FA:65:21:11:7B:21:24:F9:F1:FD:8C:98
            X509v3 Authority Key Identifier:
                keyid:2F:2C:D2:C7:1A:11:1A:37:49:68:7F:4E:E7:12:20:37:8A:40:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyzSxxoRGjdJaH9O5xIgN4pA8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F85F/88F02B94491C11F1B9ED37A29D833773/LyzSxxoRGjdJaH9O5xIgN4pA8yU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:23:b9:cb:04:02:5b:e8:e1:3e:b7:68:6f:24:b6:40:fe:
         10:8e:42:47:dc:ff:6a:d4:55:71:ad:25:d0:d5:9c:52:fb:86:
         31:ea:0e:66:78:96:83:1f:e9:0f:37:b4:40:2f:04:2d:ec:fa:
         54:81:f0:e7:2e:02:fb:9a:82:01:6c:6f:4b:ce:0f:ac:eb:74:
         92:7b:42:45:ac:61:dd:2b:a5:3e:9a:d0:2b:28:8a:72:e7:87:
         6b:f3:cd:75:b4:14:fa:39:f1:2c:b2:6f:1b:76:e6:22:66:8a:
         bd:e7:c3:40:12:cf:5c:e6:c5:2c:5d:39:2e:17:4f:81:ed:1d:
         b3:fa:59:95:e0:02:28:a4:82:e7:77:eb:eb:3b:6e:5e:e2:c3:
         fc:7c:60:2d:8e:c4:1c:40:cb:89:ca:35:d7:8d:9b:a2:e2:f2:
         2d:ff:85:67:56:21:ad:19:0d:c1:d6:40:9a:c0:e2:f0:6a:df:
         f9:ed:ae:ce:57:58:fc:da:68:e0:d7:bb:a8:b7:3e:89:ec:a4:
         2b:e4:58:4e:3d:d0:91:64:5c:ee:ed:de:27:b6:44:bd:ff:47:
         96:be:25:da:b7:90:dd:5c:29:e9:95:ba:52:90:e1:fe:ae:e8:
         58:5b:68:8f:bd:32:5d:82:73:d8:2b:3a:cd:36:9a:4b:90:8e:
         13:52:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:30:08 2026 by rpki-client