Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
File:                     yIwqqUquXvn01JfoOHo53RvOk50.mft (raw, json)
Hash identifier:          QYQI9+RhsoNXYTkEwXCtSB6LTDBuytX9exf5BZ0nxbM=
Subject key identifier:   90:15:DA:0D:DA:B6:FF:7D:B3:A7:0D:E2:AA:C0:3F:80:FB:A4:F2:01
Authority key identifier: C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D
Certificate issuer:       /CN=A91228E2/serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
Certificate serial:       0208
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
Manifest number:          0203
Signing time:             Thu 23 Jul 2026 04:24:57 +0000
Manifest this update:     Thu 23 Jul 2026 04:24:56 +0000
Manifest next update:     Thu 30 Jul 2026 04:24:56 +0000
Files and hashes:         1: yIwqqUquXvn01JfoOHo53RvOk50.crl (hash: 1LjEnB7dZKSlWw082d+FyVzblFdVQeJASrfxGjPNWMM=)
                          2: EF98E11472E211EEB93A4F72C4F9AE02.roa (hash: g62n6MuaUWV6TMBxgw6JfizdoiYQ10/TclDcRrurcgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl
                          rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91228E2, serialNumber=C88C2AA94AAE5EF9F4D497E8387A39DD1BCE939D
        Validity
            Not Before: Jul 23 04:24:56 2026 GMT
            Not After : Jul 30 04:24:56 2026 GMT
        Subject: CN=6a619799-1337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:5a:27:e0:a5:b1:ce:9e:1f:73:72:81:9c:
                    1a:3d:38:58:a1:94:2b:69:70:4f:45:72:75:2a:bb:
                    2a:37:c3:64:dc:5e:0e:68:e7:11:f3:f1:9f:c4:1a:
                    6f:19:3c:71:9d:2e:cd:b3:17:e7:f8:b6:d8:56:be:
                    b2:b7:dd:74:d4:5a:cd:69:21:a0:cf:86:e0:5f:d4:
                    e2:a1:2d:28:c1:19:e8:13:41:42:82:b2:50:3b:f3:
                    a4:0b:f0:bf:88:08:ca:a8:c1:da:0d:9a:7d:bb:d9:
                    90:0f:2f:14:47:57:72:6f:6b:0f:5c:98:65:4d:23:
                    b4:f7:b5:0f:6e:9d:b7:5b:a3:88:17:14:6d:4f:4b:
                    ae:ec:22:d7:d2:ec:9f:5c:83:ab:8e:b1:60:9a:e9:
                    55:d7:cf:3a:a3:87:56:b8:dd:7a:e6:58:51:ac:e9:
                    22:8c:ee:8f:e6:e1:6b:79:b7:87:da:b1:9e:ff:f2:
                    26:1c:90:63:2f:6a:1f:4a:1d:ed:c0:1f:c3:a7:d9:
                    56:f5:9b:0c:a1:43:82:e6:b9:2c:20:31:ac:7c:52:
                    37:b8:b6:29:c8:cb:09:e8:0c:c4:0e:a0:4f:bc:bb:
                    3f:c8:3a:98:15:be:15:cb:f7:7f:da:fa:80:c5:c3:
                    44:81:6a:2e:94:77:fd:a3:18:b1:89:87:c7:43:33:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:15:DA:0D:DA:B6:FF:7D:B3:A7:0D:E2:AA:C0:3F:80:FB:A4:F2:01
            X509v3 Authority Key Identifier:
                keyid:C8:8C:2A:A9:4A:AE:5E:F9:F4:D4:97:E8:38:7A:39:DD:1B:CE:93:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIwqqUquXvn01JfoOHo53RvOk50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228E2/CE5406F672E111EEB0781619C4F9AE02/yIwqqUquXvn01JfoOHo53RvOk50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9c:7f:64:5a:56:c2:7c:35:e8:10:c1:d8:f5:70:e3:db:13:
         2c:69:df:00:99:c0:c6:e6:1e:f6:e2:4e:d3:66:23:47:76:f6:
         80:f1:83:86:c5:5a:00:03:82:14:4b:08:1c:42:53:62:81:0f:
         6b:db:fa:b5:f3:03:e5:09:88:2e:8e:e9:c9:50:4f:3b:94:63:
         08:53:9d:e0:92:56:ea:e3:d6:0a:f9:65:ee:56:36:ef:5b:fa:
         8a:a0:39:c2:55:09:38:83:74:82:cc:78:1c:1e:42:92:84:fe:
         19:b9:1d:24:7f:64:81:81:46:a2:8d:c4:67:3e:cd:ce:a5:d2:
         35:b0:cb:26:fb:b2:2a:3d:0d:33:4f:e6:b4:fb:7f:37:07:17:
         a5:46:a5:87:75:00:19:ff:8f:87:af:88:c9:9e:b4:6d:4e:b8:
         26:4d:81:4a:c1:c7:6d:5d:85:d1:dc:5b:47:e4:21:af:c4:d8:
         4a:d6:f3:96:18:3e:76:2d:b7:ac:59:74:5b:66:2b:1d:1a:3d:
         8b:2f:a5:cd:f8:e9:20:a7:37:8c:76:b8:2d:a4:2f:0a:86:e8:
         da:52:83:3b:07:7b:e0:1a:a6:d8:f0:01:10:1c:73:02:20:c4:
         2a:2a:f7:ac:be:9e:ee:64:7c:bd:78:de:18:c4:30:36:86:e7:
         39:c0:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:32:57 2026 by rpki-client