Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
File:                     YfcrXpPnk13XngQ1yBj4-acQ9ok.mft (raw, json)
Hash identifier:          ETpyL4duf23Keo9aO/oXwf6cmsp/0VX+azkcx20BHAU=
Subject key identifier:   0E:6E:CE:44:CC:D9:C2:AD:EC:6B:22:08:ED:03:E8:42:33:10:37:89
Authority key identifier: 61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89
Certificate issuer:       /CN=A913FE55/serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
Certificate serial:       D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
Manifest number:          D1
Signing time:             Thu 23 Jul 2026 08:30:18 +0000
Manifest this update:     Thu 23 Jul 2026 08:30:17 +0000
Manifest next update:     Thu 30 Jul 2026 08:30:17 +0000
Files and hashes:         1: YfcrXpPnk13XngQ1yBj4-acQ9ok.crl (hash: zK6IQ8/TyAoMy67KIPuqpAg8UUscy325OqXLOxaloRA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=61F72B5E93E7935DD79E0435C818F8F9A710F689
        Validity
            Not Before: Jul 23 08:30:17 2026 GMT
            Not After : Jul 30 08:30:17 2026 GMT
        Subject: CN=6a61d11a-0efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:b8:16:cc:37:e7:fc:dc:58:eb:50:75:34:
                    0a:62:53:e8:a6:a6:80:55:e1:d9:6a:78:13:1b:9a:
                    30:be:97:2a:a8:43:28:08:cf:58:dd:cc:3b:ea:f1:
                    89:fb:cb:71:00:4c:a0:09:e3:a4:37:f3:ff:04:e3:
                    5e:4c:be:34:73:21:81:e4:75:a6:db:22:ea:dc:63:
                    ae:18:8b:01:ad:e3:ee:75:50:a4:bf:8b:47:8b:08:
                    1d:98:ab:49:0e:5b:46:e8:6b:83:b1:73:99:01:b3:
                    28:26:46:1c:6b:44:5b:3d:95:d0:0b:0b:ab:d7:7e:
                    e6:d8:c2:25:ba:e2:47:45:f0:25:b8:69:41:2e:b5:
                    2b:bd:f7:03:a4:d4:1f:02:53:19:92:44:5e:bb:07:
                    ac:ec:51:d7:a6:1c:6d:68:32:cc:98:b0:37:61:1f:
                    02:0e:ca:41:d3:0b:0f:ed:cd:24:43:86:9e:6b:e5:
                    74:55:89:15:a7:0d:9f:4c:c5:54:41:fd:46:50:01:
                    0e:5f:7a:38:08:7f:99:9f:83:00:50:0f:14:24:c5:
                    fd:57:15:0a:2a:92:48:d2:ac:ca:a5:bc:2e:9f:72:
                    54:85:8b:d0:0a:08:a2:4f:6c:7b:c9:18:38:3b:bf:
                    4b:03:85:b2:7c:5c:98:ae:35:fc:5b:91:d7:fc:27:
                    77:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:CE:44:CC:D9:C2:AD:EC:6B:22:08:ED:03:E8:42:33:10:37:89
            X509v3 Authority Key Identifier:
                keyid:61:F7:2B:5E:93:E7:93:5D:D7:9E:04:35:C8:18:F8:F9:A7:10:F6:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfcrXpPnk13XngQ1yBj4-acQ9ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/2D457800473B11F08336F75CC4F9AE02/YfcrXpPnk13XngQ1yBj4-acQ9ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:82:66:2a:77:f0:41:84:20:7f:89:b5:ae:6f:4c:90:1d:8c:
         3a:27:68:df:41:6b:e6:9f:fb:17:9e:5b:23:7d:1a:6f:be:b9:
         8f:46:92:61:9b:25:88:a9:be:5d:c1:59:af:d7:79:96:7f:f8:
         81:ce:82:bb:36:dc:8a:ef:fd:17:8d:e4:61:26:b5:cb:b6:ca:
         27:9e:62:14:7d:4a:4c:54:e2:cb:c9:34:8d:5a:3f:e4:0a:61:
         bc:74:cf:b6:bc:07:9e:1e:34:ee:92:af:b3:08:75:69:00:29:
         00:d8:71:b8:26:b8:c4:ae:e3:ee:b1:12:f9:8e:1e:f0:aa:57:
         9f:10:1f:cc:97:75:35:46:7f:f8:eb:2d:8d:f9:57:c6:dd:3c:
         ab:be:85:33:5b:9f:60:fb:4a:b6:d8:51:f8:47:1f:af:60:b0:
         59:83:ca:de:cd:13:dc:78:d8:db:a5:17:a7:71:07:91:3b:2e:
         de:f7:16:ee:85:2a:eb:ec:81:79:4a:70:27:f7:5b:83:a4:d0:
         34:36:aa:4d:ad:19:01:8c:f2:c9:21:80:0f:ce:68:8e:6e:c3:
         31:93:4b:c9:99:69:3e:30:93:23:dc:54:29:69:5c:fc:8f:ca:
         25:8f:04:ca:77:d8:62:f2:35:91:74:2e:d8:d4:2b:07:93:28:
         9e:86:d1:22
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZFNTUxMTAvBgNVBAUTKDYxRjcyQjVFOTNFNzkzNURENzlFMDQzNUM4MThGOEY5
QTcxMEY2ODkwHhcNMjYwNzIzMDgzMDE3WhcNMjYwNzMwMDgzMDE3WjAYMRYwFAYD
VQQDEw02YTYxZDExYS0wZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Nq4Fsw35/zcWOtQdTQKYlPopqaAVeHZangTG5owvpcqqEMoCM9Y3cw76vGJ
+8txAEygCeOkN/P/BONeTL40cyGB5HWm2yLq3GOuGIsBrePudVCkv4tHiwgdmKtJ
DltG6GuDsXOZAbMoJkYca0RbPZXQCwur137m2MIluuJHRfAluGlBLrUrvfcDpNQf
AlMZkkReuwes7FHXphxtaDLMmLA3YR8CDspB0wsP7c0kQ4aea+V0VYkVpw2fTMVU
Qf1GUAEOX3o4CH+Zn4MAUA8UJMX9VxUKKpJI0qzKpbwun3JUhYvQCgiiT2x7yRg4
O79LA4WyfFyYrjX8W5HX/Cd3vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5uzkTM
2cKt7GsiCO0D6EIzEDeJMB8GA1UdIwQYMBaAFGH3K16T55Nd154ENcgY+PmnEPaJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkU1NS8yRDQ1NzgwMDQ3
M0IxMUYwODMzNkY3NUNDNEY5QUUwMi9ZZmNyWHBQbmsxM1huZ1ExeUJqNC1hY1E5
b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lmY3JYcFBuazEzWG5nUTF5Qmo0LWFjUTlvay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkU1NS8yRDQ1NzgwMDQ3M0IxMUYwODMzNkY3NUNDNEY5QUUwMi9ZZmNyWHBQbmsx
M1huZ1ExeUJqNC1hY1E5b2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWIJmKnfwQYQgf4m1rm9MkB2MOido30Fr5p/7F55bI30ab765j0aSYZsliKm+
XcFZr9d5ln/4gc6Cuzbciu/9F43kYSa1y7bKJ55iFH1KTFTiy8k0jVo/5AphvHTP
trwHnh407pKvswh1aQApANhxuCa4xK7j7rES+Y4e8KpXnxAfzJd1NUZ/+OstjflX
xt08q76FM1ufYPtKtthR+Ecfr2CwWYPK3s0T3HjY26UXp3EHkTsu3vcW7oUq6+yB
eUpwJ/dbg6TQNDaqTa0ZAYzyySGAD85ojm7DMZNLyZlpPjCTI9xUKWlc/I/KJY8E
ynfYYvI1kXQu2NQrB5MonobRIg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:00:01 2026 by rpki-client