Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File:                     y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier:          CtKki4HkOSzZWGfvyab4Sh9/HKL62ovZtoaGB6Zwsig=
Subject key identifier:   22:97:34:F1:6E:64:EF:EB:03:1B:CD:0D:5F:49:DB:A4:8F:EE:4E:1C
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer:       /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial:       0C03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number:          0E3A
Signing time:             Wed 22 Jul 2026 19:11:09 +0000
Manifest this update:     Wed 22 Jul 2026 19:11:09 +0000
Manifest next update:     Wed 29 Jul 2026 19:11:09 +0000
Files and hashes:         1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: FJN8i+3d0OMXMHo04zIHIt0mFdZsbEwdL0XL8L1kPeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
                          rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
        Validity
            Not Before: Jul 22 19:11:09 2026 GMT
            Not After : Jul 29 19:11:09 2026 GMT
        Subject: CN=6a6115cd-ef76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:71:47:4b:90:16:84:ed:5d:5b:57:8c:1c:
                    cc:4c:5b:89:8e:b1:1a:b9:07:6d:c0:49:a5:77:2f:
                    a0:2c:d1:c9:65:bc:8d:23:1e:ae:3c:a6:85:90:40:
                    5a:c2:8b:aa:2f:63:e8:31:8e:54:df:dd:02:cd:ad:
                    78:27:7c:8b:45:cc:29:ff:05:38:d2:66:af:8c:3e:
                    39:53:fe:0e:d3:15:80:e5:7c:43:3b:26:72:35:ca:
                    b1:c3:3f:34:e6:a7:0c:54:4e:6b:76:ee:1a:8c:98:
                    44:69:1f:bf:3d:d6:73:5b:d5:41:3e:86:8a:ae:c5:
                    89:e8:32:64:38:a8:8b:a4:63:15:74:d9:01:da:c1:
                    4f:42:8f:46:1d:48:f9:df:87:d4:87:d1:c6:3f:a9:
                    21:8a:62:5c:9f:6d:4e:94:77:51:b5:02:02:1a:89:
                    f2:a0:a8:11:2f:2e:76:61:f9:b0:48:a7:cb:07:bd:
                    c4:69:47:39:60:06:00:f2:9b:b0:e9:ae:85:31:11:
                    3d:35:1f:72:1f:e1:d7:4a:e1:c4:8e:71:b3:51:93:
                    74:d5:54:88:7f:fe:d2:7d:cc:bb:e6:4d:8c:2a:a2:
                    35:0f:a5:92:e2:68:8c:67:b9:24:84:73:99:df:60:
                    5b:48:8b:dc:3e:a8:cd:b0:bc:91:2f:35:45:ea:ae:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:34:F1:6E:64:EF:EB:03:1B:CD:0D:5F:49:DB:A4:8F:EE:4E:1C
            X509v3 Authority Key Identifier:
                keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:c0:45:25:6e:c7:a9:f6:43:58:60:f2:f8:6d:6f:ac:15:
         aa:a8:c4:a3:b5:1c:46:8c:8a:bf:28:e5:59:9d:a8:ba:01:12:
         91:28:a4:e4:be:b1:b5:06:4d:e3:12:a4:14:64:93:16:e9:5e:
         0f:bb:4e:b8:2e:f8:76:00:09:4f:94:3a:e8:ed:cb:ba:64:44:
         cd:ed:65:67:e5:cd:e9:0f:3d:e3:90:75:fc:87:18:79:7a:38:
         70:0f:70:9e:0c:1f:ac:a9:ee:25:ab:de:48:ca:99:35:50:2e:
         f7:67:c0:db:48:0b:af:60:01:a2:ec:aa:eb:56:0b:2a:a6:0e:
         3a:aa:dd:84:dd:34:4e:73:07:6e:db:7b:e2:55:28:cf:93:d7:
         38:9a:e0:14:f4:25:4b:86:a1:60:ae:7a:2b:83:02:be:33:3e:
         1a:17:95:d3:a5:ae:ac:21:a3:04:ea:7a:02:b5:e8:b7:dd:96:
         38:99:6e:6a:42:a6:d7:31:6a:6d:bb:00:ff:af:f5:46:45:96:
         ad:f5:5a:07:e9:f0:76:65:5f:1d:e6:2b:e1:51:1d:7e:74:30:
         9a:6f:85:7b:89:4e:bc:6f:31:59:2b:cc:c8:88:4b:9d:97:06:
         e8:2c:28:2a:3b:74:a2:e4:fa:64:a9:d3:13:f0:7c:cf:b7:c1:
         98:17:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:04 2026 by rpki-client