Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          GzQWpRmitau+f0m/HQhUEyCv2Mn7t3udf6b3nExV7pc=
Subject key identifier:   8C:98:4B:15:14:92:1D:4E:87:66:A1:A3:36:82:EF:1C:73:67:E2:0E
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1AC9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          1A08
Signing time:             Wed 22 Jul 2026 16:29:28 +0000
Manifest this update:     Wed 22 Jul 2026 16:29:28 +0000
Manifest next update:     Wed 29 Jul 2026 16:29:28 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: jgkHtvNYGm9ffNVm2MBu205QEYeYnkikG6o1WhHXp1c=)
                          2: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: S48kU8CxEt2lqHTLC9S8NrgXijXkmXA37DtqgyeV7oE=)
                          3: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: bDTPxLseOvL61ps32tmaYLLWWwIIjlAMR+0T2fGKkJ0=)
                          4: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: 4/EukxBvxwNpCMS7ooyYFFEFLFiWKS+tZEGfjyT7PEc=)
                          5: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: K98fdNP3JonvWQFL1z0tA1IGnqJhwEWay1v708+of9s=)
                          6: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: 1vdmt5syl+1wS6hiP5UtJcWq0wH3yVRkEp1VhNBiO/Q=)
                          7: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: Uev6dESbR9jrBR21kOty0yon3IBMPTdsDiYNuwEZ5F0=)
                          8: 897785E099AA11EE9E218060C4F9AE02.roa (hash: FJz55cs86sARz1fNhydUSwjATGGxbZ6Dm+NpUv9tjIg=)
                          9: 4A749E58172211F189FDCC9B0A3D8C67.roa (hash: RzcmoRDXH4lUW30+jkbpA1M2gdPby4cOnD/HlxW7YUo=)
                          10: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: 5JbfjmQAdiDF+GCUG6f8XFUd66i1OEDkHsAU9939sOs=)
                          11: 64F859DA812611EDA597255EC4F9AE02.roa (hash: fn9COoreHDD+zdHLkrrnHjWHJo4W49aJWkK49HG6KBA=)
                          12: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Vrq9FGhzoiIWfc7ihIhJLVXO9ydP/lyM17l84uTIdWw=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: okUwX6lv4rj6a/PEwUlYFCt3tg92HTun7bF/sYnRa58=)
                          14: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: pAcx/VV7rlQiL/jXOdLokpZEvyHSOFVRtz8ZvFzdHjE=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: lqLW/3F13QI9kdxsDx9jr2d/mE+vvyfFH4FKs/rBDIU=)
                          16: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: 8GE5D1VVfYYmKb2E5p4GEmVYlon+zqds8OqnCRSQFzE=)
                          17: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: nAUyfqjMuPkPLszX314RyVVhnb0kyzw6IgC7LxzKX/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6857 (0x1ac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jul 22 16:29:28 2026 GMT
            Not After : Jul 29 16:29:28 2026 GMT
        Subject: CN=6a60efe8-ce9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:f1:aa:23:24:c4:4a:4c:dd:27:28:28:66:
                    82:5b:e4:cf:b6:93:46:2e:d4:b5:d3:fb:07:7d:08:
                    61:73:bc:5c:5d:22:c1:ec:51:a5:07:c7:f1:66:c0:
                    3c:f9:91:59:51:75:0a:de:4e:9b:03:ea:f6:86:5d:
                    cd:60:1e:22:ec:56:b3:6e:0c:0e:cc:8b:f7:1f:86:
                    26:53:e0:0a:59:7b:a4:94:c3:e2:03:6f:3b:88:e6:
                    d7:86:c5:25:0e:d5:62:12:98:9e:a9:e4:c8:b5:a1:
                    ae:28:07:90:e9:98:45:00:39:cc:d0:76:50:2b:3d:
                    28:84:a6:c8:e6:41:2f:c4:e6:0d:86:0b:09:22:ec:
                    8d:39:c0:dc:f9:d4:93:34:49:c3:79:6a:c7:ee:43:
                    9b:a0:1a:e5:53:33:dc:71:4d:de:a8:84:8b:72:8d:
                    99:0f:fb:80:b0:61:a5:9f:f2:ea:3a:aa:d2:f4:17:
                    de:42:4c:aa:70:6c:6d:47:bc:ca:f8:6c:0b:b8:46:
                    a5:77:33:e6:b9:57:62:29:04:9b:95:66:a1:1d:aa:
                    bf:e8:08:e4:e3:5c:f3:d1:81:9a:98:76:f3:d1:62:
                    f7:72:a7:b6:8f:d0:93:c0:a2:82:02:24:9f:6a:12:
                    6c:b0:fd:a3:4b:54:a1:49:a4:17:4b:a7:af:32:85:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:98:4B:15:14:92:1D:4E:87:66:A1:A3:36:82:EF:1C:73:67:E2:0E
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:36:c0:80:45:10:88:e5:f7:76:a6:7c:97:d0:d8:5a:3f:
         20:0d:a5:5f:44:73:1b:c2:7d:a7:12:4d:6f:c0:07:cb:7f:3b:
         1f:de:b6:2e:cf:d2:ef:13:29:4a:94:8c:c1:58:b5:37:ed:97:
         50:20:e1:3c:a3:c8:92:52:e5:03:0b:b6:7f:91:e5:4f:69:54:
         4d:d0:31:9f:14:1a:a5:f7:29:1a:a9:39:93:c0:ba:89:5b:ff:
         7e:6b:6f:4a:44:df:84:7c:d1:47:7b:cf:2c:67:c8:f9:ff:d5:
         ed:c4:50:c4:65:8e:20:d3:fb:02:82:46:ea:03:84:60:a3:0e:
         6f:fa:51:1e:80:14:be:da:38:05:b9:38:79:3c:f4:81:86:2d:
         0a:0b:f3:7f:97:f0:70:27:c4:e1:64:68:0a:9f:17:44:7c:ef:
         d4:f3:b7:45:ca:49:ca:34:1b:25:e0:fb:5f:72:d7:f9:cb:8a:
         e5:7c:15:45:db:6a:ae:8d:84:5e:c0:d1:a1:86:55:ec:a8:71:
         64:de:7e:99:89:09:d4:d2:5e:7c:fa:e1:48:45:de:a5:a9:20:
         ed:44:ce:86:5e:f1:ae:70:8c:3d:54:76:59:4b:5f:44:df:0b:
         ea:92:e6:14:1c:b9:b4:00:21:54:61:04:c6:a8:d7:44:47:ad:
         94:a2:b1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:39:17 2026 by rpki-client