Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
File:                     y70GgkBePlkg8UsDghSUjF410cM.mft (raw, json)
Hash identifier:          VlbqZcD8YbXKtkeE7Zs8NA73nqnnSPylrakI9T34FCc=
Subject key identifier:   A7:83:D1:D1:C8:4E:64:B8:B9:FC:91:DC:EC:8B:A1:19:38:4C:2D:CB
Authority key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Certificate issuer:       /CN=A916D4BE/serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
Manifest number:          0538
Signing time:             Thu 23 Jul 2026 00:34:00 +0000
Manifest this update:     Thu 23 Jul 2026 00:34:00 +0000
Manifest next update:     Thu 30 Jul 2026 00:34:00 +0000
Files and hashes:         1: y70GgkBePlkg8UsDghSUjF410cM.crl (hash: vNCqZdNlbHmlbAa3GPxvRwH0T/pVQY97xdmPmODVGSI=)
                          2: 6B6833B43D3211F180C94A7884EE528E.roa (hash: gzQgQxyi1t7zAFl1L1PXe5vPjsPRekeb+UDdZ8X5gRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
        Validity
            Not Before: Jul 23 00:34:00 2026 GMT
            Not After : Jul 30 00:34:00 2026 GMT
        Subject: CN=6a616178-861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a9:b5:74:d4:28:06:41:ac:e3:9c:0d:87:9e:
                    e4:5f:53:51:f4:18:f1:98:be:5c:d7:27:2f:6e:9a:
                    74:3d:c4:ff:48:2c:d9:d1:87:47:6d:f7:db:fd:4f:
                    f9:97:3e:0d:20:12:85:f1:10:70:cf:56:d9:c0:08:
                    a9:7e:18:b4:d2:5b:27:b7:88:80:70:09:2a:cc:0f:
                    ce:b1:69:76:f1:40:5c:99:58:b6:37:db:40:a7:08:
                    f5:a9:56:b2:88:89:ea:0f:9f:9b:0f:2c:ab:c2:cf:
                    3f:8c:25:9c:fb:9d:5f:b3:af:13:d3:2f:4b:dc:1e:
                    49:94:2d:af:26:6c:15:30:b1:dd:37:10:d8:d8:d8:
                    5f:b7:ca:04:00:f4:f8:3f:1f:03:29:46:e2:5c:9d:
                    82:45:70:43:c1:b7:73:d2:1e:3a:1b:57:e3:79:35:
                    b9:f9:60:9f:25:ed:29:2f:64:76:db:03:44:2e:a4:
                    d2:43:fd:a1:2e:52:f9:7f:03:94:43:e5:fd:10:a6:
                    6f:98:c0:da:9a:a3:d4:b5:f0:c2:1e:a4:36:fe:1c:
                    50:a1:00:63:5c:8f:96:50:63:59:21:b1:6b:d3:93:
                    bc:da:0e:c9:5e:a5:19:3d:e9:0f:07:c0:8d:9a:08:
                    a6:13:2e:3e:54:e3:92:ff:ab:24:74:d0:c8:fb:55:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:83:D1:D1:C8:4E:64:B8:B9:FC:91:DC:EC:8B:A1:19:38:4C:2D:CB
            X509v3 Authority Key Identifier:
                keyid:CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e3:b2:5f:19:91:2f:db:f7:1b:5d:78:dc:63:05:f1:59:23:
         49:38:96:2b:1d:2d:ca:9d:3c:5a:39:d1:ce:62:c8:21:56:d6:
         bb:2f:05:03:97:1e:ed:9b:12:46:79:7a:92:49:79:ba:f2:be:
         dd:2c:d8:91:84:32:66:a7:dd:74:3c:c7:98:6d:97:c1:33:71:
         ef:ee:98:6a:d8:8b:1d:4c:2e:b9:09:ca:6b:71:6d:30:88:40:
         f2:1c:30:d7:48:82:98:4f:a0:55:01:bc:e1:ca:42:a3:ab:21:
         af:7d:50:c6:6f:77:5f:ee:49:32:75:ee:13:c1:de:32:ff:de:
         ca:35:24:63:2e:a0:d0:c1:1d:65:ed:97:b0:4d:39:05:d5:37:
         6d:c5:01:ba:be:99:3c:6a:03:b7:49:49:d4:96:ea:0e:69:0c:
         38:f7:50:8d:96:84:f1:52:3f:80:31:63:f1:80:62:5d:bb:76:
         17:2e:76:ce:d1:fe:b5:9d:2a:cb:a6:01:94:11:7a:de:10:d0:
         bd:bf:64:84:f4:cb:d0:7a:0c:b1:53:76:d0:1e:fc:00:72:79:
         ce:42:b0:79:b8:82:ff:94:7c:73:ee:e3:24:59:39:84:08:75:
         22:44:71:6b:d6:dc:36:f9:f5:fb:58:42:58:51:44:0e:0f:41:
         45:8a:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:20 2026 by rpki-client