Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
File:                     2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json)
Hash identifier:          4PcPcjahYEePuhQoxF2oIy18xNYn9xAxoOyA/lf+4to=
Subject key identifier:   9A:B1:C5:ED:A5:C6:4F:00:B9:69:4D:D1:EE:99:A5:DD:81:71:16:21
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
Manifest number:          D7
Signing time:             Thu 23 Jul 2026 08:54:12 +0000
Manifest this update:     Thu 23 Jul 2026 08:54:12 +0000
Manifest next update:     Thu 30 Jul 2026 08:54:12 +0000
Files and hashes:         1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: lr3mNW5aINy74C0f3QrYU9MYPqsVCYXB/e1qUUFIOEc=)
                          2: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=)
                          3: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=)
                          4: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=)
                          5: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Jul 23 08:54:12 2026 GMT
            Not After : Jul 30 08:54:12 2026 GMT
        Subject: CN=6a61d6b4-3545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:69:02:c1:ae:9f:d4:37:6e:8e:d2:60:86:
                    63:95:b8:3c:9f:46:bf:1f:a3:2a:6b:54:3f:0f:f3:
                    e0:5b:40:2e:ce:9b:87:15:ef:86:13:a0:29:31:c9:
                    cc:8c:a8:b4:0b:b2:1f:4d:8e:3b:0d:9f:4e:1d:2a:
                    33:6b:da:33:8a:f6:70:ae:ee:40:c7:e1:f2:83:09:
                    d9:bb:c8:c2:0b:6b:1c:9a:7f:da:d9:26:6d:24:0c:
                    75:a4:ab:97:50:11:33:4a:e1:b5:f3:08:26:42:bb:
                    c9:a7:c1:6e:77:59:70:3c:6c:a1:73:82:7a:ee:59:
                    83:eb:bc:de:78:a7:b0:f8:28:ac:48:27:b4:ed:3e:
                    fd:09:39:2c:41:6c:d7:de:fb:60:d1:6e:69:e9:20:
                    3c:78:e5:96:5a:50:84:d0:50:a4:fc:7a:96:ff:80:
                    82:14:fb:35:06:ea:86:79:1e:6a:e9:74:e9:ef:77:
                    c4:9b:a3:a4:dd:24:27:fc:72:68:22:81:a9:86:69:
                    63:11:86:77:28:d1:83:ae:97:06:af:e2:a9:92:cf:
                    7c:4b:47:fd:8a:2b:0f:b5:7f:ae:28:10:d9:51:44:
                    48:92:98:82:f3:26:f5:5e:09:f5:d9:a5:f9:2e:a0:
                    fd:bb:8c:9f:42:e9:9a:2c:31:7c:e4:69:5c:11:ec:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B1:C5:ED:A5:C6:4F:00:B9:69:4D:D1:EE:99:A5:DD:81:71:16:21
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:67:a8:34:82:d2:87:0c:69:03:e7:6e:66:2c:91:ae:82:
         d5:fd:1f:ba:70:18:90:91:56:20:8d:fb:12:73:88:d7:f3:5d:
         96:4d:37:64:de:0a:ce:09:1e:5e:12:90:51:99:54:9a:ca:51:
         ed:1c:b7:b4:c0:9e:88:6a:0e:79:92:ca:83:7e:64:b9:bd:60:
         75:2f:70:a7:b2:a9:93:79:bb:17:23:72:fc:ee:47:a3:3d:ed:
         d8:b2:74:3e:06:2e:68:14:37:b5:68:42:c8:d8:34:30:0e:2e:
         cc:4e:b0:25:af:8b:e1:95:0b:c8:d9:f9:a9:7a:96:2d:53:39:
         e0:18:47:7c:af:44:61:a4:c9:34:04:99:b1:5b:2f:aa:5a:fd:
         f6:88:46:a2:15:6c:cd:4d:62:60:8e:0f:3d:a2:ec:4c:e5:40:
         5d:4b:53:84:76:bc:2b:ad:b6:a9:a6:6c:df:39:34:52:34:0a:
         6e:cd:8c:58:43:fb:44:37:95:26:54:4a:b9:56:38:bc:3e:37:
         d5:3a:38:f2:50:ad:cb:18:26:e1:1f:fa:de:2c:05:58:41:22:
         4d:b9:64:ab:fc:17:83:8c:e0:81:a9:04:cf:e6:42:16:d1:b3:
         d9:8e:9c:33:b7:2a:4e:96:81:27:72:39:65:b8:73:eb:04:e3:
         ce:0d:e6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:50:49 2026 by rpki-client