Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
File:                     YHYovkVe83m-Zq-dbKm6js3tPwQ.mft (raw, json)
Hash identifier:          89RQgX79gZriWkc/hucZNN11AptvzWGUE0ezKJqOy/k=
Subject key identifier:   E2:27:F7:4C:B9:4A:35:99:03:BF:E9:D3:63:D7:6B:B9:B3:0C:E8:FC
Authority key identifier: 60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04
Certificate issuer:       /CN=A91817E6/serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
Manifest number:          0CCD
Signing time:             Wed 22 Jul 2026 20:25:35 +0000
Manifest this update:     Wed 22 Jul 2026 20:25:35 +0000
Manifest next update:     Wed 29 Jul 2026 20:25:35 +0000
Files and hashes:         1: YHYovkVe83m-Zq-dbKm6js3tPwQ.crl (hash: mLDo26M4ir9qBfJRJG8ceNecipG7i2t1VxmlwPi2TDg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91817E6, serialNumber=607628BE455EF379BE66AF9D6CA9BA8ECDED3F04
        Validity
            Not Before: Jul 22 20:25:35 2026 GMT
            Not After : Jul 29 20:25:35 2026 GMT
        Subject: CN=6a61273f-7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:d5:9a:f9:02:17:55:5a:84:8a:ae:07:7d:
                    fd:63:5c:1a:05:de:d3:1c:27:38:4c:f8:8c:39:17:
                    8a:0e:f6:c1:cc:f0:79:38:3c:14:0c:0f:aa:d0:f1:
                    a0:50:01:a5:87:4b:88:25:4a:68:2f:63:66:7c:4d:
                    8d:c5:53:32:5b:1b:19:e0:bd:31:df:1b:d0:c9:a7:
                    58:d1:a8:b1:50:4f:b1:5e:0d:80:bb:bc:41:a8:9c:
                    9d:f0:98:79:d5:b5:15:da:6f:d0:b2:ae:94:4e:9c:
                    fe:da:45:14:25:f5:3f:e7:2a:72:fc:78:bb:dc:6a:
                    f0:00:1e:2e:78:8c:47:68:37:02:2e:93:85:39:d6:
                    81:ca:0f:89:08:2e:83:a7:43:01:a6:42:36:17:ed:
                    df:3d:e4:aa:f1:71:81:a5:24:4d:c1:6e:f6:ef:58:
                    a9:20:fd:34:db:64:0b:2f:dc:1d:68:59:25:9c:2a:
                    1f:2e:10:d8:10:a6:c1:bd:c5:4d:8b:e5:d2:b4:a9:
                    b2:8f:fa:94:6f:1a:a3:73:13:2c:db:1a:33:89:4d:
                    68:48:73:3d:e2:d2:ac:4e:08:77:12:8a:55:25:1b:
                    a3:8b:83:b6:64:92:7a:c9:58:a8:9c:a9:5c:7c:16:
                    cb:a7:5f:8c:4b:88:d0:81:12:eb:92:11:1d:ec:c6:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:F7:4C:B9:4A:35:99:03:BF:E9:D3:63:D7:6B:B9:B3:0C:E8:FC
            X509v3 Authority Key Identifier:
                keyid:60:76:28:BE:45:5E:F3:79:BE:66:AF:9D:6C:A9:BA:8E:CD:ED:3F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHYovkVe83m-Zq-dbKm6js3tPwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/YHYovkVe83m-Zq-dbKm6js3tPwQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:2e:d9:46:48:0d:f3:ce:ee:8b:8b:4c:6f:04:21:48:2b:e6:
         3c:56:c6:a0:26:62:e4:3a:2c:2b:f0:0d:ca:dc:91:14:5e:31:
         07:e0:03:59:42:6e:4a:63:9f:ac:01:e7:07:5b:ec:34:2c:d4:
         7d:a4:69:bc:fd:c5:ad:23:8c:97:db:db:64:0d:ef:20:df:5b:
         5b:0b:e3:84:e1:bb:5f:8f:ba:a9:05:32:c6:46:d3:fa:a3:58:
         d4:bf:30:fc:76:e9:f5:bc:1d:d4:49:1b:54:36:68:f3:06:4d:
         d7:9e:8a:62:d6:48:85:08:54:b6:c6:bd:1b:40:f3:b3:cc:95:
         a4:b6:ad:38:02:32:95:58:2d:de:9b:8f:25:dd:d6:e7:04:d5:
         b9:39:92:58:2c:e0:e0:c2:82:67:8c:80:6d:a6:1c:fd:9f:47:
         dd:d0:bf:79:5b:e3:5a:04:c3:e1:41:2c:14:29:4b:a1:c6:6f:
         d0:33:62:d3:91:81:73:db:73:73:0a:73:c5:89:93:1a:ef:c4:
         91:84:a9:e4:28:2e:24:99:dc:1c:9d:54:57:ef:8c:cc:02:61:
         8e:cf:79:20:de:60:60:5d:b0:33:84:3d:1b:49:c5:1c:7d:75:
         17:a5:2d:b1:42:3e:7f:5b:b4:f9:d7:60:f7:49:9e:e3:f8:ec:
         e9:e2:e3:0d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE3RTYxMTAvBgNVBAUTKDYwNzYyOEJFNDU1RUYzNzlCRTY2QUY5RDZDQTlCQThF
Q0RFRDNGMDQwHhcNMjYwNzIyMjAyNTM1WhcNMjYwNzI5MjAyNTM1WjAYMRYwFAYD
VQQDEw02YTYxMjczZi03YTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqPVmvkCF1VahIquB339Y1waBd7THCc4TPiMOReKDvbBzPB5ODwUDA+q0PGg
UAGlh0uIJUpoL2NmfE2NxVMyWxsZ4L0x3xvQyadY0aixUE+xXg2Au7xBqJyd8Jh5
1bUV2m/Qsq6UTpz+2kUUJfU/5ypy/Hi73GrwAB4ueIxHaDcCLpOFOdaByg+JCC6D
p0MBpkI2F+3fPeSq8XGBpSRNwW7271ipIP0022QLL9wdaFklnCofLhDYEKbBvcVN
i+XStKmyj/qUbxqjcxMs2xoziU1oSHM94tKsTgh3EopVJRuji4O2ZJJ6yVionKlc
fBbLp1+MS4jQgRLrkhEd7MY1RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIn90y5
SjWZA7/p02PXa7mzDOj8MB8GA1UdIwQYMBaAFGB2KL5FXvN5vmavnWypuo7N7T8E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTdFNi81NTc0MEU3MEIz
QjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgzbS1acS1kYkttNmpzM3RQ
d1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIWW92a1ZlODNtLVpxLWRiS202anMzdFB3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTdFNi81NTc0MEU3MEIzQjMxMUVBQjE5OENFMERDNEY5QUUwMi9ZSFlvdmtWZTgz
bS1acS1kYkttNmpzM3RQd1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAli7ZRkgN887ui4tMbwQhSCvmPFbGoCZi5DosK/ANytyRFF4xB+ADWUJuSmOf
rAHnB1vsNCzUfaRpvP3FrSOMl9vbZA3vIN9bWwvjhOG7X4+6qQUyxkbT+qNY1L8w
/Hbp9bwd1EkbVDZo8wZN156KYtZIhQhUtsa9G0Dzs8yVpLatOAIylVgt3puPJd3W
5wTVuTmSWCzg4MKCZ4yAbaYc/Z9H3dC/eVvjWgTD4UEsFClLocZv0DNi05GBc9tz
cwpzxYmTGu/EkYSp5CguJJncHJ1UV++MzAJhjs95IN5gYF2wM4Q9G0nFHH11F6Ut
sUI+f1u0+ddg90me4/js6eLjDQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:07:39 2026 by rpki-client