Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
File:                     yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft (raw, json)
Hash identifier:          VpxI7ONr1oyfiSjQ0dWwYdrhYbI1uCNDsem/cbGkecs=
Subject key identifier:   91:45:04:9E:97:23:5D:24:97:7D:87:49:FF:34:47:5D:7B:57:6C:93
Authority key identifier: CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A
Certificate issuer:       /CN=A91B4357/serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
Certificate serial:       0581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
Manifest number:          0553
Signing time:             Thu 23 Jul 2026 00:13:12 +0000
Manifest this update:     Thu 23 Jul 2026 00:13:11 +0000
Manifest next update:     Thu 30 Jul 2026 00:13:11 +0000
Files and hashes:         1: yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl (hash: yPccnS4FlEfdtCZO1r9OognqDXtuuRc2pdJabDRUpzo=)
                          2: FB03729A370111F1AC489D14BF833773.roa (hash: AU9dHXjHqTNme6QysdUZa4PCsHy+4a87mRqErQXJ6iA=)
                          3: FC94057A370111F1AC489D14BF833773.roa (hash: JZJalDSQr/IoFea9NxLBWN3ZOZ/DgJ84ZBHO9Nd0bsM=)
                          4: 346A2B4045AE11ECB857890EC4F9AE02.roa (hash: YheXK0UgGEB7Z/3VeNqFrG7TEedt8nnqAV/x4ZuFjYw=)
                          5: 351AC73E45AE11ECB857890EC4F9AE02.roa (hash: 1fMszEVclnRMOM/POK57IbuTqKPaZ6i1HdvWDw7RSC4=)
                          6: 35A2418C45AE11ECB857890EC4F9AE02.roa (hash: 1S4BYpNOabN3d/LnYoJIPgaMIRT82AJo33zkA94dJ9s=)
                          7: 52B98FDA46AF11ECB113AA4BC4F9AE02.roa (hash: xY/esRTHmVcSEnmni9qKfYB8APe7aNUaqGzW5UYshQs=)
                          8: FBB1514E370111F1AC489D14BF833773.roa (hash: ZkDSUGhIzcmjSgjRJZ9cZlXr5/YHk19HP0IIMCiijuA=)
                          9: 9896BA2EB6DE11EC8DB17172C4F9AE02.roa (hash: dG9p093s1Ue0rrA4RBzIOjl2As439gOH8sz6VM6eiUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4357, serialNumber=CB1656811D08457993E8D81B9F9798DAD616971A
        Validity
            Not Before: Jul 23 00:13:11 2026 GMT
            Not After : Jul 30 00:13:11 2026 GMT
        Subject: CN=6a615c98-e2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:b7:34:1a:b5:8e:ab:5f:09:1a:8b:37:45:
                    db:0d:54:f5:0a:21:45:43:c0:e2:8e:ee:08:e8:4e:
                    1f:ce:dd:6c:cd:9e:0f:ff:d1:4e:37:07:05:88:09:
                    f7:b9:df:56:bc:53:4c:00:09:f8:20:3c:00:9e:5f:
                    06:33:74:fa:f0:04:08:76:0a:aa:8a:c0:ac:95:03:
                    9a:84:70:27:17:9e:ac:2f:1a:55:7f:81:55:de:25:
                    74:35:5b:df:8b:7d:85:e3:3d:5f:6c:92:5b:8c:1a:
                    42:ed:5b:05:db:4e:1b:56:81:17:07:51:fa:5d:f2:
                    c4:58:8f:fe:14:b1:fb:c8:50:87:73:d7:4c:7a:ee:
                    98:9d:29:25:73:cc:8d:a3:d6:a9:3b:5f:41:1b:04:
                    bd:12:75:9e:5d:9b:db:c2:bd:5a:6c:72:d2:96:ef:
                    dc:50:c5:78:0e:38:b7:ef:aa:d2:ca:9e:e4:fd:08:
                    a0:67:0f:89:d2:a0:54:d8:ea:c7:55:56:a6:43:ca:
                    d4:fb:70:da:42:5e:b5:04:0b:9c:15:81:97:5e:e7:
                    e0:ba:cf:2a:ec:e3:fb:48:4f:db:33:ef:42:4f:99:
                    7b:cc:04:bb:cc:a1:0f:ef:d0:d7:bd:a1:30:73:34:
                    57:c6:4f:ff:7d:f2:fc:07:b1:eb:e3:e6:16:10:76:
                    4d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:45:04:9E:97:23:5D:24:97:7D:87:49:FF:34:47:5D:7B:57:6C:93
            X509v3 Authority Key Identifier:
                keyid:CB:16:56:81:1D:08:45:79:93:E8:D8:1B:9F:97:98:DA:D6:16:97:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4357/B84B10EC45A811EC8B140558C4F9AE02/yxZWgR0IRXmT6Ngbn5eY2tYWlxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:93:69:11:d2:1e:2c:16:91:2d:38:2f:87:b3:a9:6a:12:
         14:7a:01:fe:1e:b7:6f:b2:c6:8e:fd:8e:f3:57:85:96:6f:f0:
         f0:3f:b4:41:63:aa:c3:76:f8:db:9a:c6:cf:13:55:5e:de:9c:
         cb:c1:40:ca:af:34:ad:54:2f:0a:96:9e:64:11:9e:cc:88:4b:
         34:52:ef:be:40:3d:37:13:f4:c5:48:3f:41:0e:01:d5:51:4e:
         4f:a8:f7:cf:89:d6:b0:0b:1d:10:60:ea:95:cd:0e:75:af:f5:
         bc:54:06:03:3a:dc:6a:b8:7c:05:ec:75:2c:6a:bc:82:60:2c:
         72:f8:b5:ca:86:0a:ac:34:57:f7:53:98:6b:86:85:05:39:7d:
         da:d0:26:ec:d6:01:bf:e2:32:23:6d:22:cf:15:c6:b1:7d:c9:
         60:5f:4e:2d:6a:9f:ab:34:0c:95:d0:1d:db:da:28:80:73:7b:
         65:e7:69:1d:f3:6f:4e:58:1d:12:d2:be:3e:d1:f9:9a:8f:00:
         23:02:30:19:e0:00:0f:b4:c3:1a:b8:f2:ea:7c:88:cb:3c:55:
         74:8e:02:cb:bf:db:42:aa:57:8e:4d:2d:68:3a:6c:8e:90:33:
         90:49:29:c8:5b:36:7d:85:61:8e:77:e9:6b:ae:8e:5f:96:86:
         ac:bb:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:06 2026 by rpki-client