Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
File:                     0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json)
Hash identifier:          qG/3iOaC1K5covAKd0HV2+kw6yfRYMADkdE0qQGof5A=
Subject key identifier:   8D:88:E6:72:41:93:3A:79:75:4F:68:F9:C8:13:30:EA:19:0E:6E:52
Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23
Certificate issuer:       /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
Certificate serial:       02CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
Manifest number:          02C6
Signing time:             Thu 23 Jul 2026 02:17:14 +0000
Manifest this update:     Thu 23 Jul 2026 02:17:14 +0000
Manifest next update:     Thu 30 Jul 2026 02:17:14 +0000
Files and hashes:         1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: nSc+qpe33EWv4KX1QWf65DVBJ7ahTcv1GuxdZq4w/sI=)
                          2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: cZTm/KkF9a4T8yImdIZRFI8s24gigDu7gs4zuRyCmpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B39, serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
        Validity
            Not Before: Jul 23 02:17:14 2026 GMT
            Not After : Jul 30 02:17:14 2026 GMT
        Subject: CN=6a6179aa-5e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:08:1d:13:2d:69:a6:18:d4:76:62:61:b5:
                    62:43:67:e7:44:58:92:ee:fe:ff:53:55:56:e3:29:
                    65:fa:f3:07:4d:97:28:03:1e:9e:93:8f:74:31:27:
                    e4:76:6c:84:c4:4b:18:b0:ea:86:cb:8c:2e:06:d2:
                    a1:7b:e5:6b:33:28:d9:8d:68:de:b7:c1:e6:1e:a3:
                    6f:5e:96:bb:4e:68:c3:32:d2:72:5f:d1:d3:40:33:
                    ec:85:8e:3f:b6:f9:36:12:50:20:13:ef:63:ae:e4:
                    87:79:d0:41:96:09:8e:dc:ff:fe:e9:3a:f4:ea:55:
                    68:a0:98:f9:ec:ad:82:bc:32:96:27:69:a4:7d:4c:
                    70:b8:22:70:53:72:be:9c:5c:24:ce:b6:b5:e5:fe:
                    34:1b:7b:1b:49:b3:00:6d:d6:1e:e7:c4:9f:bc:ae:
                    f0:fa:5a:de:05:fc:b5:e0:58:d9:1c:58:ca:6f:96:
                    62:cf:c8:a4:3d:61:6c:a0:b0:f6:d9:cb:ee:7b:51:
                    8c:51:99:48:a4:ad:b7:e0:53:7c:c6:c3:49:6f:d2:
                    8e:14:20:2b:d9:89:ed:8a:75:b5:c4:7b:a5:c1:cb:
                    71:47:84:30:23:19:33:d0:9b:45:f8:b2:f0:72:86:
                    28:7e:7a:9a:ec:b1:85:d3:b3:38:77:60:7d:35:ff:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:88:E6:72:41:93:3A:79:75:4F:68:F9:C8:13:30:EA:19:0E:6E:52
            X509v3 Authority Key Identifier:
                keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:39:de:78:3d:bc:1b:fa:34:ef:d5:56:ea:94:eb:69:ca:
         e1:39:16:ee:f6:02:0f:83:b5:08:6a:8b:ac:6b:3a:ed:63:e9:
         84:26:5a:74:0b:f6:75:d2:f1:7b:82:cc:b0:c2:ba:74:65:0a:
         a1:79:9d:85:20:64:fc:40:d2:e4:a2:fa:26:b5:98:f2:0c:97:
         5e:89:b6:48:19:74:33:14:53:bd:41:24:bb:78:cb:85:5d:c4:
         6a:39:d5:97:df:7a:3c:0a:a6:66:72:c6:bb:5d:d4:b2:41:d8:
         7d:94:ec:e8:e9:be:f9:45:df:72:b3:ff:be:28:79:17:e5:a2:
         bc:7a:ad:d1:95:59:b5:e9:c4:87:88:d4:a1:bd:4f:3f:c2:fd:
         27:bf:f2:28:01:51:68:1b:f0:c1:f4:07:12:fd:2e:f4:84:59:
         e0:20:5a:fc:39:57:2c:c5:d7:2a:f2:54:7a:8e:7f:86:ce:7e:
         ed:36:45:56:df:26:1d:cb:fb:f0:41:f3:e8:d6:98:2b:87:31:
         15:71:fd:4c:f2:e2:d3:27:db:ed:52:ae:b9:7b:38:b7:87:16:
         f6:06:c5:6c:c1:fd:77:9c:b5:57:34:9e:a8:0d:d6:eb:83:b8:
         12:7f:03:2a:0d:86:10:b2:4a:00:b9:07:a7:58:85:06:01:b1:
         ac:b5:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:14:58 2026 by rpki-client