Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File:                     yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier:          vN3LOtIYfvxV/qzUDHCIQuI+83/SptyTKyJMCkEUVyk=
Subject key identifier:   F8:DF:20:9C:A3:89:D4:2E:EC:62:B6:63:73:96:1F:DC:72:07:CF:A8
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer:       /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial:       0C04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number:          0BFB
Signing time:             Tue 28 Jul 2026 19:05:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:05:35 +0000
Manifest next update:     Tue 04 Aug 2026 19:05:35 +0000
Files and hashes:         1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: DPhDcrd/MHrG09lzv0o55AJI3lmG+vSuTMmr7gz5WSc=)
                          2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: nsk1UqBSMxXhAmerfIUuT9a9NoDkCJE2EAsvPLMgex8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3076 (0xc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
        Validity
            Not Before: Jul 28 19:05:35 2026 GMT
            Not After : Aug  4 19:05:35 2026 GMT
        Subject: CN=6a68fd7f-ae35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:73:fe:37:b3:99:29:48:fb:59:93:bb:ad:
                    5e:1c:4a:22:a9:76:48:3e:92:1c:cc:73:4d:25:39:
                    27:5d:f9:42:36:1f:d9:34:e6:73:9a:f5:9e:97:a0:
                    f6:74:6f:1a:21:7d:db:eb:c3:15:cc:28:5f:0b:eb:
                    8f:93:9c:ed:fb:70:b5:1c:4f:0a:60:3b:30:d3:f7:
                    7e:2d:68:a6:58:45:3a:ab:a6:c1:96:3c:56:c8:41:
                    7e:6a:c9:ed:50:3b:86:9a:54:a2:d7:9e:ea:4d:82:
                    db:4d:5d:44:7e:d2:30:aa:51:ae:04:26:70:5f:2a:
                    bc:8c:b7:d9:d3:7d:39:17:4a:44:fd:a7:26:c1:bc:
                    41:3e:d5:b7:dd:53:c3:87:7b:9f:f5:38:1e:c9:42:
                    18:3e:f8:45:db:ba:c8:72:e3:07:6b:6d:39:83:8a:
                    56:b5:b0:3b:d8:f1:91:bb:81:bb:8b:89:fe:a0:1c:
                    a4:c1:5a:7d:8a:aa:67:e0:0d:fb:44:91:96:4e:02:
                    fd:cc:30:70:1b:64:dc:c7:47:8a:ce:8f:f5:2b:68:
                    12:f9:fd:76:78:c4:08:b2:91:38:fb:a5:37:22:b8:
                    23:b4:51:6f:12:41:b6:85:d4:e1:c5:c5:bb:d6:f8:
                    ce:0a:42:ac:36:06:75:77:f3:4e:8b:73:1f:ce:40:
                    c3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:20:9C:A3:89:D4:2E:EC:62:B6:63:73:96:1F:DC:72:07:CF:A8
            X509v3 Authority Key Identifier:
                keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:33:e5:83:57:0a:0a:fc:1a:7f:5e:07:03:e8:60:1c:f3:c8:
         6e:3f:25:84:d2:a9:7d:53:e8:35:24:c3:aa:0f:6f:e1:4e:31:
         06:88:1f:44:67:78:73:07:c3:c3:b6:36:57:1d:d4:58:2d:62:
         2d:bf:fd:4d:9a:9c:3f:00:29:92:6a:e7:61:9b:94:d5:a2:4a:
         52:3b:9c:d8:49:fe:8f:35:53:27:0e:bb:73:de:f3:a2:9d:91:
         88:f4:45:52:b2:bf:3a:23:62:88:f6:03:c6:6e:8e:67:c6:a6:
         78:b8:ab:3b:d5:ab:73:92:84:c3:2b:ce:58:37:bf:21:ec:b0:
         b1:b3:a9:ab:2a:22:4f:ac:33:44:72:ab:55:89:87:5d:55:18:
         68:da:18:51:8a:ab:1b:aa:ce:74:d3:a2:1b:b6:5a:e9:59:c8:
         b8:b9:02:6d:ae:36:a2:a5:51:23:29:47:70:98:ae:ad:12:b3:
         8f:27:a8:4f:b1:17:d1:d8:8d:16:a6:6e:2c:0c:34:8c:83:ca:
         4f:e6:4c:48:67:af:b7:cc:e0:1b:47:94:f4:81:13:84:1a:37:
         45:26:33:4f:4f:0d:f5:50:18:d8:0b:c1:7a:e2:86:d2:e2:0f:
         da:47:3c:a2:1e:cc:88:ce:5b:f7:19:bd:2d:e2:b6:08:e7:ac:
         23:39:83:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:23:19 2026 by rpki-client