Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File:                     1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier:          t2UB3O1vYEHE1TQnea7EMF9jAZYaN8AfieEjg6S8tDA=
Subject key identifier:   D5:5E:63:21:B8:43:BE:08:0A:2C:6F:CD:A3:1A:CD:C9:BE:86:A5:4D
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       026D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number:          0DFC
Signing time:             Tue 28 Jul 2026 19:21:38 +0000
Manifest this update:     Tue 28 Jul 2026 19:21:38 +0000
Manifest next update:     Tue 04 Aug 2026 19:21:37 +0000
Files and hashes:         1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: kQCV7DAv29fcX7d+fNE2mQCNfGkBLm/jRC84k+41abo=)
                          2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: tr2lD7o9Jj2eezYb6KX+vn/JZs+QxwzBoXg4U7YfC4M=)
                          3: 21980772889311F09BCDF026C4F9AE02.roa (hash: bV3VCAOcVbgdSch/nYusz9I52dpCIoj+s37MruAcxdM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 621 (0x26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Jul 28 19:21:38 2026 GMT
            Not After : Aug  4 19:21:37 2026 GMT
        Subject: CN=6a690142-ee34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:18:43:a1:62:fe:54:77:f8:4a:e2:e3:b2:
                    ba:6a:f3:1b:b4:3d:3c:da:34:85:fa:cb:68:d2:57:
                    d2:56:5d:54:ac:96:60:b5:5f:ac:2d:7d:41:c3:ec:
                    44:cf:15:02:cb:3f:e0:d6:58:4d:45:ec:0d:a6:65:
                    8a:72:7d:b5:64:37:05:04:ca:91:37:2b:b1:b2:9d:
                    9e:18:41:6b:41:b4:5c:7a:ef:07:53:f7:df:09:bd:
                    14:55:35:a6:5c:79:90:f6:e4:78:90:c9:88:d8:43:
                    db:b9:fd:4b:e4:2c:cd:78:b4:ff:57:6b:c4:53:5b:
                    51:85:c1:6d:6c:72:28:a4:c2:22:57:3d:96:8e:66:
                    a2:e4:aa:6d:42:3c:e6:86:60:61:4a:a5:c0:e8:1c:
                    03:97:dd:15:79:0d:b7:1b:11:db:ed:a5:b4:7c:86:
                    76:54:c0:d3:11:44:b7:d7:74:d2:5a:c8:9c:a6:b7:
                    59:e2:ad:40:44:a8:18:fe:d4:0e:86:a3:23:41:b8:
                    87:be:f8:e5:75:28:23:88:a3:ca:47:ac:44:4c:e2:
                    8b:fb:30:09:d8:08:f2:a6:19:51:56:14:06:20:c2:
                    21:a4:39:4a:a5:00:39:13:58:ef:47:b1:d8:4a:6f:
                    fb:8b:6b:73:70:42:36:18:48:06:30:e1:1b:dc:05:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5E:63:21:B8:43:BE:08:0A:2C:6F:CD:A3:1A:CD:C9:BE:86:A5:4D
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a4:db:a6:80:b0:8c:46:9d:3d:3a:4b:6b:80:08:01:3f:9a:
         81:22:cb:0a:ba:fd:a9:4f:51:0d:4a:59:8e:05:44:51:64:47:
         b9:86:3a:02:c8:42:38:dd:bf:b6:81:7f:12:26:ad:76:ab:74:
         88:62:f0:de:37:49:a2:6a:30:68:ce:3d:42:c5:37:5a:fe:d2:
         12:20:78:8f:eb:5b:10:24:4e:9a:6e:80:d7:8c:95:4d:50:e8:
         61:d4:c1:63:11:57:6e:18:c6:73:c1:f1:26:42:e1:f6:5a:21:
         e5:f4:79:d3:ae:a5:c4:2c:76:31:0f:a0:b6:a0:d8:5f:c2:92:
         42:3d:6e:d5:8a:03:47:a2:1f:12:2e:80:d3:6f:5d:84:03:e0:
         da:02:32:d5:a0:ae:cb:b9:54:a2:ab:82:1f:5f:b3:70:dd:48:
         51:3d:db:49:83:fc:2f:81:8a:c7:47:ff:2d:93:dc:ec:1d:27:
         64:0e:cc:c7:73:e5:bc:3d:6f:56:7a:38:db:35:95:74:f6:2f:
         de:c2:78:c7:a6:47:d9:65:61:07:58:13:b7:64:13:de:5b:1f:
         24:2c:bc:f1:bb:4b:0e:3b:34:36:62:a8:8f:68:06:c1:a1:41:
         72:cb:ed:63:22:a4:84:79:23:7e:22:ee:eb:ce:35:91:58:16:
         87:50:c5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:41 2026 by rpki-client