Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
File:                     yyTPMxKhYnFYzDraiI5bywxnzqE.mft (raw, json)
Hash identifier:          3G6b2t/OeEzbfkhFGeLbcR3+hjckdEq/HLWPBsbSyUA=
Subject key identifier:   B1:87:20:92:9B:A2:AF:6C:29:93:D2:B8:80:E8:B8:1B:87:8F:63:68
Authority key identifier: CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1
Certificate issuer:       /CN=A9122342/serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
Certificate serial:       0A69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
Manifest number:          0A60
Signing time:             Tue 28 Jul 2026 19:58:00 +0000
Manifest this update:     Tue 28 Jul 2026 19:58:00 +0000
Manifest next update:     Tue 04 Aug 2026 19:58:00 +0000
Files and hashes:         1: yyTPMxKhYnFYzDraiI5bywxnzqE.crl (hash: V5cEtLdKKhNJ4c/ef6eRW7N2YVlFuL0rGGX0SqhgaPQ=)
                          2: 4D23A77E8E8F11EAB30DCA1AC4F9AE02.roa (hash: VM+ufWIxL8v6s4z+EhTaWud7bus1nKbI0TTrUJfbrMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl
                          rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122342, serialNumber=CB24CF3312A1627158CC3ADA888E5BCB0C67CEA1
        Validity
            Not Before: Jul 28 19:58:00 2026 GMT
            Not After : Aug  4 19:58:00 2026 GMT
        Subject: CN=6a6909c8-cb67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:30:4f:43:18:63:72:c7:d0:5c:11:41:6f:
                    47:4c:c0:38:b7:28:a7:c3:2d:3e:f5:6c:b2:37:25:
                    dc:ca:71:01:7a:f7:c2:be:ca:21:e4:2d:41:94:c0:
                    30:5d:75:06:c0:0e:bc:06:7f:bf:c6:1b:d7:d3:2e:
                    1f:a1:14:44:3e:2c:1d:86:b8:16:ba:fe:85:66:37:
                    ee:0e:68:6c:4f:60:a9:f8:2f:ad:d8:09:01:39:63:
                    6f:1a:62:cb:15:62:68:08:b3:52:04:d6:ad:5e:d7:
                    4b:5b:34:af:c7:16:63:44:af:38:3d:11:97:0d:76:
                    d7:41:79:32:e8:8f:64:24:09:a2:29:29:81:09:d7:
                    a1:c7:e1:c1:b0:81:94:81:7b:b9:f3:88:62:f1:48:
                    f9:eb:0f:27:09:02:b5:04:32:0e:5d:9c:88:e3:eb:
                    79:42:4f:8f:b6:0b:3e:69:f1:c7:19:65:07:22:99:
                    34:7c:87:b0:d8:5c:db:2d:64:7e:21:ba:c5:31:ba:
                    48:4e:d6:0e:d7:6f:b7:c9:bc:76:9e:15:1b:ff:05:
                    20:94:cb:23:32:83:30:eb:b3:f7:5b:c3:e7:e2:7a:
                    34:8f:58:a8:ff:14:8c:30:5f:7f:12:c0:1d:8e:db:
                    b4:8b:34:fc:4c:57:37:7c:8d:a0:54:fb:d2:f6:16:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:87:20:92:9B:A2:AF:6C:29:93:D2:B8:80:E8:B8:1B:87:8F:63:68
            X509v3 Authority Key Identifier:
                keyid:CB:24:CF:33:12:A1:62:71:58:CC:3A:DA:88:8E:5B:CB:0C:67:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyTPMxKhYnFYzDraiI5bywxnzqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122342/0B4100C08E8C11EABD345811C4F9AE02/yyTPMxKhYnFYzDraiI5bywxnzqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:82:ac:46:f4:6f:c7:bb:de:23:54:f3:18:92:59:63:d3:ea:
         23:22:e3:f1:cc:8d:2d:ea:19:0e:5c:55:4e:51:21:e3:fd:a1:
         ba:d9:b1:c5:84:d5:ef:c7:88:3d:06:db:40:94:59:f6:d6:2b:
         ae:fd:82:33:05:05:9c:a0:75:f7:e9:bd:11:24:0d:a2:2e:69:
         28:c8:d6:f6:0e:0e:77:d2:43:d1:88:a8:bb:bc:6c:62:bc:78:
         51:49:4d:f1:13:48:1a:ca:35:cb:02:da:02:cf:d9:33:98:77:
         08:73:11:62:56:d2:c7:b9:bf:c8:9f:69:0a:a6:61:79:51:22:
         71:02:ce:0b:d5:a2:08:cb:f7:19:ef:0c:e9:2c:8c:f4:a3:b4:
         fd:64:9d:1e:a4:76:85:01:ff:05:31:0c:dc:0f:ec:ab:94:fd:
         28:83:0f:7a:6d:9e:f0:a3:46:15:21:3a:2b:7e:3f:09:c6:99:
         d6:a8:e0:9c:41:9e:91:38:39:14:8d:4c:3a:b7:0a:ca:25:d8:
         9a:72:dd:9e:49:0a:5a:16:a7:21:c2:5e:c7:ed:89:55:55:4f:
         37:9c:6a:65:83:64:6c:17:86:91:e5:f6:e9:a3:8d:09:49:f2:
         08:d9:9c:ef:14:79:71:a0:a5:60:0d:a6:92:d6:91:e6:36:ea:
         2c:bc:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:30:47 2026 by rpki-client