Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
File:                     yoPUPlpeWcd1mxubL72YqUff07w.mft (raw, json)
Hash identifier:          SUzmh9HC0x0tSNjmdzP/FqdDt/YcVbHQWtk3KNCPT7Y=
Subject key identifier:   77:B9:0F:A3:45:3B:4B:C2:9C:23:46:F9:36:41:0C:02:EA:69:08:24
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Certificate issuer:       /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial:       1175
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
Manifest number:          1144
Signing time:             Tue 28 Jul 2026 17:22:20 +0000
Manifest this update:     Tue 28 Jul 2026 17:22:19 +0000
Manifest next update:     Tue 04 Aug 2026 17:22:19 +0000
Files and hashes:         1: yoPUPlpeWcd1mxubL72YqUff07w.crl (hash: 0YoUkDRJWyJ8yrpuLlkZ26hG1RJdb1dWlrBj3LEa5F4=)
                          2: 7B306A34218D11EC87C96D6DC4F9AE02.roa (hash: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=)
                          3: AAAA30A6288411EEAD22D65DC4F9AE02.roa (hash: 7K/QpVAO7JoVbT1z1p+Qj6Yu5pdtMluMhKw9vV8LigY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 17:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4469 (0x1175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
        Validity
            Not Before: Jul 28 17:22:19 2026 GMT
            Not After : Aug  4 17:22:19 2026 GMT
        Subject: CN=6a68e54c-0bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2e:11:ec:d4:19:d3:a7:c8:da:bc:31:c4:c2:
                    2f:73:29:cc:d7:57:c2:29:5a:d9:86:12:ee:49:17:
                    f1:e9:1a:20:dc:ca:c8:c3:ad:51:f6:b7:cb:91:5d:
                    6c:69:a6:f5:3e:19:5e:24:11:49:c7:35:0b:89:9e:
                    8e:83:15:d4:3c:69:67:e3:06:36:8a:00:30:6e:64:
                    ad:6e:67:a7:99:eb:3b:4a:51:d7:44:2f:76:0f:15:
                    9e:e2:41:92:47:a2:84:b9:84:f3:ba:d7:80:26:ee:
                    7b:ff:6a:46:79:23:8f:f0:aa:d1:c9:cd:79:8c:1a:
                    06:26:ef:0b:22:97:32:0e:84:12:79:ac:f4:20:24:
                    32:1b:23:22:fe:6b:5b:44:06:37:12:c8:a6:23:63:
                    ae:86:8a:01:11:2a:a9:12:e7:9a:da:03:66:68:03:
                    d0:ab:ee:bf:27:94:3d:8c:6a:28:b1:7e:06:67:b3:
                    3d:30:66:0b:38:f8:71:97:6b:bc:50:cb:4c:d2:b6:
                    08:91:e2:c3:5e:b4:c6:69:5e:98:f5:9f:ae:4b:50:
                    1b:b1:69:52:67:fa:84:8a:d6:e6:5d:c9:dc:f3:9e:
                    ac:20:9d:c1:3a:5d:1f:0c:f0:61:98:43:e4:c3:cc:
                    98:c0:e8:b9:5f:6d:92:e8:f9:75:5c:3f:7b:af:54:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:0F:A3:45:3B:4B:C2:9C:23:46:F9:36:41:0C:02:EA:69:08:24
            X509v3 Authority Key Identifier:
                keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:53:4f:7b:07:47:28:ff:e5:01:c9:2b:2d:2e:65:2b:ea:3b:
         79:1f:ea:bc:44:5e:11:18:ca:b2:ff:6b:29:e5:f4:1f:98:d7:
         32:f4:bb:8e:42:f1:9b:5e:77:10:be:c3:d7:63:bf:dc:5b:6c:
         71:f2:b9:f1:b2:f6:d9:8f:69:b1:22:a8:11:71:5a:fe:04:47:
         db:22:83:fb:d0:ba:f6:25:0d:7a:fb:f3:30:03:93:2a:e0:36:
         6c:ff:c1:8f:07:ca:e5:86:70:7b:b8:06:f5:67:d9:69:c7:a4:
         6b:19:f9:cd:a2:99:8c:37:68:2c:02:ce:73:24:73:0b:ef:cd:
         3b:8e:e3:95:95:f0:ad:e8:40:aa:30:67:ac:e5:c8:07:8b:00:
         2f:59:cd:e2:ae:73:24:35:c2:8e:bb:2c:a0:c6:38:28:b9:c2:
         24:b7:63:1c:10:46:ee:2a:8c:a9:3f:79:08:80:d0:f2:9d:02:
         bf:43:6e:92:cc:41:b2:81:e1:d9:69:62:74:ba:15:4f:b7:26:
         34:40:3f:54:ff:34:90:62:c5:b8:bc:8a:1a:51:12:8b:be:3a:
         6d:6a:1b:e0:8d:1f:ab:5a:e6:31:0e:fe:a3:83:15:46:45:07:
         9f:be:17:1e:2e:d4:7e:33:f5:d6:73:17:64:7a:76:24:20:8c:
         a9:fd:84:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:54 2026 by rpki-client