Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          MCwA5PSyqboN+c7JLGgPzeAUZeCkJpL2TKoVdj2tvdQ=
Subject key identifier:   90:32:1D:4F:64:36:1B:59:00:D1:4B:D1:BD:83:05:1C:D5:B7:DC:D6
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          D3
Signing time:             Mon 27 Jul 2026 08:52:06 +0000
Manifest this update:     Mon 27 Jul 2026 08:52:06 +0000
Manifest next update:     Mon 03 Aug 2026 08:52:06 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: BqyZWZnWWoI6HUHkcV4ygjrDIz0h0pZv/jWeN3QFWDc=)
                          2: 9F9EF74086A111F18D87851971A30FBC.roa (hash: MFU9g1zLut/X+3qK5+QNkUBcEhI1pfxDqvyTIelsUy4=)
                          3: E4A2EB14869F11F1A80CEA8D6FA30FBC.roa (hash: nTd6ul7s0Xr3xhAkARstJPtokxzWA2PMPd2a9/DbiOQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Jul 27 08:52:06 2026 GMT
            Not After : Aug  3 08:52:06 2026 GMT
        Subject: CN=6a671c36-ff53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:ee:2e:21:94:4a:28:58:56:b2:10:5f:21:
                    07:e8:f9:d8:74:84:f8:dc:15:4c:d9:39:4a:6d:89:
                    62:0f:a2:41:02:34:93:4a:cd:6e:b9:df:31:dc:f3:
                    3f:fc:3c:34:a3:dd:92:d4:bb:e0:68:ea:1f:33:f7:
                    88:91:6b:9b:b9:74:37:61:44:6a:bf:64:36:9f:43:
                    68:79:46:fc:f7:5b:0c:3d:27:3e:4d:4b:10:21:b3:
                    b1:85:61:5c:22:10:dd:ab:ea:2d:50:7f:95:89:ff:
                    b7:24:ec:fc:90:ed:93:c1:06:54:61:73:ce:8e:e2:
                    e1:de:70:fa:45:b1:b7:80:a0:63:7d:99:8a:63:07:
                    a4:0f:81:91:ac:87:c9:04:7c:05:d4:0e:b5:bc:3b:
                    d1:3d:8a:56:fc:f7:7a:48:52:97:c6:b5:e5:f0:55:
                    57:32:97:92:bf:74:b8:04:08:48:74:5f:af:a7:11:
                    d3:ff:77:9d:37:e1:c1:fe:be:8f:ea:f2:f5:ca:db:
                    04:d0:9c:02:ed:7f:71:03:5e:08:64:50:25:b8:60:
                    88:dc:c2:1d:8a:9b:98:bb:a2:f5:1a:18:d1:ed:5d:
                    7f:52:36:90:b0:ca:e9:b3:5a:6c:00:99:d2:3e:17:
                    7e:27:bb:f7:fd:20:99:f1:6d:63:97:b6:3d:ee:60:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:32:1D:4F:64:36:1B:59:00:D1:4B:D1:BD:83:05:1C:D5:B7:DC:D6
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:99:6b:28:bc:19:14:4d:a8:7f:2b:e1:d7:25:4b:ea:ae:09:
         d5:41:35:15:14:85:76:25:28:8b:0b:08:ce:d6:09:28:a6:6d:
         0c:52:41:4a:1c:20:1b:75:c8:39:a8:21:d6:7e:9a:70:0f:17:
         5a:65:15:42:71:b1:dd:4b:e3:47:9d:28:6f:84:e4:8e:87:09:
         6a:df:dc:31:72:01:57:ca:9f:0e:e5:64:21:7b:e2:6a:10:f3:
         39:16:8d:97:f3:f5:10:bb:8f:f5:77:e9:ab:8b:76:2e:88:57:
         4b:84:93:9d:cb:3d:0a:06:b9:d9:ce:6f:1e:35:42:b2:b7:39:
         3b:e1:0d:f4:21:b3:89:92:1c:57:5d:81:2f:e0:37:74:96:8e:
         c6:c3:f4:5b:1e:65:67:e4:3b:4e:67:85:d5:39:1d:9b:58:28:
         39:40:4c:7e:3d:15:29:3f:66:0b:b3:e7:ff:86:66:fa:4e:2b:
         f5:41:ae:1f:6f:58:e0:4d:a7:28:1c:d1:1a:6f:75:f3:a5:25:
         c7:ae:46:8f:7c:63:33:c0:97:30:26:d0:43:c4:45:b1:24:be:
         e7:0c:f3:9e:97:2c:75:db:f8:47:57:2f:12:e9:cb:a9:48:a2:
         62:cd:b7:b3:ad:39:d2:cd:c4:42:87:77:b9:87:20:e7:3f:c5:
         2c:fc:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:46 2026 by rpki-client