Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File:                     s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier:          9sIv9z6GN0aZtd7hBZ/xuHIVZ1lTFffMKGmvTvxeYGo=
Subject key identifier:   6C:E6:5E:5C:49:0A:DE:EF:07:39:00:56:F8:78:B0:DA:A5:3A:FC:B5
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer:       /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial:       15A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number:          159D
Signing time:             Tue 28 Jul 2026 16:50:56 +0000
Manifest this update:     Tue 28 Jul 2026 16:50:56 +0000
Manifest next update:     Tue 04 Aug 2026 16:50:56 +0000
Files and hashes:         1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: VO+MYmKqNkuvRbmULtur/rNkPkneYOmFFlteIRgUy1U=)
                          2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: TR5agGU/zIk0GyCHwMsitWR6qVN8gmfKUUGH+aQoTx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
                          rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5544 (0x15a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
        Validity
            Not Before: Jul 28 16:50:56 2026 GMT
            Not After : Aug  4 16:50:56 2026 GMT
        Subject: CN=6a68ddf0-52e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:47:c2:9f:03:98:98:ed:ba:8d:3d:49:4b:
                    91:27:89:1e:dd:7e:ee:99:9a:25:8d:1d:8c:b4:bb:
                    81:6b:2c:09:b3:a8:43:df:81:11:ef:19:37:39:b7:
                    c0:cf:7e:46:46:64:e7:88:37:31:55:b9:92:ae:3b:
                    e1:d5:aa:d1:49:d0:69:01:f3:29:b7:9f:30:56:5c:
                    78:42:1c:df:13:d7:ad:e6:58:52:0e:d8:59:d0:61:
                    e8:59:e3:72:eb:88:df:24:22:ec:37:03:42:0b:f2:
                    b8:b6:01:22:14:fa:03:cf:55:8f:82:46:1c:5e:83:
                    12:ca:85:55:b2:21:41:04:79:99:cc:47:70:83:aa:
                    37:bd:af:da:ec:8a:37:ca:a6:5c:36:a8:0a:4b:60:
                    88:8b:8a:06:88:f5:b7:4d:12:76:7b:ba:80:26:57:
                    83:75:cc:22:a1:67:b2:ee:67:7b:b2:1b:ff:3b:7c:
                    e3:da:35:e3:c9:50:c7:e7:5b:76:d2:1b:92:be:07:
                    ee:a9:4f:87:b4:30:f0:99:95:e8:37:fb:6f:05:c6:
                    ae:1a:f2:a2:77:2e:bf:fe:ea:c6:93:08:18:30:eb:
                    68:5b:ef:68:6a:df:42:30:d9:c2:be:f2:08:2c:de:
                    5a:3a:75:79:e0:4f:7f:a4:55:ea:54:be:85:e4:60:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E6:5E:5C:49:0A:DE:EF:07:39:00:56:F8:78:B0:DA:A5:3A:FC:B5
            X509v3 Authority Key Identifier:
                keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:45:ad:d5:03:ee:ed:26:b6:9a:19:ad:70:5d:73:9b:0c:
         23:8c:8c:a8:d4:ee:63:61:c6:a7:c8:f2:60:52:57:41:c7:9a:
         b9:b9:d4:12:73:a1:66:cc:ea:3c:a1:d7:6e:0e:7c:4c:59:a5:
         47:a2:0f:45:6d:a3:dd:5a:95:a9:29:8c:94:f5:89:c3:0d:03:
         3c:d8:a5:a3:23:df:c8:24:eb:9c:f5:6a:11:e3:bd:bb:57:b3:
         ae:45:7d:f6:07:28:20:a5:0e:31:50:1b:19:5c:4d:bb:33:36:
         06:5e:c5:b7:63:aa:c3:da:9b:54:f2:6e:86:d7:dc:2f:49:9f:
         6b:15:81:18:56:1d:c2:3a:dc:2d:d8:9e:d8:1e:a9:7c:19:36:
         72:bf:95:3c:82:9e:84:9a:8b:d7:a5:16:2c:f8:18:06:0e:19:
         2c:38:f7:3e:90:72:ff:63:c0:80:e6:84:22:8f:d7:5c:bd:81:
         a4:51:cc:1c:c9:e8:9d:d0:68:eb:19:af:d3:ba:55:aa:53:ae:
         02:73:62:86:03:32:68:4f:c3:9a:75:fa:86:eb:27:34:d4:80:
         27:64:8a:f0:d6:f3:24:4b:f3:e5:c5:85:61:b1:b9:e2:a5:20:
         05:ee:6b:8d:7a:ba:2e:74:2b:67:c0:0f:dc:f4:5e:02:50:cd:
         88:6d:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:34 2026 by rpki-client