Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File:                     Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier:          +h2XNu1PDWnGO1gGhoTh8FwxXKnla1yVHnaGeTbsBVY=
Subject key identifier:   68:73:45:1C:8A:D3:2B:11:3E:62:31:52:48:2D:0E:B0:7B:06:4D:7E
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer:       /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial:       04B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number:          04A9
Signing time:             Mon 27 Jul 2026 00:56:07 +0000
Manifest this update:     Mon 27 Jul 2026 00:56:06 +0000
Manifest next update:     Mon 03 Aug 2026 00:56:06 +0000
Files and hashes:         1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: xdhwcdg2MJDh8RNV5qU16B9jxn65cdbIR9+iDWi8i+4=)
                          2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
                          rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
        Validity
            Not Before: Jul 27 00:56:06 2026 GMT
            Not After : Aug  3 00:56:06 2026 GMT
        Subject: CN=6a66aca7-477e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:51:d1:83:c3:d4:ef:16:6e:06:ef:bd:ad:46:
                    20:bb:3a:ca:bd:6e:77:19:db:b7:1e:79:79:0c:11:
                    fa:9f:56:c1:7b:1b:55:55:26:a9:b1:53:ba:dc:07:
                    e7:fd:88:56:77:ca:ea:b8:bd:7b:73:46:e8:88:d6:
                    6f:24:e5:a8:f1:5e:85:9b:22:29:cd:c6:1d:ae:e7:
                    27:17:77:ea:ee:a3:b5:c6:d9:f7:64:79:68:57:bf:
                    52:c8:bc:95:cd:2c:73:f1:cd:b5:98:40:4c:f7:b0:
                    29:57:93:07:55:81:d4:5f:cc:be:3c:2d:49:ff:31:
                    77:f3:31:f0:42:05:84:2c:d9:0f:4b:e4:59:83:bd:
                    bf:e8:3d:e0:1c:20:62:26:f0:db:4d:48:3a:06:d8:
                    87:ba:8d:8e:78:29:08:d9:ec:02:11:86:21:53:ae:
                    b0:dd:aa:85:d1:e4:85:dc:1e:79:c6:17:23:60:ae:
                    3e:99:b7:18:d5:6f:48:6c:14:5e:7a:72:b7:8c:61:
                    f4:f2:ba:1a:07:54:f0:a5:2c:02:2c:00:f8:5a:46:
                    f8:2a:61:80:1a:a6:aa:f9:46:8f:69:b5:1f:c1:11:
                    7a:27:1b:70:22:0d:d4:9b:6c:b0:0c:af:9d:8b:68:
                    bc:cc:c4:68:0a:a9:1c:0d:d1:61:87:e3:b6:dd:8a:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:73:45:1C:8A:D3:2B:11:3E:62:31:52:48:2D:0E:B0:7B:06:4D:7E
            X509v3 Authority Key Identifier:
                keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:78:07:52:e0:30:62:c4:b5:cb:e5:47:10:c2:4d:97:d5:9b:
         8b:86:05:49:e1:3d:c4:88:e4:ca:be:60:dd:e8:eb:1d:64:b5:
         a2:a4:ff:ba:fa:71:d6:3d:09:cf:6d:c3:9d:14:3d:59:d9:5b:
         95:3e:a0:67:93:86:92:d3:9c:25:df:e1:5d:d6:a6:f7:b8:92:
         85:32:6b:d9:2d:b0:d9:51:3c:61:8f:8c:1d:5c:ab:74:3d:2b:
         ca:fe:9e:8b:f4:e6:7c:89:6a:fb:0f:c0:49:00:85:6e:07:58:
         f6:2f:fb:34:de:64:2c:d2:46:59:54:30:9a:28:67:96:1e:82:
         c9:c4:21:3e:c9:d1:63:24:f4:67:42:8e:06:c6:b4:9f:2e:30:
         e0:f7:7e:be:0f:ee:dc:b0:20:fa:62:45:b0:8d:a5:4e:e8:df:
         c4:1d:6f:60:aa:74:38:6d:e3:ed:62:21:f4:0c:59:5b:05:47:
         40:f1:06:7a:a1:f7:e3:f0:8d:5b:c8:dc:10:12:e9:d9:3c:81:
         4b:f9:82:56:22:0d:a9:a2:4f:a5:5e:e2:ef:8d:6d:3d:4b:0b:
         6c:24:64:d4:c2:2e:d4:ab:bd:51:0d:62:57:54:81:9b:7a:8d:
         30:1d:2e:9f:41:32:ca:18:58:8f:8b:5d:1b:77:6a:59:27:a6:
         fe:6b:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:25 2026 by rpki-client