Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
File:                     YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json)
Hash identifier:          6bJH+z2TqQ4rVxiNJoiSNycKsz6BlmnDKUCGnphHvSw=
Subject key identifier:   A1:E4:97:1E:09:B5:94:46:DF:33:AE:F8:B2:76:45:46:11:5A:BC:04
Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3
Certificate issuer:       /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
Certificate serial:       358D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
Manifest number:          3576
Signing time:             Tue 28 Jul 2026 14:26:02 +0000
Manifest this update:     Tue 28 Jul 2026 14:26:01 +0000
Manifest next update:     Tue 04 Aug 2026 14:26:01 +0000
Files and hashes:         1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: yLpKPIKqEBtTFoSmnhElcYiOTWZjZhJP9EEzWl54L3k=)
                          2: 9D0BDA0AD09111F0847B8D52C4F9AE02.roa (hash: d2qnOMj+4aMvpadCEEalUtvRb5DNsG3YqUzCX2r+V1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl
                          rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13709 (0x358d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
        Validity
            Not Before: Jul 28 14:26:01 2026 GMT
            Not After : Aug  4 14:26:01 2026 GMT
        Subject: CN=6a68bbf9-9d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:85:09:7d:0c:53:89:d3:3b:d2:b4:fb:76:
                    94:eb:58:a9:2c:f0:05:ad:e1:07:09:90:c7:33:a7:
                    d3:31:7d:df:df:dd:0e:9f:86:5b:4e:be:10:39:5a:
                    54:85:fe:be:f3:a6:0b:79:e9:9d:a3:09:1d:b3:57:
                    fc:db:65:ca:9f:42:52:04:bb:74:65:ce:91:5e:f6:
                    e8:5d:a7:65:71:63:22:e3:b6:fc:5e:3a:4a:77:65:
                    39:cd:f2:a5:5f:36:c2:0b:f4:36:df:3f:0f:f0:43:
                    8c:ec:20:36:2c:3a:86:e9:a2:67:3d:96:9e:93:48:
                    cf:19:a1:8b:dd:65:82:b4:9e:6a:cb:7e:07:84:71:
                    29:0a:8b:40:08:80:a6:ae:00:b4:fa:dc:4d:13:ba:
                    48:2f:70:a3:21:d8:90:68:fa:6b:8d:a7:64:ca:20:
                    6a:3f:01:fe:dd:32:e7:94:f8:45:7b:23:83:c1:74:
                    0f:bc:f0:d3:88:6f:5e:d1:1a:78:9d:34:bc:5c:fa:
                    b4:49:88:b1:94:4a:fc:e4:b3:23:60:13:f7:45:fb:
                    ff:d5:2e:85:27:35:50:f5:43:56:26:1d:c5:6c:cb:
                    56:ec:82:98:83:fc:59:eb:ce:77:7e:96:ff:67:04:
                    de:85:85:03:65:72:06:32:07:70:f8:eb:49:88:24:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:97:1E:09:B5:94:46:DF:33:AE:F8:B2:76:45:46:11:5A:BC:04
            X509v3 Authority Key Identifier:
                keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:f8:79:37:37:4a:5c:70:dd:e8:3a:a4:59:4a:22:d2:2e:
         06:f1:2d:1a:03:35:1f:d9:1c:64:85:7a:a7:81:bb:e1:08:83:
         42:27:d0:6b:9c:a0:89:28:b0:cc:35:9e:d2:09:dc:b0:cc:89:
         28:9a:7d:8a:42:34:4f:44:93:e7:b5:5d:3c:74:e8:eb:bb:56:
         4b:47:e2:5f:cc:85:d2:e5:65:98:87:d8:44:f1:55:05:89:57:
         75:15:a5:67:a2:b7:3f:31:5a:c7:9f:37:2d:d0:cf:ec:b3:6b:
         49:41:7b:fc:8d:12:29:d2:da:0d:78:9a:f1:46:a4:eb:02:66:
         d7:40:54:ab:37:fe:ac:1f:e8:a5:c6:d3:fb:b3:b0:f3:cd:96:
         f4:f1:b6:ed:25:c2:4d:e0:9b:3b:be:ec:a3:4c:8e:f0:2b:88:
         33:f2:32:ba:8c:96:c9:07:03:9c:71:b1:9c:6c:72:ff:85:22:
         01:a7:3f:94:fa:83:d9:ca:1d:a3:68:41:8c:f9:79:41:93:f5:
         81:ef:af:8d:c0:22:e5:ec:82:2a:49:cf:01:e8:6b:cd:79:19:
         2a:f5:07:be:ff:fb:3f:63:29:db:a7:f8:13:ae:d7:83:e8:fc:
         4a:62:97:6c:7f:03:3e:af:35:06:03:4b:dc:02:3a:56:48:8f:
         11:bb:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:45:34 2026 by rpki-client