Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
File:                     l-cly4ZRjBgURIehUCq-Kw1EAwU.mft (raw, json)
Hash identifier:          N7tm1HmH/TZQJtgkEfuoK4NPk5LbQeaMU7i0ujtmMoA=
Subject key identifier:   38:D9:D3:26:03:76:1B:50:C9:B1:CA:A3:06:50:05:7E:E2:5D:1D:6A
Authority key identifier: 97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05
Certificate issuer:       /CN=A9172B99/serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
Manifest number:          0C
Signing time:             Mon 27 Jul 2026 11:30:59 +0000
Manifest this update:     Mon 27 Jul 2026 11:30:58 +0000
Manifest next update:     Mon 03 Aug 2026 11:30:58 +0000
Files and hashes:         1: l-cly4ZRjBgURIehUCq-Kw1EAwU.crl (hash: Vcag2VrhicIkaoQs8nCIEYC1o3oFU60B8R/EuN1btvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl
                          rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B99, serialNumber=97E725CB86518C18144487A1502ABE2B0D440305
        Validity
            Not Before: Jul 27 11:30:58 2026 GMT
            Not After : Aug  3 11:30:58 2026 GMT
        Subject: CN=6a674173-f8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:d3:a8:4e:eb:50:ed:f2:d6:9b:37:78:b2:
                    9c:4a:78:06:a3:04:3e:52:8a:a6:d3:5e:dc:74:17:
                    d0:c5:55:2c:f3:ca:06:65:4b:bf:f1:c8:47:ee:fe:
                    c5:ca:29:70:3a:3a:6c:5c:53:e0:4a:d8:cd:78:f6:
                    68:bc:ef:28:9c:cf:95:ab:97:9f:73:a0:b9:bf:c0:
                    56:7c:c6:6b:d8:38:37:5f:43:5a:8a:4f:66:d5:9a:
                    4a:26:7c:96:6e:53:41:32:a3:ac:41:27:7d:0d:5d:
                    a0:3a:70:14:62:0f:10:b8:86:ae:bb:e7:92:8a:78:
                    30:ab:22:22:4c:c5:48:87:09:c1:f1:e9:73:82:ea:
                    07:6b:8e:01:e0:a6:44:05:8e:20:17:2a:27:0c:9b:
                    90:96:c1:34:79:1e:3c:04:da:4f:49:ea:fd:74:08:
                    28:74:34:25:88:9a:06:dd:70:c6:0b:c5:63:ae:96:
                    75:90:81:3d:b7:6a:65:3b:24:70:5d:7e:59:d5:a7:
                    b1:ae:f6:ea:2c:76:8f:bb:2b:11:40:5f:48:f0:d6:
                    d1:3a:27:da:fa:e6:f2:3e:78:05:76:77:13:bb:a1:
                    3e:8b:a3:62:53:1f:ae:83:00:7b:22:57:23:74:d5:
                    8a:dd:69:45:c1:01:c3:cb:07:41:cf:95:99:68:73:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D9:D3:26:03:76:1B:50:C9:B1:CA:A3:06:50:05:7E:E2:5D:1D:6A
            X509v3 Authority Key Identifier:
                keyid:97:E7:25:CB:86:51:8C:18:14:44:87:A1:50:2A:BE:2B:0D:44:03:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-cly4ZRjBgURIehUCq-Kw1EAwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B99/AD72F8D2790C11F1BC1B6C7065A30FBC/l-cly4ZRjBgURIehUCq-Kw1EAwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c5:c6:e4:fa:e6:87:27:27:f9:1e:64:4d:a4:ac:80:ab:50:
         8e:5d:d4:03:33:94:e4:0f:21:cf:5c:8a:d0:cb:3b:3b:89:b2:
         db:99:0e:78:de:1b:98:c8:5c:fb:1e:b1:42:81:d2:dd:6f:f3:
         32:ac:ef:1f:4a:8e:ea:bb:99:4f:df:6b:df:f2:d3:5b:4b:f9:
         52:b0:d9:4f:68:9b:75:a3:c8:23:bb:98:24:f4:d2:d7:36:d5:
         44:b3:24:1b:b1:cd:9b:cf:9d:38:85:70:c4:d8:89:ee:ef:f5:
         36:b6:d0:57:b3:3f:88:fc:d3:a5:de:c3:7d:0c:97:40:25:c7:
         52:f9:8a:fb:63:77:05:65:28:d1:0e:4b:ca:6f:06:f3:62:7a:
         53:5b:bc:d7:04:91:90:b8:41:9f:69:92:31:e2:4e:04:1c:56:
         b8:e1:59:d7:4c:87:33:e1:e7:74:7e:52:bc:b4:fc:03:70:cf:
         be:f0:16:ea:0b:fe:b5:05:51:68:91:8c:ff:42:80:39:75:bd:
         ac:a5:2c:12:fc:05:d3:72:10:4a:24:15:b4:eb:32:8d:07:84:
         fb:1b:12:02:3a:32:ce:70:c8:ed:8b:ef:21:76:8f:82:ba:13:
         cb:24:90:11:5f:eb:96:ca:b7:f5:8d:08:d7:ef:96:7a:7d:a1:
         8f:8d:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:49 2026 by rpki-client