Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
File:                     YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json)
Hash identifier:          gZNkoZ6z1Rfw5+EZAjKxaQGHqnQMM3LhIh8QhtTnZl4=
Subject key identifier:   C8:7D:9F:4E:5F:91:FF:11:E9:D4:7C:59:3A:7D:C4:BF:D8:D2:1B:1E
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Certificate issuer:       /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial:       0AE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
Manifest number:          0AD4
Signing time:             Tue 28 Jul 2026 19:43:01 +0000
Manifest this update:     Tue 28 Jul 2026 19:43:00 +0000
Manifest next update:     Tue 04 Aug 2026 19:43:00 +0000
Files and hashes:         1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: gjseVsPrUPBbU9LQ0fsdN/uK6weojIoHPoLSPgy5roY=)
                          2: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: ID5P6rejMOjyD1/9QNZxfu6Edv4l/BB2XuqFSG1EvOM=)
                          3: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: N76m8mGbInfNEkPUCeKxXQd1avqi2DdrtdtXBvmx1bI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
                          rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792 (0xae8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
        Validity
            Not Before: Jul 28 19:43:00 2026 GMT
            Not After : Aug  4 19:43:00 2026 GMT
        Subject: CN=6a690644-2105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:51:3c:0e:9b:c1:45:b3:76:be:03:8c:bd:
                    1a:51:21:b0:e5:96:0f:3f:e7:82:ff:2b:1f:29:50:
                    83:11:db:e1:10:fc:18:54:8f:9a:a1:70:2e:ed:30:
                    de:99:dd:1e:63:db:bf:0e:d1:d9:b0:43:62:c6:66:
                    25:17:fe:83:88:d9:f4:f8:94:04:a2:1a:3c:e9:0d:
                    83:26:84:f1:24:12:ea:1a:e3:38:07:b5:b6:50:ab:
                    0c:d4:d4:1a:c9:2e:04:dc:d8:b4:b8:b3:e7:2c:f0:
                    cf:25:4f:53:84:14:70:37:4d:0b:17:36:18:f5:14:
                    6c:be:a9:f5:c1:e4:2c:90:ba:c5:9c:a2:18:b0:ea:
                    e7:fc:cc:88:98:4b:84:13:16:46:a4:62:cd:db:96:
                    1b:b8:fd:68:b7:6f:f4:97:75:e6:0b:87:26:1e:1e:
                    6e:a3:e2:27:aa:c1:32:c3:73:09:e3:a3:ba:80:87:
                    7b:08:33:3f:6b:3b:d8:57:c4:c4:8f:69:51:3f:04:
                    13:80:56:ec:3c:f1:d2:c0:8b:c8:66:eb:e7:83:5c:
                    e8:91:49:2c:5b:53:ee:58:c0:fe:15:d4:ea:57:81:
                    e0:c3:e4:a0:65:51:57:74:61:95:73:d4:d1:2c:13:
                    3c:1d:b2:3d:68:f8:a2:47:06:dc:56:7d:20:1b:2b:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:9F:4E:5F:91:FF:11:E9:D4:7C:59:3A:7D:C4:BF:D8:D2:1B:1E
            X509v3 Authority Key Identifier:
                keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:dc:83:28:cf:32:cd:38:6d:a5:a7:67:21:f7:a2:8d:14:
         7c:a5:18:43:89:39:30:76:60:37:55:d5:ca:45:e1:b7:32:96:
         5c:7c:26:f3:bd:10:8b:b2:a3:37:3b:64:4f:a0:e1:df:28:74:
         ea:f1:d9:04:e4:29:73:ad:e3:6e:94:5c:53:e9:2f:1c:13:d2:
         d2:19:b2:6a:d0:20:35:b4:0f:05:e7:34:f4:28:8e:c2:e1:37:
         3b:70:4a:9a:ff:7d:af:e3:71:da:56:e9:13:76:04:5c:95:36:
         6d:37:2a:4a:7e:e4:8a:97:be:ff:db:cb:25:c6:49:93:ee:f8:
         73:f7:b6:bd:b2:c1:14:52:6c:6b:6d:53:4f:19:0c:bb:d3:d2:
         90:3f:f8:51:42:b5:bd:0d:36:a5:a0:de:9d:19:4c:34:29:71:
         34:c5:86:a2:7a:91:a1:b3:78:b3:c7:40:b9:ca:eb:7d:b4:11:
         29:0f:a6:c6:c5:18:0a:fd:de:a9:aa:a5:ab:c1:74:96:69:a0:
         ad:35:36:ec:f1:90:fa:e1:30:50:83:19:f8:01:cd:ff:73:6a:
         b7:55:19:22:04:c3:09:f2:df:b0:3e:08:e6:ad:d7:aa:2b:c9:
         6b:93:6e:1c:16:bd:93:26:4a:40:ba:ee:e9:62:ab:97:1f:4f:
         a6:9c:c2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:18 2026 by rpki-client