Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
File:                     yzfWw1ER6SWyUY8r7WTyMlRT92w.mft (raw, json)
Hash identifier:          NSb95/J/eqIAmATbnE1E8FKQJ9HscqFBDQ2I3Le+RY0=
Subject key identifier:   62:9A:09:C8:DB:B7:7E:AD:4D:EC:DF:59:93:2E:30:1D:52:DB:E8:46
Authority key identifier: CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C
Certificate issuer:       /CN=A9177353/serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
Manifest number:          0F
Signing time:             Mon 27 Jul 2026 11:33:57 +0000
Manifest this update:     Mon 27 Jul 2026 11:33:56 +0000
Manifest next update:     Mon 03 Aug 2026 11:33:56 +0000
Files and hashes:         1: yzfWw1ER6SWyUY8r7WTyMlRT92w.crl (hash: y89u17fvPvWP21lrvh5Ioj15nWuNnxaqWGT+sWFXWog=)
                          2: ABC9FB4A7BC611F1B6642EA77EA30FBC.roa (hash: bjBcaS1aZD+XT+DjWQMaLZSJ7vj69FeLT/r28SNzPfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl
                          rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177353, serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
        Validity
            Not Before: Jul 27 11:33:56 2026 GMT
            Not After : Aug  3 11:33:56 2026 GMT
        Subject: CN=6a674225-59ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:64:01:a3:34:74:13:5d:9e:34:7a:39:a6:df:
                    a5:ff:c6:16:89:cb:c5:cf:e3:e5:81:c0:95:af:ec:
                    90:77:f7:a9:23:35:b0:02:9e:02:56:43:74:61:5b:
                    9c:22:19:f8:91:5b:99:6b:7f:20:0f:4b:8d:b8:56:
                    c2:9e:a7:97:6e:4e:2a:0d:86:0f:f1:b7:65:f5:a1:
                    9e:8e:98:f3:92:2f:21:1a:e9:09:bb:d6:94:ef:ee:
                    2c:a0:b4:fa:62:84:11:eb:43:f7:83:21:1b:a8:b1:
                    3e:da:a5:1b:df:7c:dc:4f:82:08:8d:cc:be:11:60:
                    a5:2c:a9:a3:bb:52:f7:ac:cf:b4:d4:b4:6b:7a:66:
                    e8:a4:fe:4b:14:16:12:8f:7e:ae:49:30:5d:f3:37:
                    13:cd:da:b8:1c:44:bf:c8:33:2c:1d:31:fc:be:17:
                    af:c7:1f:98:88:ee:bc:b7:6a:b9:0f:f7:f1:57:06:
                    bf:b2:bc:26:89:43:e7:5f:57:68:a3:5d:9a:8c:05:
                    73:30:24:32:23:d1:91:94:15:54:8c:e0:33:95:41:
                    04:0e:5f:3e:54:f7:9b:3b:b3:a6:7e:a0:2a:bc:dc:
                    92:0c:b6:4f:5b:3c:bb:08:83:a2:a9:fd:a2:a6:03:
                    3b:0d:93:7c:fd:05:a6:b6:33:e0:c6:a5:21:12:da:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9A:09:C8:DB:B7:7E:AD:4D:EC:DF:59:93:2E:30:1D:52:DB:E8:46
            X509v3 Authority Key Identifier:
                keyid:CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:17:a0:fd:34:02:81:bc:cd:0b:9c:2d:52:7b:cc:b6:d0:
         fd:9d:39:d4:da:38:48:dc:3f:86:fd:00:df:ce:10:9d:41:53:
         da:cb:2d:34:80:2c:6d:c8:16:de:16:73:70:80:a1:b6:12:21:
         b6:87:cc:9f:24:b8:89:b6:f9:6a:b2:61:64:17:0c:9f:c2:6d:
         a0:f0:64:93:aa:73:37:ef:18:e2:83:ba:73:8b:de:39:0d:e0:
         8b:fe:b4:d4:84:e5:50:be:f4:a5:b8:17:a4:90:85:7f:91:b1:
         a5:d0:dd:77:d3:ac:9a:ce:11:e4:e9:ba:51:26:27:8b:75:14:
         fb:49:e7:25:e2:71:fd:e0:6a:5f:bc:06:dd:1e:ca:d8:d7:70:
         23:c1:be:bf:c1:90:27:df:26:e4:ca:b1:2c:51:6d:cb:4d:52:
         d8:98:77:5c:b7:55:0c:3e:44:e0:47:80:b2:bc:9c:f9:67:d1:
         ef:18:5b:9d:49:2a:1c:2a:9d:9b:4a:8a:27:81:2f:cc:56:ea:
         92:77:12:f7:c7:b6:1e:0b:73:97:1a:6e:35:66:bf:06:54:ce:
         53:71:db:5c:ee:db:e2:75:db:68:97:71:aa:a2:da:40:2c:69:
         81:41:dc:19:90:aa:96:aa:9d:e9:8d:ec:d8:65:1a:99:42:d3:
         dd:6b:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:49 2026 by rpki-client