Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File:                     y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier:          BL0JHx1l0wEtjEK9trbKyXtxLR1dAUR4SbupsZqU8YM=
Subject key identifier:   97:21:B7:9A:53:6C:EF:2D:DD:EE:2D:EC:31:2B:C4:9D:23:B1:D6:EB
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer:       /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number:          E5
Signing time:             Mon 27 Jul 2026 08:34:05 +0000
Manifest this update:     Mon 27 Jul 2026 08:34:04 +0000
Manifest next update:     Mon 03 Aug 2026 08:34:04 +0000
Files and hashes:         1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: vwWcYa27dHa9hnsBhTUjnvQTsdAXTqvYRgS/15/2LOE=)
                          2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: 0Esu2ITkq2JO6eSubkpSXkJLoiB2r42MQ/8tZBJXmmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
                          rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
        Validity
            Not Before: Jul 27 08:34:04 2026 GMT
            Not After : Aug  3 08:34:04 2026 GMT
        Subject: CN=6a6717fd-8d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:e9:83:66:26:12:72:f4:51:f6:c9:c1:74:
                    48:d2:e6:bf:c7:10:53:84:e3:40:28:d6:58:55:1b:
                    41:2b:9d:1b:28:63:aa:62:e3:3d:1e:2a:e6:fd:61:
                    30:7f:69:8c:fa:f4:72:a2:6f:c4:df:56:3e:43:46:
                    f4:6b:b8:d7:70:5a:02:25:1e:5b:9b:2d:a8:35:28:
                    e9:cd:12:f4:a3:78:71:93:50:5a:cd:b5:42:65:b9:
                    fa:2b:c2:89:2e:34:94:4d:fd:15:e3:1b:1a:fc:e3:
                    9c:dd:29:ea:11:7e:17:22:a9:4d:d7:56:53:1b:00:
                    ae:b6:e9:28:bb:44:f0:92:f5:ac:60:16:2d:bb:09:
                    d3:69:9a:b6:76:3b:bc:a4:9f:38:07:c3:86:aa:81:
                    ca:ce:81:1b:b2:23:41:c7:d3:47:24:ea:a8:58:8a:
                    5e:cc:63:f3:ca:a1:69:f2:b9:92:bb:96:e7:16:75:
                    3b:9b:56:9d:fa:f6:8a:33:76:8a:0c:6e:f1:aa:c0:
                    ae:d0:57:ee:45:b8:8f:44:ed:d7:a5:cc:55:10:18:
                    0f:a7:cc:11:74:fe:92:99:24:eb:29:b1:22:89:1a:
                    61:43:18:19:f3:be:78:2e:3d:2e:29:21:be:b5:e5:
                    02:1e:98:04:82:e1:0c:bc:3f:1a:03:04:ac:a6:3b:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:21:B7:9A:53:6C:EF:2D:DD:EE:2D:EC:31:2B:C4:9D:23:B1:D6:EB
            X509v3 Authority Key Identifier:
                keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:5a:12:57:ac:38:93:4a:8e:40:8b:10:fd:73:dc:af:38:
         60:b2:a5:b4:ee:b4:8d:c6:78:0d:42:eb:ec:95:11:99:1d:be:
         80:52:bc:b0:92:a2:89:61:78:4d:d5:14:c6:ab:5d:2c:ad:82:
         96:d1:1a:12:89:d7:de:c0:2f:25:fb:95:7f:c9:83:b5:19:42:
         b7:39:d1:98:a5:66:a8:5e:8a:ca:65:08:f8:06:4a:03:14:e3:
         42:f5:7b:59:8c:f2:ff:6e:ac:cb:c5:87:82:0b:8d:1f:ad:2d:
         9b:0b:8b:39:13:b3:1c:1d:31:41:e3:d8:e4:5e:61:b3:b9:c4:
         55:09:3f:8e:c7:d2:c6:17:d7:23:94:01:45:2c:76:6c:db:58:
         95:21:e5:08:cc:de:97:93:0f:8a:a8:fd:93:fc:f3:d7:19:5f:
         d8:28:5e:7f:43:13:62:19:36:72:85:90:e3:0e:55:e8:7b:4b:
         f3:b0:19:d8:b6:82:2f:3a:77:9f:56:6b:a2:9b:f3:f1:0e:b2:
         cb:b7:d7:b7:c5:c7:df:a6:1a:d5:db:3e:6c:95:33:ba:f6:f7:
         5c:47:2b:ab:69:57:70:ca:bb:10:67:56:4d:bb:ae:59:23:be:
         30:0c:c7:7e:48:f2:01:e8:4a:a5:fc:d0:9b:89:6d:32:60:a9:
         f6:88:24:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:41 2026 by rpki-client