Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File:                     yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier:          eve2DskZENY5L5PSMOmyKmPcjVeSa+t1EZjMwb4hewg=
Subject key identifier:   42:A7:BE:19:38:E5:60:C7:EE:AD:E9:B6:4E:D0:AA:5B:EE:0A:34:C8
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer:       /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number:          0115
Signing time:             Mon 27 Jul 2026 08:00:18 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:17 +0000
Manifest next update:     Mon 03 Aug 2026 08:00:17 +0000
Files and hashes:         1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: ms0HZGD1YFCdOffPl1lZQlAdelAjSAYm2MQElZwmw8w=)
                          2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: +Guf8goiy81fZQZko9cL1+fi1M4VlxC1TorsAeBwzhI=)
                          3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: ApqLcBimI49Avn0PuHyRPruV4UszM9ORBkBlkObwqEY=)
                          4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: 5aZLhkHexwZy2OGn8j73qB9Fr54SX5MLYLq1gSETLgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
                          rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
        Validity
            Not Before: Jul 27 08:00:17 2026 GMT
            Not After : Aug  3 08:00:17 2026 GMT
        Subject: CN=6a671012-dc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2f:71:ad:3b:c5:d2:b7:68:f8:4a:a3:1b:2a:
                    b7:ab:53:da:36:00:03:52:b0:53:21:11:52:cb:4d:
                    3f:d7:b8:ed:14:c8:47:1f:fc:5b:fd:ab:f1:da:19:
                    70:e1:c2:d7:0e:f5:0c:58:27:26:49:b8:ed:3f:2b:
                    d4:7b:cd:1b:63:1a:95:ac:1d:54:1a:7d:95:31:45:
                    2d:23:5b:c6:a2:4c:51:9a:60:35:6e:13:0d:38:2a:
                    da:68:91:ad:0f:d9:8b:56:55:2c:dd:0a:f5:d3:34:
                    b3:83:11:dd:d5:5a:6c:b3:db:5e:e9:77:3c:15:c2:
                    99:c4:de:f9:c1:a8:66:16:98:fd:14:5f:be:d9:c3:
                    fc:42:6c:6a:cc:59:2d:58:86:dc:d3:80:e2:f0:44:
                    17:ab:89:df:36:39:38:97:2d:48:95:e5:75:5f:de:
                    53:35:61:39:68:cc:a7:51:77:77:29:d7:f5:98:0d:
                    2a:f8:15:e6:41:5e:0c:0d:82:04:6b:41:90:f1:18:
                    dc:71:ad:1a:0e:35:3a:61:fe:b5:2c:1f:a5:ec:ec:
                    95:70:4a:b8:3f:07:46:51:b5:5a:78:a3:14:bf:a0:
                    16:33:e1:66:ea:c0:12:40:ee:39:99:b3:4c:92:84:
                    2f:e9:fa:36:33:65:eb:ae:d3:2c:88:07:31:32:69:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:BE:19:38:E5:60:C7:EE:AD:E9:B6:4E:D0:AA:5B:EE:0A:34:C8
            X509v3 Authority Key Identifier:
                keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:bb:4f:d8:b3:69:50:79:d8:f3:fc:a0:5b:98:74:72:59:
         0c:2f:48:70:34:ae:b0:43:c8:40:13:a2:23:65:92:be:2c:2d:
         a6:04:7d:5a:5a:8c:aa:bf:76:f3:05:44:63:b0:06:2f:b9:f2:
         e8:86:f4:74:66:cc:3c:68:40:c1:d1:67:c4:ae:ac:1f:82:4b:
         c8:aa:00:78:81:ed:76:0b:dd:b8:0a:9f:5c:af:73:e7:62:32:
         4d:81:3d:36:0b:bc:b0:0b:dc:d4:59:06:5f:6c:9c:5e:d5:35:
         0f:51:d3:5a:c3:04:c3:b4:ed:a1:a6:01:dd:41:ed:96:09:a8:
         3d:98:6a:cb:cd:63:f5:44:66:a9:b2:ad:e9:09:93:b8:cf:92:
         86:c6:34:14:ff:a6:c3:e3:e7:ea:43:b7:69:f0:d3:e2:1e:68:
         a2:29:03:75:83:93:6b:54:cd:65:d5:97:f0:11:cf:d6:5f:49:
         e3:1d:af:ee:32:f1:5a:81:11:54:17:4d:7a:46:cc:2e:c3:35:
         fc:b5:8f:fd:e6:29:61:39:87:31:bf:4e:2e:a5:18:0c:95:8f:
         3e:92:06:41:cc:4a:1f:91:e9:8f:f2:62:cf:57:6c:0c:a9:4b:
         03:71:e4:2b:42:ca:93:19:be:0d:ba:91:11:fd:21:1c:f3:62:
         93:d4:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:52 2026 by rpki-client