Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
File:                     TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json)
Hash identifier:          GVn5Llu2M25QrRjTnzXjgsyJGYG0nVf36/PGu2Idqck=
Subject key identifier:   E4:6E:E8:99:4A:12:F3:29:56:50:E9:A3:5E:0C:9A:23:C4:68:43:DC
Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Certificate issuer:       /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Certificate serial:       0800
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
Manifest number:          0800
Signing time:             Sun 26 Jul 2026 21:54:36 +0000
Manifest this update:     Sun 26 Jul 2026 21:54:36 +0000
Manifest next update:     Sun 02 Aug 2026 21:54:36 +0000
Files and hashes:         1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: dno4C+dMHtl2NKRvGXgXjIr01Eb7VwdtTUarU117D5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
                          rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
        Validity
            Not Before: Jul 26 21:54:36 2026 GMT
            Not After : Aug  2 21:54:36 2026 GMT
        Subject: CN=6a66821c-d4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:0a:c1:65:d1:5f:a9:b8:15:8a:5a:e0:d3:
                    3a:29:03:15:31:f3:44:47:00:a1:cb:da:46:79:84:
                    12:76:0b:f7:87:74:d6:39:b5:00:13:14:34:6d:12:
                    50:1b:bf:e9:7d:0a:0f:99:f1:42:21:68:f8:a6:bb:
                    9f:0a:22:9a:19:d8:7d:95:01:45:1a:b3:43:ae:26:
                    8e:1d:16:08:69:c7:d9:1e:fe:5f:6b:3e:f4:f5:ab:
                    0f:01:60:72:ef:2b:91:fc:4d:a1:77:e4:66:4d:04:
                    e0:6a:fd:69:ab:86:3f:65:f0:cb:8d:46:fb:87:81:
                    96:a2:fb:f5:30:d3:c7:8b:2b:01:4a:9e:08:59:f9:
                    52:44:3b:56:fe:53:6e:4c:ab:b2:cb:12:7d:8a:e2:
                    d5:98:c7:01:c5:e7:f2:1b:a0:f7:53:b2:38:1c:5b:
                    20:cd:6e:dd:11:07:61:a0:12:38:de:05:c0:f8:2d:
                    29:a7:5b:53:6e:39:fa:25:c0:c1:66:c4:b9:df:af:
                    23:38:0d:5c:4d:bf:f9:e4:cb:e4:d3:84:9e:00:27:
                    e2:56:3f:ca:e8:79:37:46:ff:0b:d6:e4:7c:b1:cd:
                    f9:cd:75:b5:45:12:74:2b:06:bc:09:4c:7a:07:a8:
                    c9:26:44:a7:03:4c:f3:0c:18:8d:8d:3a:b8:77:a7:
                    38:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6E:E8:99:4A:12:F3:29:56:50:E9:A3:5E:0C:9A:23:C4:68:43:DC
            X509v3 Authority Key Identifier:
                keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:54:76:b7:91:c3:e5:32:cf:ad:14:18:0e:7a:c9:d4:c5:46:
         e8:99:18:ac:3f:e4:e6:0a:ab:03:ed:24:ef:2f:ee:57:f7:2f:
         0f:91:9c:5a:9e:87:17:b1:a1:5f:a5:7a:2c:b8:8a:42:1e:8b:
         4f:54:cf:5d:2d:96:f0:85:5d:7a:d9:db:a8:6e:8d:44:49:be:
         18:c8:76:83:40:2a:db:e9:51:3c:5d:90:2a:cc:f0:70:f7:c7:
         f8:d5:a9:91:e0:97:d5:a7:3a:e9:3c:88:ef:6f:86:9a:d6:69:
         ee:0f:58:04:df:da:96:58:72:8a:e9:3d:0e:6f:30:9b:09:26:
         10:5c:76:1a:19:58:e8:42:7e:62:52:c5:6a:85:83:2e:f4:3e:
         3a:18:4a:e8:e2:46:bb:2b:95:7b:e7:19:cc:e7:58:c8:42:0d:
         ae:7f:7f:d9:3e:d2:f0:25:1b:8d:b0:81:e9:ee:40:d4:1e:3b:
         15:ac:60:8a:36:ea:14:e3:fa:bc:18:74:fd:f8:69:ef:e2:68:
         70:e8:65:ab:16:33:65:95:c5:c3:98:e0:d2:4f:8f:93:a5:bc:
         47:76:45:8f:09:2a:a5:b3:3e:7e:ea:6e:d9:46:70:a1:01:04:
         fc:14:bd:67:c4:a2:8a:d1:f8:93:be:70:ac:fb:94:7a:b7:d3:
         1f:d2:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:54 2026 by rpki-client