Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
File:                     YwXctV_RS1x6opSuN8cCdWkvQYA.mft (raw, json)
Hash identifier:          hw+9sEdU0s/TUxR+QuicobKUWgpDbGa4k0ysV+gDhvg=
Subject key identifier:   0F:E1:A1:A8:4E:6E:97:1B:B6:AD:46:23:82:EC:57:6E:FC:16:BA:6F
Authority key identifier: 63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80
Certificate issuer:       /CN=A91A9CD5/serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
Manifest number:          0154
Signing time:             Mon 27 Jul 2026 06:58:49 +0000
Manifest this update:     Mon 27 Jul 2026 06:58:48 +0000
Manifest next update:     Mon 03 Aug 2026 06:58:48 +0000
Files and hashes:         1: YwXctV_RS1x6opSuN8cCdWkvQYA.crl (hash: GkzYYY9naqQ4wKG7KeJi3+IotJxGmkZk9BzAFP6U2mA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=6305DCB55FD14B5C7AA294AE37C70275692F4180
        Validity
            Not Before: Jul 27 06:58:48 2026 GMT
            Not After : Aug  3 06:58:48 2026 GMT
        Subject: CN=6a6701a9-7b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:58:dd:51:a7:65:2d:e3:b7:a8:1d:f5:2c:
                    8d:ca:a7:5f:70:7e:bc:a5:49:9a:18:96:a5:a6:c0:
                    29:b8:b2:d3:fa:93:fd:55:f5:b9:e5:aa:8d:29:a9:
                    de:02:0e:a9:db:a5:ac:80:63:d3:dc:9f:f9:91:43:
                    20:34:51:cf:27:db:3e:a3:4a:37:f6:eb:52:4d:69:
                    91:34:bf:86:ba:5d:f0:05:05:56:d9:15:a1:88:5f:
                    f9:ae:49:f1:a7:9c:b5:3c:d4:82:60:24:82:f3:bc:
                    0b:01:0c:d5:b8:b7:7f:02:6c:b1:32:49:c1:2c:b7:
                    5c:e3:57:56:57:3f:94:a6:31:ce:40:11:71:3a:4c:
                    93:5d:25:4f:29:27:d4:6e:f1:7c:c3:a4:ee:9a:04:
                    90:ba:d3:3a:4d:14:db:65:5c:c9:06:03:de:7f:46:
                    b8:a2:a5:67:28:cb:f7:a5:db:eb:66:d3:11:a0:f9:
                    38:b5:f4:44:a5:eb:d5:3e:bb:2f:f0:cf:42:f6:5d:
                    c2:58:67:ed:c9:ca:da:64:0e:4f:72:74:92:db:86:
                    fd:2c:d5:a1:1e:c9:cb:15:b8:07:48:0f:c6:89:40:
                    97:64:ce:4d:90:e6:c5:00:ba:19:0e:8e:23:b9:d0:
                    22:cc:cd:8a:86:e7:91:f7:44:5f:f7:df:ef:d2:60:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:A1:A8:4E:6E:97:1B:B6:AD:46:23:82:EC:57:6E:FC:16:BA:6F
            X509v3 Authority Key Identifier:
                keyid:63:05:DC:B5:5F:D1:4B:5C:7A:A2:94:AE:37:C7:02:75:69:2F:41:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YwXctV_RS1x6opSuN8cCdWkvQYA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/7A9A25107FEF11EFA82DF639C4F9AE02/YwXctV_RS1x6opSuN8cCdWkvQYA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d3:da:3a:1c:cc:35:16:fb:ee:04:72:8f:7b:27:72:63:c2:
         6e:9c:86:70:60:60:c7:c3:f5:f5:75:42:16:3c:d2:25:c9:4e:
         04:74:9a:19:63:6e:a0:ca:f8:3d:a8:32:b2:45:a2:ea:22:bc:
         8d:1b:51:f5:03:5b:c0:cb:18:0e:88:63:b8:6e:1f:74:f2:fc:
         f2:3c:26:a5:73:44:1f:c8:d0:41:86:20:19:15:b8:c8:6e:94:
         b9:7d:c5:c2:7a:76:f1:60:78:bb:bd:ad:41:29:be:55:dc:1e:
         ae:d6:ff:9f:c5:65:6e:4e:ef:e6:11:66:4a:f3:13:a1:72:67:
         47:99:b0:b6:5d:62:35:a2:b7:7e:b3:b0:e5:84:f3:b9:0c:fb:
         f9:81:ae:cd:fc:2f:d4:fd:f1:79:f2:16:e7:ec:7b:af:bb:16:
         5b:2a:f4:3f:99:c9:28:1f:f6:6c:9c:c8:c1:43:b6:e3:a5:03:
         0b:7a:cd:2c:2a:c5:8d:e0:10:b8:b9:cc:bb:af:73:7e:77:f9:
         e3:f4:b4:87:c2:62:c7:b2:77:a1:e2:36:c1:e4:63:03:72:12:
         3b:50:76:65:a7:22:20:7a:21:e3:c0:6e:e7:ef:bf:83:7e:b8:
         bc:ed:1c:17:14:28:47:e7:0d:40:21:46:a0:16:35:35:b6:9f:
         c8:fc:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:40:38 2026 by rpki-client