Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
File:                     0yZ6-fuWkInDwSr-v9D96b2GdYE.mft (raw, json)
Hash identifier:          LvDlS68Zzblk2rtkzWd5hJRiyuRZdjHeNh4govLVJR4=
Subject key identifier:   4B:D9:A5:F4:BF:65:B0:A0:8E:91:A4:97:B2:B5:1D:4C:92:F9:4C:DF
Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81
Certificate issuer:       /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
Certificate serial:       08DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
Manifest number:          08C1
Signing time:             Sun 26 Jul 2026 21:06:33 +0000
Manifest this update:     Sun 26 Jul 2026 21:06:32 +0000
Manifest next update:     Sun 02 Aug 2026 21:06:32 +0000
Files and hashes:         1: 0yZ6-fuWkInDwSr-v9D96b2GdYE.crl (hash: FvahD0fnPkheEH5xreumzpvQurEZN17wmZvGzOYVhyc=)
                          2: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (hash: i92M1LP+kOyhcA9+/WKJMMf9q7//Y1c+vcH73TyVe8U=)
                          3: 40965650EA4311EEA09F786BC4F9AE02.roa (hash: II57Pqdv/shvdKj5gmJXvDyhv7BXRpCHdPL/YMQljSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl
                          rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581
        Validity
            Not Before: Jul 26 21:06:32 2026 GMT
            Not After : Aug  2 21:06:32 2026 GMT
        Subject: CN=6a6676d8-e23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:da:e1:08:a1:ce:0a:6f:9c:18:a7:3e:f3:
                    e5:7c:25:02:6b:c3:80:ee:22:58:75:b5:80:b4:30:
                    c6:ba:2f:cd:cf:3f:23:64:51:b6:bd:03:70:f4:ae:
                    b2:4a:1c:fd:7d:9e:9f:6b:96:67:29:39:62:76:39:
                    3a:13:06:7b:a5:03:06:36:9a:12:bd:0d:a7:9b:47:
                    f6:8b:ba:4d:3d:f7:1c:b5:59:75:3b:11:88:af:1f:
                    26:90:ce:66:8c:7a:65:6f:07:66:b7:52:ce:c6:89:
                    79:eb:ef:b0:a5:1e:a7:4a:ab:a3:38:49:28:fa:47:
                    fa:4a:a3:10:86:ca:34:5d:3b:3a:a3:fe:38:8a:d3:
                    a3:f6:37:b6:67:f2:53:b9:c8:40:8e:5f:6c:73:4a:
                    f9:c2:f8:97:78:99:7a:64:08:07:97:11:4c:d6:da:
                    26:fe:f6:c9:08:ab:52:3b:5a:1e:da:21:0b:36:4a:
                    a4:7d:99:94:0b:32:09:ac:eb:9c:a5:34:95:79:77:
                    f8:af:3d:1e:be:9c:df:ff:a9:ca:0d:bf:4d:b2:91:
                    5b:81:d5:cf:bc:c3:62:2c:e3:c6:4d:c9:e6:76:bf:
                    66:3a:4b:86:74:56:bc:cd:04:13:73:be:15:6f:8d:
                    96:b4:4a:8c:30:55:b1:5d:6c:8a:66:fc:a0:e0:37:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:A5:F4:BF:65:B0:A0:8E:91:A4:97:B2:B5:1D:4C:92:F9:4C:DF
            X509v3 Authority Key Identifier:
                keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:46:bd:38:d0:c1:d6:03:eb:1d:4b:3c:ce:c9:46:fe:ea:dc:
         80:de:f1:76:7b:62:78:03:15:7b:a5:65:e5:59:61:9a:c1:5f:
         33:a6:e5:fc:50:22:9b:0c:50:a2:38:71:b0:be:3d:6c:89:21:
         81:1b:36:1e:2e:6f:09:aa:a6:6f:87:9a:ca:b8:4b:83:a1:ad:
         ab:0f:f3:c6:c5:0c:07:d9:67:2f:56:f1:dd:d7:5f:d4:c3:88:
         89:c0:3c:1c:fd:d3:fc:fd:c3:f7:7b:3c:15:5f:2e:c6:6c:fd:
         ac:77:b1:99:fc:95:ab:d2:13:59:37:48:74:58:5e:2b:6b:b5:
         bd:d8:27:20:18:f8:f7:3e:40:ec:50:b3:24:84:2a:a7:47:95:
         a6:2f:c9:4c:ee:6f:25:1a:d2:d6:a7:8d:37:8e:8d:0c:2a:e1:
         7d:eb:2c:6a:40:39:02:cc:e2:c7:e6:fc:75:76:7c:af:94:f5:
         e7:f5:bc:9a:aa:d8:c8:98:4f:9f:72:2d:f2:da:da:97:c3:b8:
         39:c1:ee:6b:a6:a3:e6:79:d7:06:eb:70:1c:6b:04:5e:b3:fc:
         c4:cc:95:8f:b9:15:72:c1:6a:27:f9:57:0f:31:2a:1d:93:47:
         c5:9e:72:20:bf:93:37:9a:37:7c:41:aa:88:db:0b:fb:57:a8:
         01:37:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:54 2026 by rpki-client