Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
File:                     YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json)
Hash identifier:          TqR0JD42x0VjjuWqj16+ycrKhEXm07UIMGhiAIrMbrM=
Subject key identifier:   04:2A:D7:E1:92:58:85:53:41:D5:94:05:CD:17:77:02:D8:11:85:21
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Certificate issuer:       /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial:       08CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
Manifest number:          08BB
Signing time:             Tue 28 Jul 2026 20:56:43 +0000
Manifest this update:     Tue 28 Jul 2026 20:56:43 +0000
Manifest next update:     Tue 04 Aug 2026 20:56:43 +0000
Files and hashes:         1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: JEMiRKAqPcohBOB85lLL0xqOxqDbmjv0F+YmJbcnWeE=)
                          2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM=)
                          3: 3983EA66217E11F18ECE80E5073D8C67.roa (hash: /mxloS7ClCcaj5x0floJR4T78S/qjwGI70YG2UCZk8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
                          rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 20:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
        Validity
            Not Before: Jul 28 20:56:43 2026 GMT
            Not After : Aug  4 20:56:43 2026 GMT
        Subject: CN=6a69178b-6a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:e7:dc:84:07:e3:0f:42:ba:a8:f6:48:b2:
                    9d:f5:4c:5d:ff:24:3c:74:4b:b9:27:95:37:3b:75:
                    ca:0f:a1:55:3a:06:12:e5:72:84:77:14:aa:44:ef:
                    b0:09:62:c0:53:fb:ab:c5:f7:b4:e1:b7:31:a3:17:
                    3a:e2:4e:a8:18:3b:df:db:60:62:98:06:c1:1f:f7:
                    8c:33:fd:67:cf:f3:46:f2:13:97:38:8f:b3:74:ac:
                    8b:0f:41:52:29:3f:84:a3:a8:25:0b:f5:52:9c:b4:
                    18:82:3b:66:b4:73:c4:ad:ad:9e:83:15:a4:64:1e:
                    00:69:d0:ea:0d:39:aa:8e:f9:0b:23:07:f6:bc:fd:
                    da:58:34:e1:b0:4e:99:04:58:94:64:88:c3:1b:49:
                    27:79:18:fd:36:6b:8a:74:46:c6:1a:ea:5c:53:62:
                    bb:ce:4b:65:76:56:ba:ea:16:55:b4:a3:db:eb:48:
                    47:92:46:b3:df:9a:b4:06:c3:b5:3e:c5:33:30:d5:
                    30:4c:91:fe:47:71:48:57:c4:53:ab:a4:b7:be:6b:
                    26:c3:ab:61:b3:bb:9b:c2:14:a0:7f:4c:48:6d:1e:
                    5f:e0:9a:a9:f5:35:7f:87:c5:c1:f7:c9:38:37:c7:
                    76:7c:f5:18:ab:a3:60:12:b7:2c:e9:31:75:00:6e:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:D7:E1:92:58:85:53:41:D5:94:05:CD:17:77:02:D8:11:85:21
            X509v3 Authority Key Identifier:
                keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a8:bd:d3:d1:dd:0b:0c:04:c5:79:b4:ab:fa:0c:82:c8:51:
         67:96:ea:ce:5a:a7:02:9d:ec:1c:0b:36:9c:63:f2:ba:2c:c5:
         70:00:36:36:04:25:72:f6:eb:7b:93:9f:9a:07:1c:c8:4b:7e:
         36:77:96:2b:c8:2d:c9:6e:fe:1b:32:63:1c:cb:32:78:8f:84:
         a8:cb:de:bf:b4:ca:be:5a:0f:f7:85:05:e1:2f:8e:82:2d:6c:
         0b:74:1e:9b:08:60:90:d6:f0:fa:3c:26:f1:2a:16:f6:b0:b8:
         2b:77:d1:10:e8:5b:b3:89:fe:a5:f5:78:77:8b:69:1e:71:1a:
         e7:df:2a:e5:2e:d7:a8:c5:f6:6d:28:71:4b:aa:1f:c9:b4:78:
         c7:0b:c8:69:db:27:02:ae:fa:c9:9b:7b:7a:03:f4:c7:0a:ae:
         17:69:0c:f9:f0:34:50:32:16:db:d4:f3:64:27:21:20:68:b8:
         48:6e:9a:78:71:a0:99:53:cf:f6:4d:f1:ae:b8:26:a0:04:76:
         44:92:11:90:b5:9b:31:f7:d1:6d:cf:b7:e6:aa:8f:2f:6c:77:
         4d:c0:d5:08:22:4d:1e:83:c1:7a:10:26:0a:60:1d:8d:53:83:
         1f:c7:5e:ab:c6:b5:13:15:99:32:de:84:db:e1:96:29:c1:12:
         fb:c3:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:30 2026 by rpki-client