Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File:                     YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier:          VkGnfwm2BWye6fLwCu8qmZ+K7TK+e7dg6v8/xGQLzik=
Subject key identifier:   85:04:9B:DB:A2:FB:52:6A:03:54:85:8D:EE:77:D6:7E:CD:82:D7:98
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer:       /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial:       020C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number:          0205
Signing time:             Wed 29 Jul 2026 04:16:16 +0000
Manifest this update:     Wed 29 Jul 2026 04:16:15 +0000
Manifest next update:     Wed 05 Aug 2026 04:16:15 +0000
Files and hashes:         1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: Zs1AAuv4metwHsKkGy8yKRKJUiS40kORBMzRSaNJA08=)
                          2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: BaVQtlGks/nXODj3nVj6X8TPxl0CNzfAzBCFqERU/qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 04:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
        Validity
            Not Before: Jul 29 04:16:15 2026 GMT
            Not After : Aug  5 04:16:15 2026 GMT
        Subject: CN=6a697e90-b3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:a7:75:aa:0a:e3:1c:59:fc:e4:15:0f:a8:
                    3a:43:07:e0:b5:ac:6f:d9:1e:36:f3:ed:e6:2c:16:
                    d9:ef:8b:a9:74:12:ec:6f:a8:f7:f9:86:8f:a9:fd:
                    be:c8:ec:34:89:c5:f7:de:92:f9:57:c3:e0:4d:c2:
                    38:fe:13:38:95:2b:cc:77:c7:d8:de:5f:a8:b1:35:
                    54:0a:20:0c:43:2f:06:d7:91:87:26:07:92:95:ad:
                    ea:00:74:1e:56:e0:b2:c3:28:86:00:00:6e:f9:21:
                    28:98:05:05:a6:f9:4b:c6:c3:e2:41:40:25:3c:b3:
                    52:93:d0:65:ea:e2:93:0b:13:58:3e:c8:dc:ec:49:
                    b8:55:54:51:0f:33:7a:db:15:ef:09:9e:e1:ae:44:
                    79:c6:93:2c:f9:31:f8:9d:6f:d6:4c:7c:4f:6d:64:
                    c2:61:a8:de:4d:ef:96:ef:ca:d9:d5:eb:12:c9:e7:
                    d9:bd:5f:cd:32:64:16:56:7d:13:40:c2:72:26:ca:
                    92:71:7f:1d:d6:b4:81:52:42:91:e9:b8:53:0a:7b:
                    34:4a:57:30:be:1e:3f:38:aa:08:3a:b4:6b:f6:8d:
                    9c:80:89:99:2f:4b:76:82:97:0c:84:32:e2:06:66:
                    bf:e3:13:c0:4e:d3:fe:fb:3f:37:84:fe:41:9d:b2:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:04:9B:DB:A2:FB:52:6A:03:54:85:8D:EE:77:D6:7E:CD:82:D7:98
            X509v3 Authority Key Identifier:
                keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:15:fe:a2:ce:06:d7:f5:a0:10:ee:05:30:70:cf:4d:6c:72:
         d9:6e:52:ee:a0:ed:37:c4:4c:7f:13:41:05:72:a5:39:d0:b2:
         ba:d4:38:aa:2a:f0:b3:ec:f3:f6:5e:76:67:d3:dd:f3:1c:9a:
         40:a0:25:17:2a:b5:83:85:90:62:19:40:e0:08:ae:0a:c9:a9:
         74:bc:b2:63:c2:51:df:22:90:c9:33:2a:54:e3:4d:b5:69:ed:
         09:a1:41:1d:3a:f1:a0:8f:13:fe:31:28:d8:2e:3e:30:ee:77:
         a5:81:67:9f:31:ce:b9:be:df:ac:e5:0d:f7:cf:69:c9:16:5c:
         bf:47:76:f9:1b:76:62:91:40:8a:18:1e:a3:b2:30:95:89:3d:
         ee:d9:b6:2d:ca:8b:77:a9:64:d7:c5:8c:a1:38:68:7f:fb:af:
         b3:9b:fa:f8:6e:40:39:50:05:d8:7e:29:f3:c4:15:7a:fb:4a:
         1c:85:bd:b3:9b:d7:43:68:26:39:bd:a6:0a:41:a8:c3:2b:60:
         0c:3f:1e:c3:ff:2f:8d:d2:61:10:af:64:60:a3:39:ee:05:79:
         96:c2:1b:8e:84:d1:a5:aa:e2:a0:46:4e:ac:d9:62:5d:c2:04:
         69:0c:03:62:67:6c:e9:af:cd:5a:38:b6:47:01:6b:9e:10:0b:
         6c:5c:76:01
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG
MkI1OTYyMDQwHhcNMjYwNzI5MDQxNjE1WhcNMjYwODA1MDQxNjE1WjAYMRYwFAYD
VQQDEw02YTY5N2U5MC1iM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApvWndaoK4xxZ/OQVD6g6Qwfgtaxv2R428+3mLBbZ74updBLsb6j3+YaPqf2+
yOw0icX33pL5V8PgTcI4/hM4lSvMd8fY3l+osTVUCiAMQy8G15GHJgeSla3qAHQe
VuCywyiGAABu+SEomAUFpvlLxsPiQUAlPLNSk9Bl6uKTCxNYPsjc7Em4VVRRDzN6
2xXvCZ7hrkR5xpMs+TH4nW/WTHxPbWTCYajeTe+W78rZ1esSyefZvV/NMmQWVn0T
QMJyJsqScX8d1rSBUkKR6bhTCns0Slcwvh4/OKoIOrRr9o2cgImZL0t2gpcMhDLi
Bma/4xPATtP++z83hP5BnbKV/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIUEm9ui
+1JqA1SFje531n7NgteYMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3
RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4
ZGpscFFYUER6LVh5dFpZZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArxX+os4G1/WgEO4FMHDPTWxy2W5S7qDtN8RMfxNBBXKlOdCyutQ4qirws+zz
9l52Z9Pd8xyaQKAlFyq1g4WQYhlA4AiuCsmpdLyyY8JR3yKQyTMqVONNtWntCaFB
HTrxoI8T/jEo2C4+MO53pYFnnzHOub7frOUN989pyRZcv0d2+Rt2YpFAihgeo7Iw
lYk97tm2LcqLd6lk18WMoThof/uvs5v6+G5AOVAF2H4p88QVevtKHIW9s5vXQ2gm
Ob2mCkGowytgDD8ew/8vjdJhEK9kYKM57gV5lsIbjoTRparioEZOrNliXcIEaQwD
Ymds6a/NWji2RwFrnhALbFx2AQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:23:46 2026 by rpki-client