Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
File:                     Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft (raw, json)
Hash identifier:          zfBe4Sgf4OxUDrLF6gkOkosOHcc9+x4NIGErQJJ4Fzc=
Subject key identifier:   BE:37:FC:93:B3:47:E7:55:F0:1E:74:EC:5F:9F:B3:A2:45:06:45:0E
Authority key identifier: 63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74
Certificate issuer:       /CN=A91DFD4C/serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
Certificate serial:       B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
Manifest number:          AF
Signing time:             Wed 29 Jul 2026 08:34:11 +0000
Manifest this update:     Wed 29 Jul 2026 08:34:11 +0000
Manifest next update:     Wed 05 Aug 2026 08:34:11 +0000
Files and hashes:         1: Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl (hash: lcuOAIZrg6ZZyex5gfM13sgB4Ax64OAmqPIOr3T47Jw=)
                          2: 4EC550229F7911F0892F6680C4F9AE02.roa (hash: gKh2lmx6ZZYyw96B7i0NN7NG7ZPJA6ncWMPAGGPkE84=)
                          3: 3A4C99D49F7911F08FC08A7FC4F9AE02.roa (hash: gAF8NOxTri4lmRnjfw1NrjD/U5F8xAKVG+vonQB71no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFD4C, serialNumber=63833A241E3E4959EBA19C701D04887DB4B1FC74
        Validity
            Not Before: Jul 29 08:34:11 2026 GMT
            Not After : Aug  5 08:34:11 2026 GMT
        Subject: CN=6a69bb03-f740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c2:b7:1c:d7:59:07:80:14:39:c0:6c:76:64:
                    1b:3e:ae:ba:a3:29:fe:8e:09:d6:e8:59:dd:ff:b1:
                    c1:70:0f:d5:ee:12:d7:c5:85:85:f5:73:a2:05:a9:
                    bf:87:12:f4:2e:ca:f8:14:fe:b7:59:5e:2d:99:71:
                    40:0a:6e:ea:b9:0e:95:1b:b3:19:37:f8:c3:1b:d7:
                    38:ea:af:79:08:3d:30:35:3e:43:13:2f:bb:20:8e:
                    30:73:3c:f9:1e:db:79:7d:79:d1:47:ab:22:bd:c3:
                    d3:72:7b:f6:56:65:1f:53:f0:90:bf:11:e6:59:58:
                    9b:4e:18:d4:30:90:be:4b:45:ee:60:00:2f:82:1a:
                    ce:e5:b2:2f:d7:55:c5:87:cc:6b:41:37:73:6a:33:
                    14:b1:19:db:99:03:14:ed:e4:80:c2:3e:f1:75:ec:
                    43:ec:0e:92:df:22:1b:f7:49:95:d7:2e:bc:32:fb:
                    e1:bf:a2:e2:67:65:e6:1d:06:bd:7c:51:15:41:7e:
                    92:7e:11:2c:44:bf:9e:2a:63:a3:5e:23:eb:8f:7d:
                    96:72:1d:a9:5d:89:ca:7d:77:1f:c3:4c:c9:e5:44:
                    fa:27:74:46:5c:05:f5:49:98:62:7c:e9:27:89:08:
                    44:25:be:9f:17:c5:9f:02:ec:9b:15:8b:7a:ed:32:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:FC:93:B3:47:E7:55:F0:1E:74:EC:5F:9F:B3:A2:45:06:45:0E
            X509v3 Authority Key Identifier:
                keyid:63:83:3A:24:1E:3E:49:59:EB:A1:9C:70:1D:04:88:7D:B4:B1:FC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFD4C/56EC3D9C836D11F08816006AC4F9AE02/Y4M6JB4-SVnroZxwHQSIfbSx_HQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:aa:0b:a6:7f:38:de:8e:ee:ea:86:b4:68:c5:f1:46:88:af:
         6d:fe:a0:3b:af:46:9b:52:65:12:d3:7e:b6:76:8f:04:60:db:
         9e:b5:41:d6:5a:d8:88:10:fb:26:66:43:45:2a:b0:7c:c7:a5:
         48:ce:ea:e4:cb:ed:b3:7a:6b:f6:e7:87:70:3c:7f:21:63:c8:
         86:43:2b:74:79:93:c5:1c:93:45:a6:58:a2:4c:c6:5c:a3:a4:
         0e:80:e7:9e:c5:be:05:54:f8:33:73:ac:88:49:b4:cc:0a:05:
         7b:f5:3e:da:31:56:cf:94:96:2b:45:40:0d:03:ec:9a:16:70:
         b8:41:7f:ac:90:af:85:59:17:5a:01:0c:58:8b:a0:90:4a:ad:
         e7:17:eb:53:fb:bd:9f:91:f6:f5:12:7a:2d:7b:20:e4:ec:72:
         6f:6e:6a:28:b3:7f:d6:14:69:56:91:54:6c:3b:85:7a:c1:81:
         66:8e:eb:bf:75:a9:0b:bf:82:ca:b1:ec:dc:94:a1:c6:cb:29:
         3a:e7:96:3c:3a:ff:a8:74:22:aa:d8:6f:e7:3e:d8:aa:2c:6a:
         cc:85:a0:0a:41:6e:20:82:a9:6a:54:03:cb:0e:f8:36:ed:5d:
         29:f0:93:e3:81:14:e3:32:3a:a2:d5:b5:02:f9:75:3f:58:9f:
         42:30:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:37 2026 by rpki-client