Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
File:                     0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft (raw, json)
Hash identifier:          ygFv0nJTIsCEt7Zr541HVGAtO/WClWe3XYHMHjPYUgo=
Subject key identifier:   AD:62:D6:09:7A:EA:97:85:58:5B:30:E3:C3:B2:EC:C6:00:5E:F2:05
Authority key identifier: D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23
Certificate issuer:       /CN=A91F1B39/serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
Certificate serial:       02CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
Manifest number:          02C8
Signing time:             Mon 27 Jul 2026 02:29:54 +0000
Manifest this update:     Mon 27 Jul 2026 02:29:53 +0000
Manifest next update:     Mon 03 Aug 2026 02:29:53 +0000
Files and hashes:         1: 0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl (hash: bZJdRKbqdLIj48JW09SctHjNgHsJBQWaJ8eiVHOCzj8=)
                          2: C18E7856446C11EDA55DB951C4F9AE02.roa (hash: cZTm/KkF9a4T8yImdIZRFI8s24gigDu7gs4zuRyCmpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 02:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1B39, serialNumber=D18F98A41C0ADC8C8184B826A71F3EF27F195323
        Validity
            Not Before: Jul 27 02:29:53 2026 GMT
            Not After : Aug  3 02:29:53 2026 GMT
        Subject: CN=6a66c2a2-3fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:a6:d0:e5:a4:54:a4:7c:fe:df:f7:ff:b6:
                    6c:80:7e:c9:86:7d:59:12:ef:dd:0e:d8:b1:87:e0:
                    37:f5:60:e4:be:cf:c7:a0:f2:56:da:f1:3e:be:ed:
                    6b:00:25:88:22:12:d7:87:30:56:42:e0:8d:c8:ec:
                    8b:8d:73:86:eb:96:80:0d:47:c6:91:84:7c:35:6e:
                    a8:0e:3a:89:62:08:e8:9e:72:b9:47:f6:5a:b3:b1:
                    35:60:16:e9:3c:87:35:4f:c4:97:9b:b5:d5:48:7a:
                    9b:cb:cb:33:01:90:c9:84:ff:1b:8b:43:c8:fd:8d:
                    51:44:74:a7:03:c9:0f:d7:92:c5:e8:88:a2:11:08:
                    55:39:28:10:7a:57:5a:88:25:55:f4:4f:04:43:16:
                    ea:08:9d:32:2b:22:2b:e4:9a:61:a0:86:0e:58:e6:
                    2b:46:7b:3c:98:5c:28:b5:69:f0:0b:2f:fd:b8:b7:
                    15:07:c3:52:3c:33:9d:c7:b9:09:ad:1c:4d:cb:32:
                    2f:da:a2:8d:91:d8:a1:7e:ca:1f:dd:f0:3d:8f:77:
                    5e:4c:07:d1:cf:88:7a:a7:1c:fc:54:4a:db:c1:91:
                    0f:f1:7e:22:f0:50:d7:b1:f7:d1:12:d8:b2:ac:a4:
                    38:b5:fe:28:9c:ca:14:00:19:47:11:00:61:ab:3e:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:D6:09:7A:EA:97:85:58:5B:30:E3:C3:B2:EC:C6:00:5E:F2:05
            X509v3 Authority Key Identifier:
                keyid:D1:8F:98:A4:1C:0A:DC:8C:81:84:B8:26:A7:1F:3E:F2:7F:19:53:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B39/B7699D2C446911EDBE4E794CC4F9AE02/0Y-YpBwK3IyBhLgmpx8-8n8ZUyM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dd:39:4a:e9:d2:42:68:6f:0c:a3:81:4b:89:0f:1b:dd:25:
         48:31:26:e0:01:99:ca:55:50:3e:a2:d1:de:bf:0d:98:55:f0:
         47:a2:75:92:0d:44:6e:ee:2e:55:bd:62:da:03:59:e2:9a:c8:
         75:e5:91:8a:07:ce:ed:d2:ea:f5:71:74:b6:30:4e:eb:da:a7:
         4c:84:90:a5:3d:6c:30:b5:cf:47:76:46:09:75:37:54:bd:3d:
         ca:c6:d6:3a:a5:16:13:f1:ca:f2:ce:7a:4e:72:6c:c2:8d:86:
         bb:3c:df:a5:1a:52:66:e4:fb:ab:ed:1b:6f:81:0b:a7:db:29:
         77:9e:17:bf:82:6c:cd:67:3b:2e:9e:23:36:ee:77:d7:4f:25:
         4e:2c:89:c8:98:d7:31:20:59:74:49:bc:72:a0:8c:58:e2:77:
         d0:ba:7c:22:62:b9:26:3a:fa:06:b3:43:d3:84:8d:d7:7b:ff:
         e6:26:d8:47:94:f9:9e:07:70:31:9a:bb:16:e2:77:ea:6f:5e:
         4a:4d:58:58:fb:14:fc:7f:9e:5c:01:0a:c2:96:28:02:56:75:
         11:c8:a7:a4:d9:bc:40:8d:0b:4c:f4:43:76:38:20:6c:e7:70:
         09:16:60:bc:82:62:10:6a:32:08:67:e4:2f:fe:c3:a6:14:be:
         2b:2d:ab:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:29:30 2026 by rpki-client