Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
File:                     DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft (raw, json)
Hash identifier:          aVHdVcPtV8EiWFLboa7SbluPdlsjU4friKPi1yliVRI=
Subject key identifier:   FB:0D:3B:9C:70:C7:6E:55:6D:E0:91:7B:D1:48:BA:BB:86:D8:F4:39
Authority key identifier: 0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4
Certificate issuer:       /CN=A91F7D5F/serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
Certificate serial:       355F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
Manifest number:          355F
Signing time:             Tue 28 Jul 2026 15:15:26 +0000
Manifest this update:     Tue 28 Jul 2026 15:15:26 +0000
Manifest next update:     Tue 04 Aug 2026 15:15:26 +0000
Files and hashes:         1: DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl (hash: bXlticquf8Tmrp8KVJFzH7eQXqYckSgswJOp+PO9Jfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663 (0x355f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5F, serialNumber=0D8E1603F5B63AAC55918BD2FFDD2174E3239AE4
        Validity
            Not Before: Jul 28 15:15:26 2026 GMT
            Not After : Aug  4 15:15:26 2026 GMT
        Subject: CN=6a68c78e-bd01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:0b:6a:0a:ae:ff:f7:18:ed:25:2b:88:21:
                    83:c7:d7:62:0f:6c:11:c8:d9:34:ce:14:63:f1:a6:
                    dd:88:4f:a9:22:65:24:9b:bd:98:4f:22:ce:cf:2c:
                    68:59:f7:7d:e9:26:33:e4:6a:10:0f:87:e0:28:d0:
                    e5:a7:6b:ad:e6:65:8c:d4:e7:66:2c:70:e0:43:91:
                    77:63:e0:bf:89:d8:cf:61:11:0d:a4:a1:2c:d3:af:
                    d4:61:f4:f2:61:53:d6:02:98:57:c9:d1:0d:4b:e5:
                    e2:0b:df:e7:90:5c:d5:1b:b0:3e:44:94:f8:a5:fd:
                    81:ee:33:f3:4d:5f:e7:de:70:1a:90:2d:4a:18:0a:
                    cf:81:a3:61:34:a0:e0:4e:d1:1c:b9:09:48:be:92:
                    94:6a:fc:7b:70:23:2e:8c:1b:b1:00:3b:e9:3f:5f:
                    aa:35:f0:88:12:11:4e:df:a4:c2:b0:23:58:a2:0d:
                    05:e8:e6:a4:b7:dd:f4:c7:e2:1c:70:57:5d:ef:be:
                    56:8f:be:bf:09:6c:7e:9b:5f:40:71:75:cc:f1:92:
                    e7:a1:38:b2:ce:3c:ad:90:8c:65:40:e4:b2:2f:ce:
                    33:60:0d:e6:9e:1c:d1:6c:59:26:37:19:9f:ce:12:
                    85:00:d3:62:15:7b:66:53:3a:9d:0b:e3:fe:c0:45:
                    11:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0D:3B:9C:70:C7:6E:55:6D:E0:91:7B:D1:48:BA:BB:86:D8:F4:39
            X509v3 Authority Key Identifier:
                keyid:0D:8E:16:03:F5:B6:3A:AC:55:91:8B:D2:FF:DD:21:74:E3:23:9A:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5F/DFD55B601DA611E2A7CF509E08B02CD2/DY4WA_W2OqxVkYvS_90hdOMjmuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:20:d9:8d:71:b2:cf:46:24:ab:bb:62:59:e9:8e:b9:d6:
         56:ca:44:16:ad:92:ae:fb:18:2d:c9:b7:2d:62:b2:f1:f0:b5:
         22:5d:f2:44:52:0a:a2:80:64:c4:a5:ad:b2:2a:71:4b:74:d3:
         97:c2:73:3f:d0:44:18:5f:59:de:89:78:43:99:d3:4e:b2:0c:
         88:a9:e9:a8:d0:f8:9d:92:1d:ac:ab:be:8a:d4:59:63:b0:cd:
         9b:f7:97:8f:8d:15:c9:bc:c7:7b:c9:e8:c5:a5:2e:3c:ec:3f:
         74:1f:cd:ac:5c:0e:0e:43:d5:e8:50:93:6c:69:b7:3b:87:f9:
         8d:8a:85:1d:bc:06:9b:9d:d5:69:c4:c2:aa:7b:9c:97:a9:39:
         9a:3d:b1:7e:5f:19:b7:5b:5c:3b:9b:cd:f4:72:b5:63:fb:0c:
         c9:8a:45:d1:15:68:9f:f8:25:b7:b8:59:4e:ef:fe:d0:34:11:
         16:8e:ba:ae:9c:a7:10:a6:2a:ae:f6:58:04:7c:df:7e:ac:36:
         3b:28:a4:34:ad:27:62:08:bc:7c:19:7e:ae:0f:38:6c:8e:24:
         14:e5:27:a6:4a:22:20:67:0a:d6:33:66:da:07:f7:f5:bc:d6:
         3d:99:01:61:83:b4:e0:70:42:8e:ff:80:ab:77:1f:a4:4a:fc:
         23:ae:5c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:12 2026 by rpki-client