Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
File:                     sYTDX2rtv7hd2kET8nUuDInKOpA.mft (raw, json)
Hash identifier:          1aZGO5ofj0f9Ww/El4gW0YjppqgIryhLhBFhRUwgT9c=
Subject key identifier:   1D:0F:E7:08:23:8C:91:69:4B:76:63:43:19:52:41:A2:6C:64:42:F4
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Certificate issuer:       /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial:       0BD1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
Manifest number:          0BC7
Signing time:             Tue 28 Jul 2026 19:16:45 +0000
Manifest this update:     Tue 28 Jul 2026 19:16:44 +0000
Manifest next update:     Tue 04 Aug 2026 19:16:44 +0000
Files and hashes:         1: sYTDX2rtv7hd2kET8nUuDInKOpA.crl (hash: eO0iobPKRr9OlwgIrlgaWu0/r2/u22rbyDWuyvkUmO0=)
                          2: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (hash: 3yI5gZ2vGPgL1FKd+BCUys3WRaz0/cKCtffyBVWrgS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
                          rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 19:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025 (0xbd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
        Validity
            Not Before: Jul 28 19:16:44 2026 GMT
            Not After : Aug  4 19:16:44 2026 GMT
        Subject: CN=6a69001d-ed95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:0d:02:59:75:ad:df:ab:86:f5:7a:9a:34:
                    4f:e1:37:dc:3c:36:a6:e9:b2:f6:3a:f0:de:e7:73:
                    40:00:cb:ac:36:11:06:c8:37:c3:98:87:75:67:18:
                    a9:d8:a4:6d:47:20:24:9a:de:86:5f:b4:62:a0:c1:
                    ef:12:e5:ee:05:be:ad:b1:d2:f8:0c:ed:e4:a7:6e:
                    a3:93:fb:91:2f:b2:13:bd:0e:ae:f4:31:f4:35:c8:
                    cd:0a:a7:e0:bb:c7:de:e2:66:1d:e8:ff:85:50:62:
                    a2:96:e3:b8:34:83:1a:fc:09:43:69:41:38:2e:43:
                    d4:a1:5e:a7:c8:a1:d9:21:a0:0f:d9:9c:9d:ce:f1:
                    b7:90:28:e4:ff:6b:ee:17:1e:e2:fd:60:33:a6:1e:
                    b1:73:79:76:03:f9:15:50:bb:ad:c2:b0:44:8f:50:
                    71:8e:bb:cf:ff:4f:33:3c:a7:aa:ae:ec:dc:35:ee:
                    3f:3c:c1:03:9c:2d:a4:6b:da:4d:36:dc:1c:08:4e:
                    51:d7:f9:9d:3d:bc:bf:07:2c:00:70:b6:47:e0:ef:
                    ae:53:e9:71:4b:c7:5c:43:fd:02:bb:07:97:29:6b:
                    c8:19:76:bb:bd:f2:23:be:cb:b8:2e:1f:a4:a6:a2:
                    2c:4d:b8:07:51:11:2a:b7:3c:15:d5:91:6d:23:93:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0F:E7:08:23:8C:91:69:4B:76:63:43:19:52:41:A2:6C:64:42:F4
            X509v3 Authority Key Identifier:
                keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:96:3c:69:74:36:86:48:8a:7d:5a:fc:c5:14:fd:79:2a:
         bc:8e:55:87:09:37:e0:d7:91:e7:9f:2e:06:a9:df:fa:aa:58:
         76:bd:06:8b:48:07:b3:bc:16:2a:a7:f3:2f:a1:e6:0f:5c:d8:
         17:13:fb:13:d4:e8:a9:52:72:dc:38:82:53:7b:af:af:96:b1:
         1c:13:c0:a7:6c:f5:e2:0f:4e:c6:b1:a0:09:7e:6f:a7:72:46:
         0a:94:70:51:26:ac:03:30:6f:0f:7c:e4:5f:d9:e8:42:64:cd:
         99:c7:06:71:f4:2d:4d:b3:05:7b:2c:4e:a0:d4:b4:76:63:ae:
         8c:0a:54:5d:dd:d3:18:8c:e5:58:3a:d8:c6:09:9f:25:fb:57:
         57:57:0e:b4:5d:6d:fa:0c:63:51:a2:f2:eb:ac:7a:4e:a0:7f:
         fb:34:0d:08:03:d0:64:38:a8:97:30:43:b2:28:d4:73:a0:a9:
         1e:ae:5f:d4:93:31:a8:a4:77:fe:84:f5:c3:e2:b4:20:76:8f:
         76:71:67:cc:f5:e9:c5:cf:27:7c:45:16:29:5f:0c:6b:33:8f:
         3e:2d:21:89:97:1d:96:9b:a9:da:a2:91:c1:83:6a:91:08:07:
         33:8c:bb:54:ab:e9:3b:f9:77:99:d1:76:2f:42:8a:4e:ab:b4:
         f0:9e:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:45 2026 by rpki-client