Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File:                     yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier:          KymHkTfTxlDnN/59MWhV97/YV3XyJcUvljpCb1NGQ9c=
Subject key identifier:   1A:8F:EC:20:D8:1A:55:10:DA:A8:79:35:A3:15:59:49:9C:94:8A:B6
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer:       /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number:          083D
Signing time:             Sun 26 Jul 2026 21:45:28 +0000
Manifest this update:     Sun 26 Jul 2026 21:45:28 +0000
Manifest next update:     Sun 02 Aug 2026 21:45:28 +0000
Files and hashes:         1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: ggDNDq/Rhx6HVGppt2+85bx0NiRmdvaPKEYTWjxZyFY=)
                          2: 7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa (hash: y02tkPqWkRUuFzYRyDSp8BRV329jb14C5pvIrtHdumk=)
                          3: 5A775F7A7B6811F1AA1BD1A85FA30FBC.roa (hash: ojwUPCe0RkTv08DQXptDfXTUMvfz2oNhHNRY4L9yTk8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
                          rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 21:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
        Validity
            Not Before: Jul 26 21:45:28 2026 GMT
            Not After : Aug  2 21:45:28 2026 GMT
        Subject: CN=6a667ff8-faaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:ad:97:78:56:38:a6:8c:3e:2b:01:a1:9c:
                    85:6a:4d:8d:3c:6f:e5:19:84:4c:4e:5a:83:2c:65:
                    53:fd:80:cd:29:e8:45:18:9c:7d:a6:8f:d8:9e:3b:
                    2a:f1:cb:ba:83:66:b2:4c:5e:25:52:7d:2a:a4:29:
                    f4:ec:a8:26:3c:4b:7c:85:8d:47:e7:6c:0a:5e:2c:
                    a7:f4:9f:fa:d2:f9:8d:8a:41:4d:ef:fa:80:75:96:
                    51:3e:bd:c0:ff:03:c2:95:f9:88:2e:ff:ad:12:8e:
                    f7:46:34:8b:7a:dc:14:19:d4:fb:6c:e4:a4:77:28:
                    b6:96:12:d9:da:6f:1f:0b:dd:a4:79:d3:6e:1d:92:
                    b1:12:58:a3:28:44:4a:20:ae:24:4f:cd:c2:b3:1f:
                    0b:75:84:49:d7:ae:a5:90:08:84:b3:15:70:7e:dd:
                    bc:66:92:db:af:46:a8:e7:7d:de:6c:33:52:8b:74:
                    0c:8b:e9:5b:ae:91:34:48:b9:df:8e:ad:94:2d:dd:
                    07:80:c7:71:74:f0:3f:a6:06:e5:ab:fd:9c:aa:9d:
                    72:33:0f:17:2f:1a:49:c6:3b:21:ac:97:a1:3f:d0:
                    5b:35:66:10:58:d4:03:91:57:1c:6d:3b:73:75:bc:
                    a3:7d:6b:ed:43:3a:b6:25:83:65:81:9b:48:f1:59:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8F:EC:20:D8:1A:55:10:DA:A8:79:35:A3:15:59:49:9C:94:8A:B6
            X509v3 Authority Key Identifier:
                keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:df:5f:82:c3:ea:96:14:3b:4d:a6:a4:c0:6e:69:25:9c:8a:
         3d:41:c9:7c:ad:2c:29:eb:b4:9f:1f:67:2f:30:f8:97:f3:9f:
         3e:f3:4e:56:cd:8c:be:59:32:5c:cd:cd:ce:20:9d:b4:5f:45:
         f1:e3:3e:b8:5d:75:d6:6a:25:26:62:43:64:8b:f6:69:8f:58:
         ba:f2:42:03:00:20:ef:8d:2e:f2:04:e9:50:08:19:16:21:f9:
         ff:0d:f3:a7:47:7b:37:af:0c:09:35:f5:c1:ba:b1:ec:36:ea:
         1c:9a:bb:fb:cc:f0:f7:a8:45:1e:e6:07:a3:52:89:fe:55:33:
         7d:22:da:dd:e6:5d:e6:96:b6:a8:70:2e:58:4a:91:48:f1:cf:
         38:6a:cc:49:4b:61:de:2d:da:0f:23:7d:33:42:40:88:b7:6a:
         16:bd:bd:13:c8:76:67:47:f1:87:55:8d:3b:75:60:20:2b:92:
         8c:df:84:b0:74:41:e2:a4:a3:97:0c:59:3c:65:90:62:87:47:
         d0:0a:71:67:a7:5f:13:9d:34:76:95:6b:49:99:6a:69:70:b4:
         40:2a:de:94:2c:c3:40:9c:14:24:c8:19:1f:d5:08:1b:5f:ef:
         b8:e3:c9:5b:42:b2:27:89:a9:7d:07:9b:46:4e:6b:f3:b3:d9:
         5c:91:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 02:46:57 2026 by rpki-client