Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          odfBpx2U/9w0ieZRnuTKJM+ip59pDO4Fp3L+vFEk5bY=
Subject key identifier:   C3:12:50:CE:74:75:10:7E:D5:B7:37:F6:AD:28:CF:01:1D:C0:63:C9
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       0877
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          0869
Signing time:             Mon 06 Jul 2026 21:18:51 +0000
Manifest this update:     Mon 06 Jul 2026 21:18:51 +0000
Manifest next update:     Mon 13 Jul 2026 21:18:51 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: 2uchK8PxZpJnibecMrqji/cz5aJ7y2wAekTqmDF6ZFE=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
                          3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Jul 2026 21:18:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Jul  6 21:18:51 2026 GMT
            Not After : Jul 13 21:18:51 2026 GMT
        Subject: CN=6a4c1bbb-03fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:0d:98:0c:7d:57:d2:0a:b2:67:f3:9c:b4:
                    38:e9:96:0e:b5:c6:6a:25:a2:aa:1c:3a:9f:0c:b2:
                    b8:80:cf:50:0c:6a:2b:2a:1f:4a:a6:e3:be:0e:74:
                    24:4b:cb:57:f4:14:05:a9:ad:3d:1c:a2:78:f0:67:
                    45:3e:45:e4:e6:19:1a:66:32:23:55:10:bf:9f:2b:
                    b4:91:a8:ed:0c:13:96:40:ca:69:e2:38:49:41:25:
                    0c:e1:82:80:c0:64:f5:cd:51:ea:3a:a3:7c:b9:04:
                    a8:b4:c9:8a:d0:0c:bf:76:9d:54:bb:f5:2f:f4:cb:
                    0c:79:e3:1d:80:76:00:69:d6:08:c8:62:fb:c1:64:
                    34:de:03:de:41:84:b8:2c:1c:ee:36:98:ef:f6:c1:
                    95:4b:59:b3:8a:6a:47:3c:ab:6c:fb:31:64:82:2a:
                    a7:52:5d:fe:98:0c:a4:c2:68:03:2e:b4:eb:30:fa:
                    55:dd:13:9b:e7:ae:2d:37:84:0e:b8:11:85:23:eb:
                    37:09:00:7a:dd:c1:8e:76:af:3f:50:11:47:b3:25:
                    f6:f8:8a:6b:79:0e:28:87:1d:57:76:52:b6:e3:8e:
                    25:83:4c:11:ca:95:3b:7b:2a:3c:3f:ff:0d:0c:11:
                    15:b1:8c:3e:d9:a6:1b:b7:15:3c:8c:f9:eb:44:e6:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:12:50:CE:74:75:10:7E:D5:B7:37:F6:AD:28:CF:01:1D:C0:63:C9
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:44:e5:a0:ec:6b:01:11:41:5d:8c:f8:8f:bf:b7:07:18:
         31:8a:65:de:54:a7:01:f4:c2:25:15:8d:81:a2:ea:92:3a:b5:
         8e:d8:a6:f6:a0:ee:5f:83:51:af:c3:8a:87:22:b6:5d:70:79:
         68:84:c8:d8:40:65:c6:33:0a:cc:f4:f4:fd:d6:56:74:51:8d:
         2d:0d:bb:f6:14:1c:b0:60:0d:f2:df:07:90:6d:d3:6f:38:99:
         63:7c:0a:c4:1f:0d:01:92:c9:3b:80:2b:5c:9b:d5:46:34:f3:
         78:c7:5f:6e:93:81:b1:3a:ce:f8:02:ba:90:5f:54:8e:c9:b1:
         62:fa:02:cf:75:6d:5d:f0:7e:11:fc:00:ce:86:db:cd:f5:59:
         64:16:fd:1e:ea:3f:61:72:55:06:b4:cf:68:b8:3a:9e:90:e4:
         83:72:5d:d9:75:37:8d:c1:1c:d1:db:90:ed:a8:86:66:be:6b:
         55:90:37:7a:89:10:54:63:25:d6:89:fd:d3:ea:11:27:81:ca:
         93:d0:94:d8:bc:60:a4:3b:47:6b:4a:40:6f:a4:e1:91:9d:d9:
         a5:2f:6f:9e:59:35:34:fc:66:1f:7f:b4:bb:42:e1:d4:a1:c1:
         cb:fd:e9:b7:90:47:0c:2e:f9:44:1a:f8:41:41:3a:29:fc:6a:
         69:5e:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 03:19:42 2026 by rpki-client