Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File:                     ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier:          n/knSafpnCy5scgJZoUcrvichuxv/fL7vSGA1PkR+LY=
Subject key identifier:   E6:11:68:62:08:73:92:90:5E:0F:AC:BA:99:67:58:82:18:1A:67:95
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer:       /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number:          7A
Signing time:             Wed 19 Aug 2026 08:28:32 +0000
Manifest this update:     Wed 19 Aug 2026 08:28:32 +0000
Manifest next update:     Wed 26 Aug 2026 08:28:32 +0000
Files and hashes:         1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: hElHHA8nGwFBbEd1tFvIukI592K9erNmIfu1NdZYD8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
        Validity
            Not Before: Aug 19 08:28:32 2026 GMT
            Not After : Aug 26 08:28:32 2026 GMT
        Subject: CN=6a856930-205a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:29:65:1a:7a:28:ad:9c:94:a5:81:c6:90:5b:
                    9f:7d:a3:44:a9:1d:b5:5a:eb:94:5b:0c:d0:40:32:
                    57:c8:52:32:60:10:c2:00:55:a5:1b:18:9f:50:62:
                    41:cf:d0:ee:8d:4f:f4:f2:b7:d0:60:68:a0:97:07:
                    05:fa:29:10:78:95:91:90:e9:a1:18:fa:21:d7:db:
                    2a:a8:d0:78:aa:b2:19:95:e9:0c:e0:b2:71:a0:80:
                    81:b4:2c:73:5b:90:d5:a1:f8:82:5f:f6:e7:88:9d:
                    f7:c2:92:9a:13:6a:7a:12:84:dc:5b:38:55:15:18:
                    be:48:a2:84:e9:4f:6c:f2:e3:71:8a:ec:df:dc:c0:
                    e1:15:bd:5d:59:04:a9:fc:09:6c:b4:96:ea:3c:a6:
                    8d:78:e0:40:eb:ca:98:c0:50:41:9d:93:13:b8:ba:
                    4a:3d:9f:fa:6f:f1:c2:b7:dc:47:f6:f1:99:26:51:
                    9d:15:1a:58:b6:ac:19:be:08:34:c6:50:be:d7:23:
                    85:91:e0:b8:b3:12:84:56:cd:d3:3f:b3:18:43:81:
                    d9:5d:17:8f:ca:f0:5a:13:29:4f:cc:5c:e3:cb:ef:
                    a8:ae:92:0e:5b:f3:94:d1:f2:92:b9:8e:99:5a:53:
                    b1:07:5d:f2:d3:4d:d5:4e:61:21:0a:34:74:34:2d:
                    2b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:11:68:62:08:73:92:90:5E:0F:AC:BA:99:67:58:82:18:1A:67:95
            X509v3 Authority Key Identifier:
                keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:69:6f:3e:5c:2e:1c:e0:fb:1b:23:96:83:83:7c:ab:8d:cd:
         2b:b5:52:d3:6e:6e:a6:13:d9:a1:b7:a8:1e:82:e9:92:ec:30:
         25:f7:a1:cf:a3:e3:ed:16:fd:31:35:71:e9:21:47:22:7d:a4:
         5c:77:85:63:d7:df:80:79:1e:d9:48:12:19:c9:0e:68:fb:60:
         aa:34:a1:bb:4b:bc:9f:9a:83:ce:b5:9f:14:71:eb:61:19:be:
         cc:4e:64:9e:1f:be:b3:6e:9c:10:04:a7:f8:8a:f8:e9:58:55:
         54:4f:8d:3a:23:2c:a4:2f:71:13:6f:21:f7:94:c7:d2:d9:fb:
         02:99:4d:01:29:da:6a:0c:ac:3d:4a:67:1e:00:df:50:38:1b:
         b8:71:ae:2e:fd:49:43:06:ae:17:ba:47:fd:23:d1:ad:3c:fb:
         87:ff:3e:fd:4c:60:ef:cd:e6:8d:a9:61:e7:14:06:ff:04:84:
         8c:88:1c:98:ac:3f:75:df:55:a8:79:e3:dc:6c:ae:fa:f8:0d:
         bd:e3:62:df:80:ff:ff:2b:a0:f8:b3:a4:28:a9:cb:d8:e6:12:
         d5:c3:79:8a:b0:da:c0:f9:65:25:e6:92:e2:63:a1:55:c8:61:
         13:70:5b:ad:07:20:13:81:f0:e2:c2:a9:a7:b6:b8:43:dd:d0:
         26:1c:0a:6a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDNCMDExMC8GA1UEBRMoNDRFQ0FGM0NGMzBEOTIwNDQxN0U3NUJCMzY1N0UyRjcy
MTAxQTQ1MTAeFw0yNjA4MTkwODI4MzJaFw0yNjA4MjYwODI4MzJaMBgxFjAUBgNV
BAMTDTZhODU2OTMwLTIwNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDgKWUaeiitnJSlgcaQW599o0SpHbVa65RbDNBAMlfIUjJgEMIAVaUbGJ9QYkHP
0O6NT/Tyt9BgaKCXBwX6KRB4lZGQ6aEY+iHX2yqo0HiqshmV6QzgsnGggIG0LHNb
kNWh+IJf9ueInffCkpoTanoShNxbOFUVGL5IooTpT2zy43GK7N/cwOEVvV1ZBKn8
CWy0luo8po144EDrypjAUEGdkxO4uko9n/pv8cK33Ef28ZkmUZ0VGli2rBm+CDTG
UL7XI4WR4LizEoRWzdM/sxhDgdldF4/K8FoTKU/MXOPL76iukg5b85TR8pK5jpla
U7EHXfLTTdVOYSEKNHQ0LSsXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5hFoYghz
kpBeD6y6mWdYghgaZ5UwHwYDVR0jBBgwFoAUROyvPPMNkgRBfnW7Nlfi9yEBpFEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREM0IwL0Y3OUQxNkE2RTQ4
QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dSQmZuVzdObGZpOXlFQnBG
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUk95dlBQTU5rZ1JCZm5XN05sZmk5eUVCcEZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
M0IwL0Y3OUQxNkE2RTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dS
QmZuVzdObGZpOXlFQnBGRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEaW8+XC4c4PsbI5aDg3yrjc0rtVLTbm6mE9mht6gegumS7DAl96HPo+PtFv0x
NXHpIUcifaRcd4Vj19+AeR7ZSBIZyQ5o+2CqNKG7S7yfmoPOtZ8UcethGb7MTmSe
H76zbpwQBKf4ivjpWFVUT406IyykL3ETbyH3lMfS2fsCmU0BKdpqDKw9SmceAN9Q
OBu4ca4u/UlDBq4Xukf9I9GtPPuH/z79TGDvzeaNqWHnFAb/BISMiByYrD9131Wo
eePcbK76+A2942LfgP//K6D4s6QoqcvY5hLVw3mKsNrA+WUl5pLiY6FVyGETcFut
ByATgfDiwqmntrhD3dAmHApq
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:08 2026 by rpki-client