Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File:                     YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier:          JJ6GSVshUVcq7XdsfWOlsLrkHzipc4HwOg/dfsYJRhQ=
Subject key identifier:   9D:5C:46:CE:D1:5E:3F:1F:2E:4A:AF:41:0A:03:7A:EB:6C:27:68:C0
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer:       /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number:          A2
Signing time:             Fri 17 Jul 2026 08:26:44 +0000
Manifest this update:     Fri 17 Jul 2026 08:26:44 +0000
Manifest next update:     Fri 24 Jul 2026 08:26:44 +0000
Files and hashes:         1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: 9PfiM0/Rb/rIx6gr4pspMxZbOx4HwEAeVYrsfqaN+So=)
                          2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
                          rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
        Validity
            Not Before: Jul 17 08:26:44 2026 GMT
            Not After : Jul 24 08:26:44 2026 GMT
        Subject: CN=6a59e744-14a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:d7:dc:4d:89:5d:d2:db:98:44:d5:ef:24:
                    ac:ac:95:13:b8:3f:04:dc:03:93:0c:a4:5e:cc:49:
                    f6:c4:42:47:64:06:0d:f9:93:a0:3e:56:1f:86:95:
                    d8:2e:e3:31:f4:76:96:2d:99:05:9a:81:6c:db:67:
                    33:e7:62:c0:fb:a0:a1:02:c0:51:92:2c:2d:e2:bf:
                    a6:8d:c2:94:c1:33:03:30:dc:4d:5b:97:ac:49:25:
                    05:f7:32:8e:47:bf:bc:ab:bf:ca:6c:25:50:c8:42:
                    2a:1e:06:3d:5e:c0:f7:0c:3a:5d:31:2c:82:80:77:
                    b4:ea:a6:b7:88:56:af:af:d3:77:6b:8f:48:0b:c2:
                    23:8a:e2:9e:1a:a4:18:47:3d:42:43:00:81:a5:92:
                    81:dd:3a:97:e7:1e:20:a1:46:6b:ad:41:b1:dc:6b:
                    bf:7c:a6:a8:de:5b:75:7d:cb:04:39:3d:dc:52:98:
                    84:6d:68:77:19:9c:e9:b6:49:11:05:55:bb:c0:e4:
                    c3:d6:50:e6:84:22:26:87:e2:01:2f:89:44:ad:b8:
                    f1:c2:dd:e0:7d:37:ee:a0:d3:72:bd:b6:e2:90:40:
                    21:a5:de:c0:8b:3e:b9:8c:31:4b:b3:6a:fa:16:3e:
                    0a:de:6e:f2:e5:6e:ac:a6:8c:73:b5:c9:96:b2:86:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:46:CE:D1:5E:3F:1F:2E:4A:AF:41:0A:03:7A:EB:6C:27:68:C0
            X509v3 Authority Key Identifier:
                keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:07:85:54:12:7e:50:d2:fa:13:96:b6:18:16:4c:9a:4d:b3:
         ff:8e:0a:a2:fa:9c:41:34:7b:92:6e:37:38:e6:7e:e0:af:39:
         6b:c7:c6:80:a5:89:3d:f2:30:bb:ea:5e:67:01:6b:c3:ad:c2:
         3d:6f:20:fd:e8:87:3e:8f:fc:41:bf:22:5f:33:f7:8b:1b:e0:
         47:f3:af:62:04:9c:38:10:9c:1c:7e:08:33:84:de:6f:4d:eb:
         30:1a:1c:37:dd:d0:78:b7:75:e1:5d:c8:13:79:61:78:b2:d5:
         2a:fd:1a:c7:c0:5c:82:de:74:50:3f:b7:37:70:36:f1:08:62:
         23:99:f1:2a:39:27:da:c2:49:e4:7f:01:0f:35:ed:08:c3:04:
         72:6a:2e:4b:26:f2:1b:66:9b:a4:d3:4d:44:0b:be:4d:a1:a0:
         0f:8c:2c:dd:72:09:25:a4:ad:8f:9d:a6:40:2a:03:55:20:b3:
         4f:1f:2a:99:7c:5d:85:89:ae:9d:3b:70:ef:18:0d:b2:93:69:
         97:77:6d:5e:d0:f2:81:f9:4d:76:e6:00:8a:57:b2:28:63:7a:
         37:c1:3a:f1:4f:bf:82:8a:df:48:2a:be:8f:db:4f:d3:83:cd:
         6f:ca:00:e4:7a:44:a3:1b:c4:5f:48:ae:31:49:24:ba:17:e6:
         e4:1a:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:31:21 2026 by rpki-client