Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File:                     iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier:          lUFssCyVG9SvJO0n8r4nMnfsF9at8jKXIgTZhCbdLuc=
Subject key identifier:   2B:9B:09:EB:CB:FB:BB:49:23:12:A8:E8:94:6B:F0:B7:3D:7B:1A:0F
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer:       /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial:       08A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number:          0A56
Signing time:             Sat 04 Jul 2026 20:46:05 +0000
Manifest this update:     Sat 04 Jul 2026 20:46:04 +0000
Manifest next update:     Sat 11 Jul 2026 20:46:04 +0000
Files and hashes:         1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: +ovIAdOFkzAH/LhKLgBeYrTgUfAsqhiKLkAYZ01X4mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
                          rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
        Validity
            Not Before: Jul  4 20:46:04 2026 GMT
            Not After : Jul 11 20:46:04 2026 GMT
        Subject: CN=6a49710d-4869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:d4:64:9d:74:df:21:2e:bd:cb:3c:7e:c3:
                    b5:2e:ce:df:de:1d:b7:b5:4b:59:9b:12:99:ab:9b:
                    cf:1c:fe:7e:fb:ad:16:00:e5:8e:d0:24:92:15:82:
                    27:64:3a:dd:3c:5b:c7:91:40:3a:fe:fc:8a:7d:e6:
                    15:5d:07:74:c4:81:0f:30:08:55:87:cc:f1:79:5b:
                    2f:a4:d6:f0:de:83:6f:62:99:10:5d:51:26:39:c4:
                    0d:9b:cb:a0:1b:50:ff:89:68:c1:31:db:e7:2a:da:
                    c0:23:6d:ab:b5:38:4d:3d:ff:1d:dd:43:bb:de:d1:
                    ba:5e:64:83:db:d8:d0:ea:fa:6c:ac:8f:e2:2e:18:
                    84:a8:9b:5a:e7:1e:8d:a8:8b:af:08:b1:1f:81:46:
                    ea:73:ee:3d:93:2e:eb:9b:53:75:d4:61:b0:cc:f1:
                    6d:cf:69:2d:a3:c4:b7:2e:8d:88:5c:f4:e9:9c:2c:
                    d9:b0:cd:03:b4:df:35:bd:ae:61:ef:b3:68:58:fe:
                    e1:8c:70:43:bb:63:19:51:b7:00:a4:4f:86:05:f1:
                    c2:68:52:6c:67:e7:d3:7f:df:16:25:f7:ba:f2:39:
                    b8:ca:53:2d:ed:a6:c2:48:e1:a0:ca:92:c1:fd:43:
                    2c:fb:57:44:5e:b7:07:80:02:86:5e:a5:78:fa:d6:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9B:09:EB:CB:FB:BB:49:23:12:A8:E8:94:6B:F0:B7:3D:7B:1A:0F
            X509v3 Authority Key Identifier:
                keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:d3:28:f7:16:26:f4:ce:cb:b3:26:00:57:50:63:92:d7:
         4f:6a:e1:fd:63:bc:f3:00:0a:6e:08:1c:3a:9a:39:74:6a:e4:
         c1:85:37:e3:4b:76:e1:c2:e9:6e:7d:5b:33:ca:71:df:f0:21:
         bd:94:3f:b6:b3:ba:73:66:26:54:56:15:c9:b5:12:38:4a:2c:
         99:ca:35:ee:d0:1c:b2:84:02:e8:99:8b:29:4e:39:bd:b1:3b:
         4a:e5:55:a6:c6:12:d9:aa:58:55:39:17:9b:31:b2:e3:99:5f:
         ad:c5:90:7c:85:45:d7:ed:a2:0a:f2:2d:52:48:a9:82:f7:a5:
         46:3c:cb:dd:82:cf:f3:fb:bc:60:3d:8b:2a:1e:89:1d:88:c6:
         cc:24:f1:3a:db:60:4b:a0:c1:de:44:e2:bf:ad:2a:25:60:66:
         e3:d8:f0:0b:32:e4:4f:94:34:a4:a5:f9:49:ec:dc:9e:f3:59:
         fd:96:87:9b:ef:24:33:63:11:e8:b6:46:63:46:3c:2e:7f:b6:
         c4:bc:19:01:c6:c9:f1:59:9f:b8:84:af:2e:66:24:53:68:64:
         17:09:38:2d:7a:cc:09:67:8e:a4:b9:51:1e:91:d9:4b:34:f3:
         48:54:8b:27:fa:ef:dc:d1:30:a9:9d:b5:13:5b:53:5f:ff:91:
         0c:6e:37:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU5RjQxMTAvBgNVBAUTKDg5OEFGMzgzN0Q4NEYzODk0N0E4MzVDMDYzQzg0OEQ3
MDE4OEVDODYwHhcNMjYwNzA0MjA0NjA0WhcNMjYwNzExMjA0NjA0WjAYMRYwFAYD
VQQDEw02YTQ5NzEwZC00ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoavUZJ103yEuvcs8fsO1Ls7f3h23tUtZmxKZq5vPHP5++60WAOWO0CSSFYIn
ZDrdPFvHkUA6/vyKfeYVXQd0xIEPMAhVh8zxeVsvpNbw3oNvYpkQXVEmOcQNm8ug
G1D/iWjBMdvnKtrAI22rtThNPf8d3UO73tG6XmSD29jQ6vpsrI/iLhiEqJta5x6N
qIuvCLEfgUbqc+49ky7rm1N11GGwzPFtz2kto8S3Lo2IXPTpnCzZsM0DtN81va5h
77NoWP7hjHBDu2MZUbcApE+GBfHCaFJsZ+fTf98WJfe68jm4ylMt7abCSOGgypLB
/UMs+1dEXrcHgAKGXqV4+ta5SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCubCevL
+7tJIxKo6JRr8Lc9exoPMB8GA1UdIwQYMBaAFImK84N9hPOJR6g1wGPISNcBiOyG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTlGNC8zRDZCQTU3NEY2
OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0bEhxRFhBWThoSTF3R0k3
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lZcnpnMzJFODRsSHFEWEFZOGhJMXdHSTdJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTlGNC8zRDZCQTU3NEY2OTYxMUVBOTM0ODZGMjVDNEY5QUUwMi9pWXJ6ZzMyRTg0
bEhxRFhBWThoSTF3R0k3SVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfs7TKPcWJvTOy7MmAFdQY5LXT2rh/WO88wAKbggcOpo5dGrkwYU340t24cLp
bn1bM8px3/AhvZQ/trO6c2YmVFYVybUSOEosmco17tAcsoQC6JmLKU45vbE7SuVV
psYS2apYVTkXmzGy45lfrcWQfIVF1+2iCvItUkipgvelRjzL3YLP8/u8YD2LKh6J
HYjGzCTxOttgS6DB3kTiv60qJWBm49jwCzLkT5Q0pKX5SezcnvNZ/ZaHm+8kM2MR
6LZGY0Y8Ln+2xLwZAcbJ8VmfuISvLmYkU2hkFwk4LXrMCWeOpLlRHpHZSzTzSFSL
J/rv3NEwqZ21E1tTX/+RDG436g==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:44:48 2026 by rpki-client