Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File:                     YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier:          z2/lCAzxUKIlKp1tkrTphYHOTV2C6axqQw0s79G78LU=
Subject key identifier:   5F:1D:14:99:FE:57:AD:21:C7:A4:8F:32:5B:DF:BC:9D:24:5F:63:9A
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer:       /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number:          055C
Signing time:             Tue 18 Aug 2026 23:45:40 +0000
Manifest this update:     Tue 18 Aug 2026 23:45:39 +0000
Manifest next update:     Tue 25 Aug 2026 23:45:39 +0000
Files and hashes:         1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: StMBP8T0FN+43v1VbV7wyjzHNa3/tv/SUVGzZXOwNi0=)
                          2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: voztcrzhiVsnEEDAL+kh/aaIgcYKoM5wE79GPvMJ4lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
                          rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 23:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
        Validity
            Not Before: Aug 18 23:45:39 2026 GMT
            Not After : Aug 25 23:45:39 2026 GMT
        Subject: CN=6a84eea4-fffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:31:2b:22:d1:da:a7:05:d3:92:f1:bd:c5:
                    94:f5:9f:29:b9:05:5c:a2:40:ba:07:e9:90:56:96:
                    16:bb:21:bb:9c:f6:67:f8:47:7d:be:43:86:0d:c2:
                    32:11:e0:df:51:30:d8:b2:00:42:0a:f0:73:83:17:
                    7c:8e:aa:ff:cb:32:fe:56:fc:dd:14:2f:ec:a1:b1:
                    23:e7:01:82:74:c5:c3:2a:37:8d:0f:95:91:bb:df:
                    c7:a7:34:cc:aa:7a:60:dc:6b:06:40:67:92:56:46:
                    92:c8:34:83:d2:9c:fc:5d:fb:31:bb:a0:59:eb:3a:
                    e2:8e:4c:40:12:81:4d:2e:3b:f7:2a:dd:d1:70:98:
                    cf:81:3d:38:5d:66:85:fd:61:92:9b:c5:20:4b:0b:
                    12:d0:5b:29:8b:c7:96:44:d8:8c:f2:89:32:7e:cb:
                    20:8f:e8:ab:37:89:51:11:cd:30:58:cc:56:ed:ab:
                    d9:34:fc:b8:87:a2:be:c0:e6:3f:07:0e:5d:60:c5:
                    35:ae:53:6e:d9:44:92:1b:30:c6:40:99:a3:20:70:
                    b1:5a:80:f7:18:33:c0:e9:47:cf:87:73:54:1e:d6:
                    7c:5a:ef:72:f8:bc:75:19:9c:80:c1:f8:81:0e:dd:
                    1a:30:9d:f7:65:54:39:61:13:47:17:5d:a2:f7:35:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1D:14:99:FE:57:AD:21:C7:A4:8F:32:5B:DF:BC:9D:24:5F:63:9A
            X509v3 Authority Key Identifier:
                keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:20:31:67:8c:d8:21:ef:ec:74:f8:80:6a:36:d3:a7:27:b0:
         f0:00:c3:26:c5:c2:f4:71:50:53:b1:bd:1d:ca:e6:73:8b:74:
         46:bb:32:07:eb:b5:66:c3:a2:b8:79:fc:30:8d:16:d2:aa:ec:
         ec:1c:76:eb:23:4b:e8:49:6b:31:c7:66:af:e7:65:b9:c9:68:
         8d:e8:2b:4c:a4:c5:4b:df:7c:81:00:cf:ca:7c:25:58:20:7b:
         16:71:43:4e:02:32:a0:7b:3b:6f:fc:e0:87:60:8c:14:82:d9:
         e8:26:c4:e4:74:38:b9:04:81:79:55:41:0f:11:f3:a9:cc:b3:
         89:ef:c2:63:ec:9a:6d:8c:c4:52:82:4c:d2:07:52:84:46:3d:
         c8:18:24:40:42:99:75:79:37:5a:8d:62:a9:5a:a7:7f:68:d8:
         57:e9:d0:81:aa:37:14:4d:6d:6c:b3:f9:72:3d:95:2e:14:bb:
         0e:5b:e1:8e:f6:a5:b6:36:79:36:d7:f0:1a:11:d9:d8:3f:6b:
         ab:4f:d4:4c:d3:18:21:aa:a0:e1:95:be:29:b3:fb:1a:53:03:
         8d:2f:f7:fb:5e:28:21:d7:69:cd:a4:2a:81:18:f8:90:8d:f5:
         1d:24:e0:91:ef:b9:33:37:c9:14:d2:73:a0:0b:ca:34:b9:c5:
         df:f5:f2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:55 2026 by rpki-client