Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
File:                     YOVPYFHttB6nqVCJbNm71nASDWM.mft (raw, json)
Hash identifier:          aKX6MWYhErS6ZVtd4Pv1T6FNNygWxco4CREN5XeJV2M=
Subject key identifier:   E2:8E:C1:F2:74:D1:C5:35:51:46:52:F8:52:DD:53:49:3E:03:D6:DE
Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63
Certificate issuer:       /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
Manifest number:          019B
Signing time:             Tue 23 Jun 2026 04:26:32 +0000
Manifest this update:     Tue 23 Jun 2026 04:26:32 +0000
Manifest next update:     Tue 30 Jun 2026 04:26:32 +0000
Files and hashes:         1: YOVPYFHttB6nqVCJbNm71nASDWM.crl (hash: GJw6OzfYIOopFl4b29qzV9oIoNyxNUSGDenL8ksANi8=)
                          2: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (hash: bPEX0dVvMeMHuF9ZTGsIQels0ly/XiaUVU8i8aAIXrw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl
                          rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 04:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63
        Validity
            Not Before: Jun 23 04:26:32 2026 GMT
            Not After : Jun 30 04:26:32 2026 GMT
        Subject: CN=6a3a0af8-4135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:14:a0:5a:58:21:ac:6b:dc:99:be:3a:a8:
                    1b:ac:10:25:6a:17:a1:fd:17:b1:e6:81:e7:bf:03:
                    55:fe:3b:fc:ef:22:9c:b3:d5:13:85:5b:31:08:ba:
                    1b:d6:0c:c6:5c:a7:b3:ab:fd:0c:95:dd:f5:ec:16:
                    cf:7f:2a:17:15:09:85:69:3b:09:60:b9:13:4f:a9:
                    5c:2d:07:8a:15:c6:19:7e:de:83:f2:74:bf:e1:ab:
                    9f:e9:5c:c1:d7:05:08:7e:cc:3d:f4:18:72:9e:e6:
                    e8:2e:e7:d1:8c:38:4d:93:58:7f:4e:26:c7:d8:d6:
                    9a:1e:6d:4f:9f:cb:9f:73:c2:7b:d6:0a:56:50:d3:
                    58:74:7f:ad:a5:43:b8:a1:54:d6:c3:96:9a:bb:0a:
                    49:13:10:50:77:1d:79:d8:f2:54:40:c4:e3:3c:47:
                    76:34:6c:a1:f4:e7:52:ee:e7:40:b0:8e:97:c4:51:
                    d2:0e:45:ec:e5:3c:47:d8:f6:5c:25:ca:31:e0:e3:
                    2c:3d:86:63:eb:b9:55:45:f6:85:69:f5:6d:40:d0:
                    50:7f:b5:12:07:19:49:cc:b0:f9:d3:c5:2b:8b:69:
                    34:4b:f3:70:07:f6:96:65:04:0e:c9:66:4b:8b:fc:
                    d1:6b:79:56:f4:34:fc:68:5e:9d:4e:62:ab:da:bd:
                    9f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8E:C1:F2:74:D1:C5:35:51:46:52:F8:52:DD:53:49:3E:03:D6:DE
            X509v3 Authority Key Identifier:
                keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c6:a8:27:ff:19:e6:9e:81:fb:1f:c8:e6:f2:f5:91:b0:81:
         89:cf:1c:40:03:a9:ce:02:2b:f9:b2:25:b1:4e:3e:c7:2d:08:
         c5:9b:55:fc:d2:10:a2:46:22:26:1a:62:30:8e:fa:c7:65:ea:
         a1:49:63:c0:c4:68:02:86:7d:e5:f1:3f:1b:2c:dd:29:c2:f7:
         01:ac:e8:24:a0:46:80:4b:9d:8c:5f:88:40:c7:3a:59:01:ca:
         f6:af:01:df:25:36:aa:53:5c:2c:21:b0:9c:2b:6a:ee:67:2d:
         76:85:e4:a3:e5:68:64:2f:f0:55:ef:73:43:52:75:06:15:ec:
         5c:e3:a0:62:3a:8c:42:40:17:51:8d:5b:66:e4:f3:4f:32:ab:
         0d:72:0f:ba:64:ce:b4:28:50:a8:3f:de:af:6a:64:02:cd:91:
         5e:7a:08:f5:fe:86:97:50:d5:a6:3e:ce:20:84:61:63:04:97:
         06:35:b8:cc:0f:f2:f1:bb:be:36:fe:e0:16:78:b8:36:4c:d0:
         28:d6:35:5a:e6:82:ea:f1:18:7e:a6:40:a7:f7:af:e2:4d:df:
         35:51:8b:a1:61:40:42:ac:c9:b6:38:63:23:2c:31:45:76:de:
         28:cf:d8:1e:29:ef:f3:de:4b:14:56:36:e0:92:39:bb:8f:74:
         18:28:75:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:16:11 2026 by rpki-client