Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
File:                     3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json)
Hash identifier:          7WztiwFFlhKoeNN9AIYZyHy/Z6IVbv+TPNpnZgVgMkQ=
Subject key identifier:   7C:28:E6:32:EA:AF:17:1A:7B:FD:8A:74:57:5D:FC:D9:F3:F9:55:B4
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Certificate issuer:       /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial:       0D39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
Manifest number:          0D2B
Signing time:             Sat 26 Sep 2026 18:18:23 +0000
Manifest this update:     Sat 26 Sep 2026 18:18:22 +0000
Manifest next update:     Sat 03 Oct 2026 18:18:22 +0000
Files and hashes:         1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: ljGAeoKapjh7vYIn6chnKEVRiy6MT9vHVXyU/NN3uMk=)
                          2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: daKcZCbALq7mBJOtcbv2v2MfxhLUBlaySluMNlxd+rE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
                          rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 18:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
        Validity
            Not Before: Sep 26 18:18:22 2026 GMT
            Not After : Oct  3 18:18:22 2026 GMT
        Subject: CN=6ab80c6f-036a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:91:1d:2f:04:94:16:ee:95:36:73:c4:18:
                    34:ed:95:e3:82:58:d4:5c:09:61:dd:45:f4:ee:b8:
                    f7:74:55:2f:97:e0:13:dc:2a:d5:fc:f0:f4:22:9b:
                    82:57:31:f7:ae:8f:83:27:b1:03:89:7b:8e:b9:a2:
                    0e:a7:2b:49:1f:73:1f:88:56:46:07:78:96:fa:1d:
                    10:b6:12:76:40:9b:ce:82:3e:51:08:ed:3e:76:69:
                    05:e2:4f:ba:98:0d:da:c5:c8:c5:db:bc:57:08:fb:
                    02:f7:18:18:73:2c:7e:7e:f9:02:5d:09:92:2c:a6:
                    7b:0a:43:0b:a5:e3:cc:93:d6:4c:60:2e:74:8e:36:
                    35:51:9b:7f:bc:36:01:f4:4f:55:6d:36:a7:66:1b:
                    97:c3:b6:e4:90:ab:07:02:14:52:d9:3d:9e:82:df:
                    e8:47:62:26:09:f3:41:b9:4c:1f:58:a8:c4:50:05:
                    dc:59:32:48:d6:d5:c9:72:58:5b:e8:4a:41:4e:7e:
                    0b:2c:b4:61:60:b1:49:41:9d:e3:f5:86:1a:e8:d5:
                    d2:4e:37:98:25:9b:dc:3e:3e:99:53:84:8f:e5:e1:
                    50:9e:b4:d4:ce:8e:0d:67:f2:0b:cf:8a:d2:c7:27:
                    20:0e:71:29:00:24:f9:b3:6d:6f:4a:38:07:8d:fd:
                    6e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:E6:32:EA:AF:17:1A:7B:FD:8A:74:57:5D:FC:D9:F3:F9:55:B4
            X509v3 Authority Key Identifier:
                keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9a:04:4d:31:09:c5:c0:38:7f:97:c6:6e:a1:b1:f3:00:41:
         67:d8:86:f9:09:a2:16:44:f2:26:06:42:e7:79:68:69:13:d5:
         12:1a:8c:c0:da:39:a6:0b:61:77:6a:26:ac:b5:96:40:20:18:
         32:9d:f8:cd:d6:23:03:77:55:2b:74:01:8f:7a:9c:5b:16:7e:
         65:1e:a6:e2:a1:37:da:57:96:c9:31:39:ca:5a:10:c9:80:45:
         8d:5a:4f:5d:20:be:80:d3:f3:af:f8:bb:61:d0:30:91:39:26:
         d9:ff:72:43:6c:49:26:cb:e8:dc:37:8b:0d:c2:b3:a3:c4:d5:
         22:09:72:d4:6c:36:fe:e7:4f:10:88:ad:84:56:84:8c:db:c1:
         60:c9:70:8e:2c:13:fa:b6:1f:87:22:fb:56:5d:6d:37:b5:73:
         8e:37:ad:66:8e:66:42:0b:2b:b6:4f:1c:10:ac:d8:d6:09:9c:
         78:e2:27:8b:8b:5c:0a:2c:13:8f:40:fa:d8:38:30:0e:54:c9:
         f6:a9:99:b7:9e:38:12:cd:68:d4:88:af:f9:69:a5:8c:75:b9:
         51:e5:d4:b0:bf:48:d0:d4:5d:76:4d:62:a3:22:00:aa:4a:88:
         48:76:46:9a:34:a7:4b:49:ce:49:93:1b:e3:b4:ae:93:69:ae:
         e4:b0:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:34:06 2026 by rpki-client