Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
File:                     S-1YvEVE5-O16XicZ8Y77JHCfN0.mft (raw, json)
Hash identifier:          Wivj40mcxGhvh6t47bZ4fz+/8wQJaN28cgCcEn1+8bg=
Subject key identifier:   08:11:72:61:D3:06:ED:EC:93:DE:B5:A3:72:E1:42:2E:5D:64:DC:43
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Certificate issuer:       /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial:       35E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
Manifest number:          35AC
Signing time:             Sat 26 Sep 2026 15:16:54 +0000
Manifest this update:     Sat 26 Sep 2026 15:16:53 +0000
Manifest next update:     Sat 03 Oct 2026 15:16:53 +0000
Files and hashes:         1: S-1YvEVE5-O16XicZ8Y77JHCfN0.crl (hash: T+JhMpgmcRDbBdOwr6IPWQOB1rgGTWgsT+Sz1P/ZHMI=)
                          2: D257C8F88FAB11F0A7F64E1AC4F9AE02.roa (hash: hs0nDDVUrLiUCE9O0BNERAudlBtt1Piqfm2kHdjyb3o=)
                          3: 0188487C15AA11E685F66C3CC4F9AE02.roa (hash: ARIAsIPoKYiuLH9pSfImpweLKAxo0kcdc8Tf7diPFxY=)
                          4: BAD49C82AA9611F098799D0CC4F9AE02.roa (hash: 8315NWB7T+r8so9TLjxJjLLffNl/KqUTxd1+v/47CtA=)
                          5: E3D2704667FC11F0AC42A91FC4F9AE02.roa (hash: TIHotFIbYqz1P22Gnw00YGSjdK2XTrdEZSfLC0cyCIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
                          rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 15:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13799 (0x35e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
        Validity
            Not Before: Sep 26 15:16:53 2026 GMT
            Not After : Oct  3 15:16:53 2026 GMT
        Subject: CN=6ab7e1e6-f4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:60:d7:5e:1b:26:4b:10:92:dd:39:9b:57:
                    b4:fc:4a:82:f9:b0:62:9b:d5:c4:0c:e8:a1:dc:88:
                    90:24:c6:51:c9:8b:b7:c6:a4:0a:26:57:82:39:9d:
                    5f:98:1e:ef:46:ba:a9:34:e6:9f:6b:53:5e:b9:6c:
                    45:9d:21:7e:05:90:7b:56:82:ba:a9:5e:46:bb:e1:
                    37:48:0e:45:7d:8d:d2:fc:67:d5:11:d1:ef:28:23:
                    aa:26:bc:d4:1a:c8:f7:19:a0:91:ea:d0:59:74:8a:
                    44:70:a6:33:c2:5b:a3:93:0e:98:9e:38:be:c8:81:
                    99:e9:8f:77:d0:79:af:2b:79:d8:9b:0e:4d:df:36:
                    39:41:24:1d:d5:0e:b3:35:2c:2a:de:70:cf:7f:31:
                    9e:18:07:c7:b8:e8:17:d7:96:c6:da:69:79:99:09:
                    70:91:7c:e8:03:b4:bb:73:5d:46:80:3f:fd:6d:2d:
                    f5:47:e8:39:75:22:34:82:80:23:44:20:be:e4:46:
                    7d:1f:25:02:8d:4d:36:2a:83:69:c2:9d:3d:45:8e:
                    a0:f1:25:3d:a6:35:14:58:37:25:0c:8a:b3:3d:dd:
                    2a:6d:c8:6f:ae:03:cb:00:02:4b:5a:ec:e0:ea:4f:
                    22:14:1d:d7:c0:bb:1b:4e:2b:3e:bb:c5:0d:a5:5f:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:11:72:61:D3:06:ED:EC:93:DE:B5:A3:72:E1:42:2E:5D:64:DC:43
            X509v3 Authority Key Identifier:
                keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:45:37:b4:2a:69:e1:6f:27:aa:37:dd:8b:cf:9c:54:b7:
         df:ad:67:50:8c:57:c0:f4:27:2d:37:58:85:12:11:f0:a5:06:
         2c:d6:57:87:9f:31:bc:d4:79:78:82:22:60:82:73:ee:cb:49:
         55:57:17:39:b7:4d:f6:e8:77:68:e3:ce:a5:9d:8c:ac:85:9f:
         80:43:b8:9d:0d:e9:81:55:24:e6:48:cb:f7:56:5c:ec:f2:a0:
         96:a3:c6:22:20:c3:d8:c6:17:fa:18:41:cf:0e:c2:a8:83:93:
         e0:c2:b3:31:dc:31:d0:34:c4:71:ae:4b:c0:cf:49:2e:b9:ee:
         51:7a:dc:39:37:65:5e:c2:a3:e1:21:ca:fb:bc:27:79:58:d6:
         14:ba:8f:d5:1e:85:1d:a2:e0:78:89:76:61:3d:10:c5:3a:4f:
         38:11:a1:be:28:fc:38:4a:f2:ea:9e:76:cd:34:40:22:0f:45:
         f5:b9:4a:0c:68:2b:6c:b7:3d:d9:dd:07:61:24:55:2b:78:f0:
         2c:29:b9:fc:ba:5f:07:d4:24:48:41:64:1a:58:9e:e8:cf:0c:
         56:ed:b1:c3:53:04:43:1f:57:dc:9d:5e:58:68:0d:18:6c:c2:
         77:4e:2f:9d:96:f3:ff:88:fb:0f:54:55:53:3d:d1:03:a8:7d:
         12:75:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:15:44 2026 by rpki-client