Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File:                     ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier:          WYqatYiovUralAXMxs2UbW/JANowJgc0hgQgHKM6/FY=
Subject key identifier:   06:33:AA:48:70:6A:D2:75:27:C4:09:08:63:74:58:23:F7:23:9D:69
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer:       /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number:          8D
Signing time:             Fri 25 Sep 2026 07:38:57 +0000
Manifest this update:     Fri 25 Sep 2026 07:38:56 +0000
Manifest next update:     Fri 02 Oct 2026 07:38:56 +0000
Files and hashes:         1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: i8B3pgGn62E+nSOAh+aiZ43sSGFh9t5PSoSwm2OMg4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
        Validity
            Not Before: Sep 25 07:38:56 2026 GMT
            Not After : Oct  2 07:38:56 2026 GMT
        Subject: CN=6ab62510-887d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:2a:2f:3b:30:43:e5:4f:1e:3a:76:5d:2b:
                    62:37:36:e9:22:a7:f6:3e:cf:88:4c:d7:92:6c:fa:
                    15:7e:07:4a:10:1c:dd:6d:3a:d3:21:88:41:d1:34:
                    78:6d:5d:cc:f1:c9:01:aa:60:7e:96:b1:d8:f6:94:
                    c4:6c:55:83:f4:e1:fc:37:5d:36:c1:78:fb:d2:74:
                    9d:4e:60:33:d3:eb:21:d4:ad:18:81:5c:c9:da:11:
                    e6:f8:4b:cd:7b:e5:5b:df:ec:93:1c:a1:48:57:ce:
                    1a:c9:71:01:a6:f3:4d:c8:20:40:fa:15:a8:6a:bc:
                    d9:86:cc:7c:f5:a9:a4:9a:0a:4d:6b:ed:aa:96:bd:
                    1d:27:f0:65:5a:66:14:a8:1e:fc:75:59:da:ee:70:
                    42:f0:a2:58:b1:06:60:6a:05:a9:db:11:d5:b2:49:
                    6d:e2:cf:7e:4a:1a:5d:31:3f:0e:aa:a4:0b:3c:74:
                    8e:6f:33:41:3a:7a:d0:6c:23:42:99:f4:8d:ec:3d:
                    68:73:59:52:1f:42:a5:fb:dc:1f:09:22:d7:88:3d:
                    15:6f:77:9a:de:47:91:f2:00:2c:dd:fd:88:4f:96:
                    d5:f0:79:c2:84:b2:b6:eb:59:2e:7a:ca:7e:3d:5b:
                    64:6f:4a:0c:92:d3:a3:83:30:2e:99:92:4c:94:fa:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:33:AA:48:70:6A:D2:75:27:C4:09:08:63:74:58:23:F7:23:9D:69
            X509v3 Authority Key Identifier:
                keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:3d:77:43:cc:7e:7b:1a:1d:14:a5:a6:e7:f3:ab:2e:1d:
         30:56:ee:cf:f3:b5:51:2c:d8:1c:34:86:63:9d:41:85:c3:0e:
         02:8f:5b:81:2d:ae:32:37:24:4e:d4:8e:66:ad:83:18:cc:c3:
         4f:cf:4c:a5:99:c7:9c:1f:1b:b3:d7:a0:48:46:fb:99:04:92:
         f6:54:01:91:56:8f:f6:8f:99:46:01:a3:d4:9a:81:53:9f:11:
         50:4c:3d:b9:51:e2:02:a1:d4:53:24:13:45:26:11:b8:c9:92:
         db:94:c6:98:d7:f8:d8:93:88:7d:d7:65:0b:03:5e:21:c6:79:
         25:86:3e:9b:d5:70:38:7d:cd:3b:f0:23:b5:0b:2a:14:8d:89:
         b1:ee:7f:d3:b4:90:47:05:9d:04:f3:2e:1b:c2:58:52:4c:d3:
         9f:9c:78:c3:b9:c9:f0:1b:7e:6a:9e:57:31:d1:af:28:ec:08:
         ce:03:d4:3d:fc:30:03:57:94:6e:92:d7:bb:2e:8f:59:f6:cc:
         a7:40:14:6a:6c:78:03:a6:7e:11:87:dc:d7:74:38:9a:0f:02:
         d7:91:21:79:2e:a8:99:25:a4:03:dd:a1:42:02:52:6f:d4:75:
         f4:6b:90:57:9c:f2:99:af:c2:22:32:f6:20:82:5c:9b:55:ed:
         c1:74:25:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:37:31 2026 by rpki-client