Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          LSrYW6RRHDF8AMCErEEByX2tTX0eigB7Vi3Nw4EN+9M=
Subject key identifier:   A2:52:E3:36:2A:EB:C1:77:40:2E:E8:F9:7D:4A:5C:F1:2E:E6:9F:24
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       363E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          35D8
Signing time:             Sun 04 Oct 2026 15:17:58 +0000
Manifest this update:     Sun 04 Oct 2026 15:17:57 +0000
Manifest next update:     Sun 11 Oct 2026 15:17:57 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 85WuKxEtWmu7TKYd0z3Gi+BZcwefIjvDngrD3VoGDGQ=)
                          2: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
                          3: EA6E0AAC50D411F18B34A857BE833773.roa (hash: OEoll2QdrXXA0K9ht1DiuZRtdqA89xzzL49jYr5VTFI=)
                          4: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:17:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13886 (0x363e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Oct  4 15:17:57 2026 GMT
            Not After : Oct 11 15:17:57 2026 GMT
        Subject: CN=6ac26e25-6776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:f1:9a:18:f2:c8:1f:e4:75:61:5d:da:00:
                    48:c1:77:58:18:22:a7:d9:64:dd:0f:1c:fc:25:98:
                    5f:84:3d:94:56:ce:fd:48:97:f2:61:60:bd:c4:71:
                    08:30:bf:76:7e:50:7f:02:e2:bd:c3:2c:00:e8:18:
                    85:05:77:18:8d:fc:d4:7b:11:20:43:dd:87:c7:f3:
                    a1:52:1e:09:48:19:c1:4a:fd:92:9b:48:1c:79:78:
                    28:53:c2:a3:1c:ff:6b:bc:27:77:52:c4:ac:db:6e:
                    4f:e5:3e:6a:46:fc:69:79:6c:82:7f:b9:da:08:d1:
                    25:b3:18:7a:85:d4:2d:ec:ad:00:d7:9d:fd:22:d0:
                    c5:42:19:c2:7e:45:05:0f:2a:1e:86:d8:2c:29:62:
                    8e:bb:c7:33:ea:97:05:df:66:44:6e:a4:30:72:f2:
                    43:5c:a0:5a:db:d7:b2:9f:04:2a:58:f5:ac:a4:56:
                    75:93:06:b9:b2:81:03:9b:e4:3b:d0:42:b5:44:89:
                    72:cd:da:cb:4d:db:7c:e5:45:76:a3:06:a9:28:51:
                    3d:d9:51:2a:2b:52:e0:37:c0:13:80:06:dd:31:cb:
                    64:97:82:95:d7:73:2e:5c:9a:c1:c8:84:8e:72:fe:
                    30:46:32:4d:9c:3a:0a:31:9d:0d:1a:cb:88:81:21:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:52:E3:36:2A:EB:C1:77:40:2E:E8:F9:7D:4A:5C:F1:2E:E6:9F:24
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:cb:41:b3:d5:8b:5c:ee:2a:17:d7:f9:e6:38:2d:03:b1:5f:
         24:5a:24:98:0c:d1:fb:e3:6b:d0:b9:f5:57:a1:83:46:8e:3b:
         7c:b5:d2:d4:87:65:9b:e0:09:45:3d:75:14:59:a9:d2:c1:dd:
         01:93:af:2f:0a:6a:85:84:bb:bc:c9:49:50:30:84:b1:e8:48:
         58:43:be:16:d7:4a:fd:93:ad:1c:77:d8:5a:54:a8:c3:84:cc:
         7f:cd:1b:f6:fc:28:27:b1:95:cf:32:14:b5:16:e6:ee:0b:4a:
         c5:10:3d:26:2e:95:f5:ca:fd:8d:24:6e:d7:f7:ac:7b:67:52:
         bc:55:65:db:0d:2b:98:5f:ec:d9:fb:aa:f4:0e:48:12:15:a9:
         0d:37:88:ee:62:88:cf:61:7a:0a:2f:7f:2d:ff:68:e6:bc:b6:
         1a:20:4e:a3:62:ba:5e:4a:10:c3:c4:9c:39:b3:8c:9a:4e:c7:
         26:ec:80:2c:ee:5f:da:c4:f0:aa:c2:92:4a:37:01:95:db:0b:
         61:08:44:dc:d2:41:e8:0a:23:6b:75:e3:e4:85:1b:b6:ff:ef:
         e3:07:fd:7f:33:9a:eb:d9:f1:81:86:ab:14:86:f1:28:ab:fb:
         aa:a7:84:a4:a8:0e:39:21:4b:c8:f6:14:b5:49:df:50:b4:a2:
         8c:a9:e4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:19:24 2026 by rpki-client