Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          gfTHyM+EflXNoWAuVzY6/UwpvRSOJujoqNCoWVueMK0=
Subject key identifier:   38:26:95:D5:AF:B5:5E:34:94:0D:B0:67:9D:A4:59:BC:AA:B7:CF:44
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       02F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          02E8
Signing time:             Sun 15 Nov 2026 01:07:40 +0000
Manifest this update:     Sun 15 Nov 2026 01:07:40 +0000
Manifest next update:     Sun 22 Nov 2026 01:07:40 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: m0PzKgH0Ka6PrBtlhEktNc8OX7mQoltmEJ6FdMtT/L0=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 01:07:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Nov 15 01:07:40 2026 GMT
            Not After : Nov 22 01:07:40 2026 GMT
        Subject: CN=6af905dc-7dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:d3:1c:65:43:b8:97:20:5b:93:d1:03:7b:
                    20:94:f2:4a:b4:f4:18:c4:a0:94:57:35:66:c1:8b:
                    91:dd:fd:06:29:00:38:38:f2:a7:3d:b5:82:59:98:
                    c6:1e:15:0b:97:7c:ff:b3:8c:4c:c3:10:19:9b:64:
                    77:60:aa:a5:1a:90:11:4f:b8:94:ea:33:f6:1c:6a:
                    d8:74:8a:d7:af:9e:7c:b4:7b:2c:8d:be:ff:cb:18:
                    f0:01:bd:4e:01:f3:38:36:fd:ec:ba:c3:e1:f9:40:
                    cf:df:0f:e6:e6:7a:25:5b:16:a4:99:c9:da:13:b1:
                    83:a1:2f:2f:f0:51:47:27:a2:fc:d6:b5:e2:6e:c7:
                    6d:1c:81:b0:c6:f1:47:88:5e:66:24:eb:5f:2d:26:
                    da:e4:31:0f:5d:a2:18:a1:4d:1b:67:96:bb:23:02:
                    b4:e7:d6:02:4a:b2:3b:86:7c:f8:c2:f4:3d:15:ea:
                    5a:13:74:c2:ea:14:3c:b5:a7:00:1b:47:33:81:f9:
                    4e:bd:6a:cc:e2:e4:7a:72:18:da:07:d6:56:5d:1b:
                    48:df:e8:8f:d8:d2:bb:75:40:68:9d:b8:3e:de:09:
                    3f:f2:2c:83:c8:03:c3:66:f4:75:45:c6:0d:17:99:
                    ce:ac:83:81:10:ae:5f:8b:ca:cc:6b:ee:eb:c6:c1:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:95:D5:AF:B5:5E:34:94:0D:B0:67:9D:A4:59:BC:AA:B7:CF:44
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:e7:ab:52:10:1b:bf:c5:f0:35:41:76:d2:d7:fd:21:5e:
         af:68:26:3f:13:c0:24:19:10:47:c4:11:e9:75:75:4c:da:1c:
         8c:41:7e:66:10:e0:e8:d3:3b:26:df:df:79:73:2a:f1:ed:00:
         5d:ae:73:b7:b4:6d:66:e4:93:da:73:31:1d:f4:ad:9f:8f:3a:
         39:b9:20:63:33:08:cf:af:31:fb:b4:14:42:83:f1:b2:c6:87:
         47:1a:10:9a:bf:16:2d:23:09:77:d2:8d:cc:c4:05:23:3e:e8:
         33:2b:d1:61:88:fa:ab:56:7e:d8:e0:08:b1:c6:45:17:16:66:
         24:a8:73:d8:f4:39:6c:50:8c:64:29:eb:92:ac:8f:4f:01:86:
         be:2b:10:cd:f0:66:eb:59:11:19:8d:23:e0:0a:f3:a5:a7:86:
         42:4b:dd:0a:11:07:50:56:2c:39:5c:38:ab:58:48:2b:69:61:
         1b:e4:9b:51:b8:6d:0a:c4:1f:a8:57:bb:8c:2d:4f:97:fc:5d:
         26:9f:4d:b3:0b:5a:7a:89:db:88:14:fd:20:06:8a:a3:ae:dd:
         ec:18:fa:42:6b:3d:1a:7f:aa:83:24:bf:3b:56:a7:9b:02:8e:
         1d:56:40:1b:fc:3b:ba:39:22:25:e1:85:d5:48:00:85:dd:3b:
         ba:ff:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:22 2026 by rpki-client