Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
File:                     Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft (raw, json)
Hash identifier:          J4r2jyF1rLx0wU+PAVfgmJdFWYp3vwmT/E+6UOC6Cxc=
Subject key identifier:   2A:6A:70:8C:C9:13:40:45:F8:FF:A6:32:FB:D9:E6:DD:F0:66:80:59
Authority key identifier: 63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3
Certificate issuer:       /CN=A91860FA/serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
Certificate serial:       47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
Manifest number:          40
Signing time:             Sun 27 Sep 2026 09:10:49 +0000
Manifest this update:     Sun 27 Sep 2026 09:10:49 +0000
Manifest next update:     Sun 04 Oct 2026 09:10:49 +0000
Files and hashes:         1: Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl (hash: CbiPHbxEf81cj3xNXBniSaBjB6TvkcQpmfkh+VUT03U=)
                          2: 4C633D6264BD11F1A2B56523A247A888.roa (hash: SsjdctKBVvaNKREg8ToSkV9iTH8FBrx7S/lqwFuiwEQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl
                          rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91860FA, serialNumber=63A81DC2E9B5AA6C566A8547423D835464AF0CA3
        Validity
            Not Before: Sep 27 09:10:49 2026 GMT
            Not After : Oct  4 09:10:49 2026 GMT
        Subject: CN=6ab8dd99-75a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:32:c8:0e:7a:1c:51:ff:eb:4c:a4:03:ad:
                    a7:02:56:f1:cf:f6:5f:8c:92:4d:6b:55:2f:14:02:
                    7c:37:8e:82:da:b4:37:70:2c:0c:60:da:c7:fe:76:
                    75:b9:c2:51:88:e3:97:9d:3d:61:ff:d4:34:f7:c2:
                    7d:1f:71:32:50:0d:b5:f4:73:f7:24:0a:7a:ea:96:
                    f4:f7:fd:34:7a:f1:47:82:a3:1f:fc:fb:7c:18:45:
                    3e:3a:11:2d:2d:61:8e:a8:de:b2:f4:49:4d:0d:19:
                    58:4d:6c:5a:5c:53:96:8f:50:d8:df:87:1d:9f:9a:
                    c8:04:68:85:9f:2b:61:96:57:63:aa:e7:58:39:d2:
                    19:7f:0d:aa:92:de:91:fd:32:00:a2:4c:f2:53:69:
                    a8:13:40:63:62:f4:8e:88:56:ed:44:59:f0:67:d9:
                    87:73:9e:19:77:54:60:0c:7a:6a:53:68:20:7a:0c:
                    e7:50:48:4c:eb:29:02:1a:d3:a7:b5:a3:dc:16:bb:
                    51:1a:1c:1d:64:90:74:22:6c:15:46:56:f4:28:c4:
                    4e:3e:93:01:40:51:01:96:73:50:59:e2:e6:28:17:
                    85:aa:f2:25:a5:2c:97:5f:90:a8:70:c0:dd:00:67:
                    0e:1c:5b:2d:6f:62:6c:70:4e:81:74:f7:78:1c:39:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6A:70:8C:C9:13:40:45:F8:FF:A6:32:FB:D9:E6:DD:F0:66:80:59
            X509v3 Authority Key Identifier:
                keyid:63:A8:1D:C2:E9:B5:AA:6C:56:6A:85:47:42:3D:83:54:64:AF:0C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6gdwum1qmxWaoVHQj2DVGSvDKM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91860FA/544E3C6C64AD11F1AB488DFB9147A888/Y6gdwum1qmxWaoVHQj2DVGSvDKM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:24:00:82:91:a3:65:11:77:7e:38:3d:d2:d2:d0:66:a0:f6:
         b1:b6:7a:ea:ec:af:03:1c:ff:91:b0:90:5d:79:04:49:99:aa:
         a6:a4:7c:ef:da:1f:25:b5:ec:77:c9:76:05:cb:bf:19:dd:75:
         bd:f2:80:45:d6:d9:45:ce:c4:9a:1d:27:fc:a5:7b:32:bf:5a:
         85:d6:9f:32:10:40:1a:92:1e:ee:f1:bb:df:96:7f:b8:5f:b5:
         46:b1:44:bb:99:f2:4b:86:05:be:2d:d5:ac:3d:a8:e0:52:92:
         d3:d1:c9:85:0e:35:2a:6c:25:6e:95:09:72:56:0f:c7:74:9d:
         ed:87:8a:92:61:d3:64:4e:d5:d9:03:02:89:ac:c4:5d:0a:86:
         87:7c:e5:9e:5b:d5:89:a3:39:90:87:52:c7:99:4c:6e:44:01:
         18:d2:cb:99:7c:8b:2b:71:a3:c7:d7:67:4e:79:f2:a3:e4:90:
         21:75:28:0f:7d:d1:57:4a:48:03:83:08:9a:86:dd:95:b3:47:
         39:c8:cd:4b:c3:70:4b:84:81:50:a5:37:ad:a9:75:c5:b0:b2:
         00:98:a3:96:fe:9f:b5:c8:cf:5b:50:0a:34:c9:13:ef:6d:33:
         81:dd:ae:81:c6:15:d3:0a:f3:3d:91:47:f0:2f:c2:f3:2f:e5:
         01:ee:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:41:38 2026 by rpki-client