Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File:                     -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier:          bjFrkoN2f74JAx9J2bgXP+bHYE3eaTs0tAofNOH23bc=
Subject key identifier:   3F:B4:20:E3:9C:D8:61:49:2E:7E:21:BD:74:94:F7:6C:F9:7B:59:F9
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer:       /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial:       01B1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number:          01AB
Signing time:             Sun 27 Sep 2026 04:29:05 +0000
Manifest this update:     Sun 27 Sep 2026 04:29:05 +0000
Manifest next update:     Sun 04 Oct 2026 04:29:05 +0000
Files and hashes:         1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: cvrHaH6aihKfVoDR1Qj5wQeCWoXLb7a6Oudz3N0j4Sk=)
                          2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: 05nFnz6le7/gfCsII6bmMAMlQ4HFGQxS/gFaNZcGMLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:29:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
        Validity
            Not Before: Sep 27 04:29:05 2026 GMT
            Not After : Oct  4 04:29:05 2026 GMT
        Subject: CN=6ab89b91-155b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:88:2b:b2:4b:23:35:63:7e:b3:ad:b8:ec:
                    e2:aa:be:07:84:53:a5:fb:fa:54:08:53:b8:15:53:
                    13:a8:d9:c4:94:6e:9d:17:2a:52:21:ff:4f:77:44:
                    2d:66:72:c9:3d:fc:8c:56:55:19:3f:88:d0:fe:1e:
                    ce:9c:06:6b:11:6c:f8:09:df:a4:3a:3e:53:c2:0f:
                    57:0f:f2:42:5d:04:32:77:dc:b5:11:72:ad:d1:90:
                    be:cf:aa:13:8a:ff:46:6e:54:82:88:ca:c9:61:2d:
                    a9:a4:97:0b:08:90:27:38:58:b6:b6:e0:6e:6f:7a:
                    ed:ed:d9:e7:d9:60:5e:93:31:d4:0f:96:83:a9:1e:
                    c2:33:f1:8b:8c:e0:8a:a5:83:88:a5:10:58:f4:f3:
                    a3:aa:17:d8:c1:0d:f9:20:ce:0c:24:bf:62:78:59:
                    82:a9:46:91:b3:7b:1e:34:5c:06:f7:e2:20:16:5b:
                    03:0c:a5:03:e5:c2:f9:47:40:39:f2:9c:26:26:82:
                    9c:cd:a3:75:10:ed:db:a1:08:54:b9:f2:6f:cf:53:
                    c7:fd:cf:86:3c:5b:a8:a1:ce:5b:f0:eb:fa:ad:7b:
                    69:af:92:3b:75:42:02:3d:98:4b:3b:ca:45:2e:4c:
                    fa:0b:03:43:f5:ac:4a:ef:1b:8a:5a:65:fb:fe:89:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B4:20:E3:9C:D8:61:49:2E:7E:21:BD:74:94:F7:6C:F9:7B:59:F9
            X509v3 Authority Key Identifier:
                keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9b:dc:db:12:0e:86:d7:73:5c:ce:df:30:c4:17:d5:3f:8d:
         d6:79:16:a6:f8:a3:e3:cc:37:37:a2:ea:34:b1:74:78:fe:84:
         9e:2f:6e:5d:3b:55:2c:1f:c9:48:99:95:cf:fe:44:9e:95:7e:
         df:14:b6:e9:6f:80:3f:af:21:ea:81:7a:37:2a:70:e9:3d:ce:
         73:58:d8:3e:09:ea:1c:8a:9e:2a:50:fa:28:13:b4:7f:35:a7:
         cd:8f:66:ab:55:da:f9:87:aa:e1:f0:f5:71:d6:10:fb:79:40:
         83:73:42:ba:e1:e4:79:d2:c2:22:56:8c:01:94:0f:2c:e7:d7:
         cb:5e:db:d2:ce:51:59:ec:67:0b:d5:65:aa:e2:a5:c6:11:66:
         71:93:6d:b1:11:fd:c7:45:64:f9:81:c2:00:bf:40:d6:33:09:
         41:eb:54:61:3c:27:ce:1c:95:fd:43:11:78:20:ab:2e:5f:c6:
         65:8d:39:3e:39:8f:8e:77:25:bd:6d:19:e8:bd:6c:3f:3b:f3:
         f1:01:9c:3c:a7:cd:4d:ea:d6:6a:52:16:dd:5d:f2:20:df:4e:
         36:50:d3:a6:e9:03:93:93:0a:f2:ac:2d:4d:01:55:da:65:26:
         35:74:3b:dc:5a:a8:e4:68:3b:cb:50:8b:8f:1e:4a:7c:04:29:
         7e:15:17:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:25:12 2026 by rpki-client