Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
File:                     kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json)
Hash identifier:          ufU3DBpKygafHWu1fM3UoJmEmw/8jACqZME2nI5HkcY=
Subject key identifier:   4F:EB:AF:0C:51:0E:50:36:B6:E4:92:DB:4A:0C:90:12:BB:E2:BD:A9
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       038F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
Manifest number:          0383
Signing time:             Wed 23 Sep 2026 00:22:19 +0000
Manifest this update:     Wed 23 Sep 2026 00:22:19 +0000
Manifest next update:     Wed 30 Sep 2026 00:22:19 +0000
Files and hashes:         1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: GDMK9Gz2xqJZ7YfiLuA58kWpmHGv/qwtORnjDlmRCRQ=)
                          2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: JBdiolDGXrg1Q+GA3QTIBG2F1Ty2dd4Su0qV2ot2OMo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
                          rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 911 (0x38f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Sep 23 00:22:19 2026 GMT
            Not After : Sep 30 00:22:19 2026 GMT
        Subject: CN=6ab31bbb-441f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:07:51:b1:1a:07:5e:c6:80:a5:3d:2b:af:ee:
                    d3:65:19:c2:49:09:e6:83:8c:30:80:6a:dd:df:5d:
                    81:92:3e:2f:bb:9f:50:ac:fa:25:39:28:4e:d2:db:
                    f0:ee:d3:87:c9:79:e7:ed:99:ce:7a:50:fa:a1:b4:
                    fe:72:5f:5f:dd:04:c2:c6:60:ec:e2:a1:b8:9e:b1:
                    f2:85:ec:6b:95:6c:2a:7b:0f:19:66:8e:7a:98:ac:
                    0a:89:dc:f4:15:9f:d6:f2:75:a3:f1:77:f5:ce:57:
                    0d:c8:09:6d:78:e8:d2:c8:7f:42:57:90:bb:e1:6c:
                    7f:2f:cf:b2:27:03:c4:79:ec:15:82:2b:1a:06:74:
                    6a:72:37:12:4c:98:0c:27:6c:29:ab:79:b3:33:c0:
                    21:95:2b:dd:e9:42:bf:bc:24:fd:87:95:0d:0c:83:
                    56:ab:6e:ba:e6:1d:cf:61:73:19:11:7d:11:e9:33:
                    50:da:e9:9f:e3:af:f2:eb:5c:9b:83:21:eb:7a:ea:
                    c3:e2:d6:1a:e2:12:73:fa:c1:89:f7:6f:3e:b8:3d:
                    4e:79:16:3b:59:46:b6:8c:8e:07:47:aa:59:55:78:
                    b4:a0:98:f8:b6:85:28:85:20:dc:55:08:c8:5e:53:
                    61:d6:64:30:44:b8:f4:44:c0:45:ea:94:04:bb:ac:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:AF:0C:51:0E:50:36:B6:E4:92:DB:4A:0C:90:12:BB:E2:BD:A9
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b8:33:5e:c9:34:10:51:cc:aa:5d:6f:87:57:6e:f9:8c:d8:
         54:c9:fa:9c:34:c6:a8:5a:d4:77:09:d9:a3:92:21:b8:98:c7:
         bb:97:f5:bf:3e:e3:28:d5:e2:7d:32:8f:15:20:ef:1e:93:c4:
         99:5f:26:c1:37:5e:ba:9b:3b:9c:39:42:e9:f2:bb:ef:f3:ce:
         1f:0d:d1:db:f6:66:7b:11:88:7f:03:0c:3b:ae:19:2e:2f:a6:
         c6:19:bc:5e:65:46:cf:7c:31:ae:21:18:1f:70:78:6d:54:9a:
         ca:3f:9b:ab:f6:fd:b5:6a:7c:37:67:fc:34:36:68:6b:6a:3b:
         28:01:af:c4:ca:07:12:50:11:76:54:09:f5:32:93:5a:25:e2:
         ec:a5:07:09:66:97:89:8c:9c:fb:8e:a9:fd:3e:a0:2d:3b:6d:
         9e:65:87:0d:b5:23:e4:c0:80:39:38:d2:8d:25:68:7a:0b:b0:
         1b:4f:26:4c:9e:13:73:d9:99:2e:2d:c5:b4:d0:79:a2:44:76:
         55:6b:2f:54:41:3a:57:04:6d:0d:51:b2:25:1d:83:0b:a9:fa:
         3d:08:5d:f7:fd:a6:ec:91:cc:83:30:65:e1:b7:15:c0:cc:fc:
         ab:a6:99:87:b6:01:67:5a:de:40:81:4b:93:f6:30:d6:10:aa:
         4a:c0:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:21:36 2026 by rpki-client