Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File:                     YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier:          YrFktvLLBIW/4yL5DGuTJFGcuJWqoo5zVDxtTLEaz9s=
Subject key identifier:   33:BC:12:18:F9:D4:FF:D7:8D:07:C1:11:C2:3E:D8:FA:9F:35:DD:47
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer:       /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial:       0367
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number:          035F
Signing time:             Wed 23 Sep 2026 00:31:27 +0000
Manifest this update:     Wed 23 Sep 2026 00:31:27 +0000
Manifest next update:     Wed 30 Sep 2026 00:31:27 +0000
Files and hashes:         1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: 9HA+Y2Ke1VC1904gHLCA3Iweh3PW84qyhK7BTVxS9Ok=)
                          2: 008C0876148311ED856EF438C4F9AE02.roa (hash: JMFnVMq8cx34sWu7oB7qPIb3K+S3Rgi+dhrM6C7KtRI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
                          rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:31:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
        Validity
            Not Before: Sep 23 00:31:27 2026 GMT
            Not After : Sep 30 00:31:27 2026 GMT
        Subject: CN=6ab31ddf-0db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:41:b8:93:c7:66:fb:1f:81:69:f5:58:69:
                    73:f5:f1:f2:bf:61:ff:ee:cf:20:f6:66:d8:23:b7:
                    85:23:57:f0:d7:d0:5d:67:53:17:79:fe:bf:f4:3a:
                    24:81:37:f8:df:8b:85:93:6f:06:d4:0c:b8:08:b0:
                    13:af:d4:1e:2a:1a:cf:54:4b:d1:fe:31:27:5c:d9:
                    3a:cb:7b:15:63:b4:61:35:be:d4:1a:9c:ec:60:4c:
                    78:d5:ca:25:18:61:dc:10:9d:dc:a4:ac:27:1e:64:
                    46:ad:16:2c:50:7b:8d:fb:90:3e:a2:b2:c9:33:d3:
                    94:5f:ef:fa:b7:4f:75:b5:49:04:98:4d:97:bd:1a:
                    8a:55:bb:d5:92:21:94:26:dd:36:64:06:49:22:10:
                    96:4a:73:3c:29:02:31:c6:75:ff:d4:7e:f6:ba:33:
                    86:49:f2:1c:f0:4f:fd:e1:b1:1b:ac:cb:1d:a7:81:
                    4f:51:31:24:43:d0:69:8d:bf:6d:d4:dd:e4:50:ad:
                    1d:79:1f:d6:af:37:76:e8:37:e4:98:82:51:17:10:
                    c1:bd:1b:ef:2f:ec:0c:9e:31:ba:cc:13:b8:b6:0d:
                    f4:79:0d:25:6d:97:bb:6f:d2:74:ea:97:59:f0:fc:
                    cf:b5:72:d4:d3:21:45:09:4a:f5:e3:db:cd:fb:ca:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BC:12:18:F9:D4:FF:D7:8D:07:C1:11:C2:3E:D8:FA:9F:35:DD:47
            X509v3 Authority Key Identifier:
                keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:42:61:93:d9:30:9e:a1:bb:3d:76:56:8a:57:32:33:40:
         b6:9a:ba:9f:47:8f:44:85:39:1b:91:2c:83:bb:14:4c:73:3f:
         e6:9e:77:dd:21:5d:ab:27:41:bf:55:6d:9d:1c:d7:68:4d:e4:
         ec:c5:35:a3:4b:4b:2d:0b:b7:a6:2b:00:82:9d:68:f0:08:2e:
         45:4e:24:7e:64:11:81:76:ae:dd:e8:bd:07:fa:81:91:39:7c:
         18:d3:4a:52:c0:29:a1:88:50:14:5b:d2:12:8a:fe:29:e2:91:
         23:67:11:3e:5b:2f:e0:fc:60:3e:73:27:b8:a7:08:4c:88:88:
         7e:01:84:7f:59:10:56:a7:42:2c:63:1a:34:0e:65:eb:78:9a:
         f4:11:1e:7c:8a:84:1e:8f:0c:53:ef:c7:4b:aa:4e:e0:59:c3:
         84:b2:23:04:b7:13:dc:2b:36:df:03:59:e1:f9:dc:2b:8f:ce:
         ed:30:9c:38:7c:35:d3:6c:70:2c:dd:27:a7:30:40:03:16:9a:
         35:a3:e3:86:c8:49:74:ee:3b:b5:42:ad:6b:ef:82:6c:7f:47:
         cb:68:f8:cd:93:1b:1f:56:64:d5:c9:98:5d:4b:de:c1:cf:3f:
         f0:f4:14:ca:90:37:63:37:4b:2b:4e:d7:75:25:c1:a0:50:2f:
         eb:81:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:05:19 2026 by rpki-client