Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
File:                     YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft (raw, json)
Hash identifier:          S8vQ72FtW2m62C18XILYyvz1cYCSqCL31zQcvePuoR0=
Subject key identifier:   99:6A:6A:1A:A8:B7:87:85:AD:07:11:D5:8C:27:DC:4F:77:07:36:2C
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       04F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
Manifest number:          04DB
Signing time:             Sat 26 Sep 2026 23:53:36 +0000
Manifest this update:     Sat 26 Sep 2026 23:53:36 +0000
Manifest next update:     Sat 03 Oct 2026 23:53:36 +0000
Files and hashes:         1: YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl (hash: p81GHetCr1LfXsV5wAUsACMAupPlg6Q/vUobruirkog=)
                          2: 373C0EEEAFB011EC9688644FC4F9AE02.roa (hash: JTjRlKAfcNIA5ztze61fVTgp1O9yMXmNQyaweK8zv78=)
                          3: EF6D0418235911EFB1B55375C4F9AE02.roa (hash: K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 23:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Sep 26 23:53:36 2026 GMT
            Not After : Oct  3 23:53:36 2026 GMT
        Subject: CN=6ab85b00-08ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:4b:2e:b7:25:47:d7:58:59:c4:85:78:04:
                    6f:6b:9d:66:ad:1b:1b:ac:ec:33:0a:7d:aa:0a:23:
                    ad:49:fd:12:4a:a6:12:7a:3f:f0:4d:68:5d:b6:88:
                    56:f9:d1:49:95:99:53:e7:d9:a4:a9:89:de:d8:73:
                    5f:ee:19:a7:cc:5c:1e:fa:55:29:92:5c:ac:76:22:
                    0b:26:71:05:cc:5d:af:cd:5f:b1:39:07:cf:98:ce:
                    2c:55:7a:20:74:bf:8c:c6:cd:d3:7c:e3:87:5b:c3:
                    8f:ff:c6:b1:06:4e:2e:c4:bb:71:71:3a:c8:e2:ef:
                    c2:d8:16:78:82:82:a3:40:aa:5b:34:b0:be:1c:b5:
                    0b:8a:e7:df:0f:07:69:b8:8e:65:e0:d0:9b:07:04:
                    6d:be:9f:67:37:61:f7:1a:24:6f:9f:ec:ad:5b:da:
                    43:31:e1:26:a2:8e:02:64:20:87:d9:a4:b1:1e:0d:
                    79:8b:40:56:9a:72:e6:45:7b:4a:0d:af:de:fc:24:
                    bd:f5:a7:fb:95:b4:d8:e0:8a:72:8d:61:11:34:ad:
                    21:3d:01:d3:dd:86:7f:75:a0:c2:fa:e2:a1:63:e1:
                    d8:3a:61:97:12:53:a7:6e:da:b9:5e:56:0f:f6:f4:
                    df:f7:7a:d7:61:99:0b:a4:8d:ae:3d:77:03:4c:0f:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:6A:1A:A8:B7:87:85:AD:07:11:D5:8C:27:DC:4F:77:07:36:2C
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:0d:8a:2e:1a:18:46:88:e6:f8:be:50:1b:08:09:41:9a:
         73:2a:12:2e:d8:95:29:7f:da:8b:55:0e:6e:62:ed:f9:ee:ed:
         23:11:c6:36:16:d7:bb:59:c2:e3:74:31:d4:fd:2d:41:31:d2:
         7e:de:77:0b:7e:af:07:1c:df:8e:fd:f5:04:b9:33:50:f7:ca:
         6b:fe:53:b2:5d:ce:dd:f2:98:b7:ac:e5:42:dc:4b:79:38:f5:
         5e:07:37:5a:06:0e:f1:22:eb:a4:62:93:d7:87:58:6f:dd:0e:
         dc:90:3d:8c:52:f5:58:76:35:f5:6c:1d:43:f0:fd:3d:1c:1d:
         9a:a6:a2:75:9a:b4:2a:9c:55:35:69:44:13:2c:03:18:ce:16:
         0a:c4:25:04:db:fb:60:e2:f6:77:92:dc:3e:e3:d5:77:29:56:
         f0:27:d0:5d:40:96:c8:a1:d0:64:25:ba:04:b9:15:cc:b2:2e:
         24:f7:ee:27:21:3b:c9:2c:9e:bb:21:b6:06:73:af:23:7f:ad:
         9a:25:2d:51:df:50:ad:74:9b:ef:8b:1a:3d:9f:60:22:ea:c2:
         d4:24:ce:2d:71:44:e0:ca:c5:ff:28:77:7c:44:05:50:b1:15:
         18:9d:b8:8e:db:de:de:b0:59:a7:7f:07:7d:94:7c:5d:df:d8:
         26:0c:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:15:05 2026 by rpki-client