Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
File:                     y_Kp2oisCPjVEG3svXLW-gnIGOk.mft (raw, json)
Hash identifier:          IFhOumDT0RCJlD6moFWNY7WvURj0ca7TShQjNmlMFUY=
Subject key identifier:   12:28:48:99:CA:03:75:48:95:C0:61:1F:82:EA:23:3E:9D:CB:A9:97
Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9
Certificate issuer:       /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9
Certificate serial:       102B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
Manifest number:          101A
Signing time:             Fri 02 Oct 2026 17:38:01 +0000
Manifest this update:     Fri 02 Oct 2026 17:38:01 +0000
Manifest next update:     Fri 09 Oct 2026 17:38:01 +0000
Files and hashes:         1: y_Kp2oisCPjVEG3svXLW-gnIGOk.crl (hash: SfBcGcEbpJI2qjjR1bMtEF/51L5sdu2fhUzfmBGy744=)
                          2: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (hash: RJ14Wr4LV/wXhdMBKMrnSZc5mLGEgm5MX8wuJCoDPHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl
                          rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4139 (0x102b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5C25, serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9
        Validity
            Not Before: Oct  2 17:38:01 2026 GMT
            Not After : Oct  9 17:38:01 2026 GMT
        Subject: CN=6abfebf9-26f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:ad:f9:76:fd:88:87:dc:03:49:25:0b:c6:
                    29:a8:c5:f2:60:20:c4:d5:9a:4b:8e:a6:bc:3c:34:
                    a8:5d:c3:5e:b7:a6:7f:86:99:1b:43:89:07:93:25:
                    6c:01:43:fe:d8:0a:ea:d7:11:01:c5:bb:43:80:a4:
                    34:49:1e:0a:05:43:01:cc:cd:33:a4:50:c8:27:02:
                    7c:01:7b:87:37:63:e1:7e:6c:70:fb:c2:be:96:25:
                    16:0d:02:a0:20:99:fb:5c:3e:ac:55:d9:31:34:0a:
                    e7:05:cd:c1:38:df:da:bf:a4:b0:43:fa:3a:cb:38:
                    66:fb:5e:1c:7f:a1:48:99:39:d3:c4:81:f2:d6:58:
                    a4:45:78:a7:87:48:d4:4a:12:34:c2:bf:1f:23:9a:
                    26:e0:7d:06:dd:5b:4c:12:13:f2:5f:e8:87:01:e5:
                    ac:d4:b4:15:01:27:ec:30:0c:fe:e2:54:7f:57:19:
                    bc:93:52:ae:20:1f:9f:4f:61:2b:51:bd:97:0e:b3:
                    b9:92:89:d3:c8:e8:f1:7b:00:ea:b5:f9:26:aa:97:
                    98:46:3c:f9:b3:45:cf:cb:d3:a8:8b:c6:fa:81:89:
                    98:d4:ed:51:4f:80:d5:58:23:91:f0:46:36:72:f7:
                    58:a5:a7:54:33:12:e4:1e:a3:e6:47:64:5c:27:05:
                    9c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:28:48:99:CA:03:75:48:95:C0:61:1F:82:EA:23:3E:9D:CB:A9:97
            X509v3 Authority Key Identifier:
                keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bd:cc:1e:3c:69:83:45:74:78:ea:f2:61:70:1b:db:5c:b0:
         04:b4:36:22:67:24:ae:2b:55:d9:15:58:60:bb:e4:ee:2b:a4:
         61:df:69:79:fa:8d:b6:22:a4:de:6e:97:f9:61:90:10:b8:98:
         5d:a1:58:57:8b:a3:0f:e5:51:9b:c9:ff:3b:48:47:13:de:c8:
         94:01:83:3a:a4:7b:f6:a2:b1:3b:68:e7:33:0c:c2:db:c2:a7:
         55:e4:04:3b:b8:b6:57:fa:34:c6:c6:73:42:0b:24:76:44:76:
         e1:f0:54:19:c0:0c:c4:a5:b2:37:8f:16:a6:d2:a2:6e:23:8c:
         d7:51:17:7a:1e:26:ba:35:56:f3:3f:44:8e:25:55:f6:ab:2a:
         30:00:5d:e5:9d:0f:c4:a5:cf:af:db:f1:f8:24:15:86:77:00:
         11:9e:c5:d4:65:ff:7d:75:37:4c:15:66:b9:fe:a7:59:67:56:
         d8:6f:d9:55:70:58:b2:b6:24:52:ab:a5:e9:72:11:5e:6f:7f:
         cb:97:04:92:c7:6b:8f:bd:11:90:23:06:73:05:2c:73:89:e0:
         8e:fa:d4:c7:5f:e8:a0:1b:02:5c:0d:e9:63:b4:04:0c:a5:0f:
         e5:76:b6:7f:8d:b9:6e:98:e3:11:f9:00:62:7c:3a:6f:20:49:
         86:27:a3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:08:48 2026 by rpki-client