Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File:                     Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier:          OIWFcsR8MB4PC0FJGgpRmBzPO++Tbbj6jz7sM2wuMwI=
Subject key identifier:   8D:64:D4:BA:10:AF:DB:70:50:0D:17:0F:55:5B:18:6A:31:81:1A:FB
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer:       /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number:          0223
Signing time:             Tue 29 Sep 2026 03:18:07 +0000
Manifest this update:     Tue 29 Sep 2026 03:18:06 +0000
Manifest next update:     Tue 06 Oct 2026 03:18:06 +0000
Files and hashes:         1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 3nX5IiQ899h8Qw2tlSpR53bm8vfzBcNkoYrl3TzYAHY=)
                          2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: NxYGUXPru1ELvBZ6qbFZeX9tHWu2f3PZOepm5U8d3eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
                          rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 03:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
        Validity
            Not Before: Sep 29 03:18:06 2026 GMT
            Not After : Oct  6 03:18:06 2026 GMT
        Subject: CN=6abb2def-307f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:41:71:d2:b3:80:6e:7b:07:22:72:2e:e4:
                    9e:74:a7:72:3e:a5:7f:92:35:35:98:b4:ff:c5:43:
                    d9:fa:c3:7b:43:19:d4:57:6d:66:76:e5:ee:f0:cd:
                    32:36:9c:6f:c8:63:96:18:99:a3:07:fa:35:d4:bb:
                    c2:8e:8f:0d:48:90:33:01:88:94:09:8d:cd:d3:24:
                    5d:95:64:2a:f9:fd:31:8f:55:57:f5:1a:f9:4b:fb:
                    e3:19:f4:3a:cd:ba:0f:fa:78:b8:0a:41:f4:a2:62:
                    34:69:47:82:80:d2:5c:24:d0:a4:e3:24:cf:b3:a5:
                    0f:0f:5d:13:37:cb:10:4f:a8:91:50:8d:34:39:cf:
                    5a:07:00:e0:7a:e7:ba:06:8a:98:20:49:b4:c9:6d:
                    0a:b5:94:7f:55:2d:6d:a3:16:d8:98:29:d4:f0:73:
                    ed:51:f1:cb:2c:bf:be:33:71:58:34:b3:69:02:d8:
                    e3:56:a4:c4:55:1e:a6:fb:1d:eb:af:19:59:11:22:
                    f9:e1:17:39:bd:d9:4f:a3:c6:fd:74:07:a7:88:37:
                    f0:ad:bc:1b:c2:0c:43:2a:2a:99:b7:78:cd:9c:7b:
                    61:03:1a:48:51:55:d6:c5:8a:01:65:af:22:e8:d0:
                    2e:10:7b:b3:5f:e9:07:5b:10:6a:c0:79:8e:e1:83:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:D4:BA:10:AF:DB:70:50:0D:17:0F:55:5B:18:6A:31:81:1A:FB
            X509v3 Authority Key Identifier:
                keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:86:f4:52:d6:ea:75:48:ac:04:43:f7:99:07:5e:0e:63:c3:
         55:25:0b:bd:62:75:9a:cb:28:4d:4e:0f:b9:c7:82:49:17:6e:
         d1:99:31:5c:e9:b0:ca:ac:ba:a1:0c:b9:6f:f9:cf:07:25:cf:
         8c:2e:da:a0:70:e9:12:04:9e:4b:15:77:d1:0b:82:15:f7:5e:
         72:a7:6a:7f:54:d7:ce:03:29:0c:35:c8:64:4e:31:1d:cf:93:
         43:db:98:33:6a:32:46:89:68:80:0d:89:57:08:16:dc:b1:b3:
         0c:59:ea:89:25:e7:24:fd:4d:2d:4e:18:af:90:72:2d:95:19:
         f8:a3:b5:78:ca:da:be:d3:fb:ef:88:c0:e3:ed:5b:5f:d7:0a:
         cc:51:6d:36:76:f2:42:d4:a4:5f:bf:10:c8:b8:63:3d:1e:e6:
         8d:45:72:78:33:0b:de:74:42:fb:b2:bc:a6:65:b2:0a:64:65:
         7f:16:92:33:4c:07:5d:ec:ec:e4:b4:31:28:e1:bf:93:01:f7:
         92:1f:7c:dc:5b:0a:36:64:d4:e2:f0:50:70:d1:fe:73:df:65:
         f8:dd:67:62:26:20:55:40:ce:fd:8a:b7:a7:74:c1:4b:2e:64:
         cd:06:da:14:a1:8f:9c:cf:aa:2e:d7:86:03:1f:77:77:13:0d:
         8d:e8:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:01:42 2026 by rpki-client