Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File:                     yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier:          izX1CpAv37hTTnoboFfOq1wGsoq+tFAqno4gH/ygP3s=
Subject key identifier:   DB:A0:B2:9C:40:B1:94:D0:4A:EB:6A:8E:62:E2:4D:62:17:A0:B9:54
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer:       /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial:       06F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number:          06C3
Signing time:             Sat 26 Sep 2026 22:35:23 +0000
Manifest this update:     Sat 26 Sep 2026 22:35:23 +0000
Manifest next update:     Sat 03 Oct 2026 22:35:23 +0000
Files and hashes:         1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: blDZ/w6XLwmDQB3oIS4cmRgB95yg1+OeYNzXG+575bs=)
                          2: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
                          3: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: XaZxQTLDnl290/y+szeICXl7GWwhkzid0/spMdScM1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
        Validity
            Not Before: Sep 26 22:35:23 2026 GMT
            Not After : Oct  3 22:35:23 2026 GMT
        Subject: CN=6ab848ab-3896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:b4:df:ae:31:be:d6:a3:02:4d:1e:b8:f6:
                    6b:d1:90:45:8e:69:1e:b2:10:ea:c1:4b:e2:9b:c4:
                    e1:46:b5:d5:65:ba:0e:45:84:50:15:dc:77:8e:72:
                    10:f2:80:37:5e:55:a5:5e:49:25:0a:bb:bf:ad:11:
                    9e:5a:1e:90:92:6a:37:da:7a:32:d8:22:0c:af:03:
                    5c:87:be:2f:d2:bd:37:49:5f:61:56:ae:91:e7:20:
                    d0:54:63:a5:70:6f:01:3a:46:6b:cf:fb:b8:2f:e5:
                    e1:8c:6d:a8:e6:c9:76:81:84:94:50:ab:ef:a6:cd:
                    48:26:75:2d:26:7a:61:2d:73:a6:70:f7:8a:d4:cb:
                    8c:da:5a:28:29:2f:b3:2a:d9:05:67:1c:3d:8d:3c:
                    c4:53:d1:e1:ab:e5:3b:83:ce:31:57:5c:22:8e:29:
                    2d:75:04:da:d7:72:c6:d7:5d:b1:58:00:7f:cc:b9:
                    72:a1:b9:e3:ae:d6:95:ad:72:cd:9b:41:d8:ee:37:
                    3c:f5:3c:18:10:bc:26:d6:a7:67:ac:11:49:8f:8d:
                    36:92:f4:4a:38:32:bc:9b:ad:3c:c8:e7:e0:33:c0:
                    e3:54:41:d8:c6:3b:04:3e:5c:d5:ff:ed:28:ae:68:
                    d3:01:08:28:7c:5c:6d:e6:05:a6:17:2b:89:61:8b:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A0:B2:9C:40:B1:94:D0:4A:EB:6A:8E:62:E2:4D:62:17:A0:B9:54
            X509v3 Authority Key Identifier:
                keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:62:6f:0c:45:c1:be:91:36:26:c1:ec:86:52:dc:ef:a9:d8:
         8c:48:ba:5d:a8:80:04:27:5d:98:ff:78:88:a5:7a:f6:79:45:
         9d:b3:8c:c9:9d:cb:d8:f0:7f:a3:2b:47:c2:c8:ed:60:bb:b9:
         eb:98:78:34:9a:f6:e1:45:03:4e:f4:9f:68:a6:10:c9:4e:8a:
         dd:c2:89:a7:f9:0a:f6:c4:16:76:55:64:77:fb:f8:79:7f:f7:
         4a:23:7f:ca:a0:2b:e6:cf:35:72:6b:b8:f8:ab:70:86:a2:8c:
         89:1d:bb:73:7d:5a:46:2e:63:fb:1e:d2:d9:34:7b:84:41:35:
         fa:91:c8:30:57:ce:86:60:c4:ff:eb:d4:f6:f4:91:19:5b:2c:
         af:c6:37:9f:ed:5e:78:55:f1:83:4b:e7:69:3c:01:f9:d9:74:
         0e:a8:0b:5f:cb:c7:39:11:45:4b:b2:fe:f6:19:07:75:c3:57:
         86:65:03:17:1f:bc:d0:58:f5:7a:12:fe:2d:f1:aa:c6:e7:4a:
         f0:83:65:a4:1a:0b:e0:4d:f5:5f:29:d4:a5:a4:65:9c:b7:06:
         73:f1:db:1d:49:10:ce:1d:61:c4:75:ea:e1:4e:a1:95:04:d0:
         2e:7c:d8:00:94:81:60:e4:47:99:d0:f7:3f:c0:46:36:b4:b4:
         2a:48:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:54 2026 by rpki-client