Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
File:                     rHyecYIsBWGFGGRT-WCywejKlOM.mft (raw, json)
Hash identifier:          YFvHlvVnPUsYxNgqQ9Gb9+ZaeD3AKAIKrkchj9uP19s=
Subject key identifier:   2E:57:71:F5:DE:4B:B0:DB:48:56:9B:F7:9D:F2:2B:1B:0F:EB:2E:B0
Authority key identifier: AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3
Certificate issuer:       /CN=A91F4BB3/serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
Certificate serial:       054E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
Manifest number:          0542
Signing time:             Tue 22 Sep 2026 23:10:11 +0000
Manifest this update:     Tue 22 Sep 2026 23:10:10 +0000
Manifest next update:     Tue 29 Sep 2026 23:10:10 +0000
Files and hashes:         1: rHyecYIsBWGFGGRT-WCywejKlOM.crl (hash: la6ytCoVk2/2AH1EiHpHI7c7IdkXTJTN7bvaXDcYMUc=)
                          2: AFDD7E16DA6011EC9A304C24C4F9AE02.roa (hash: 9xagtFPDPDh7sP5RKvooGHMvmH3Edj6QzRlAg2sHVUo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl
                          rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4BB3, serialNumber=AC7C9E71822C056185186453F960B2C1E8CA94E3
        Validity
            Not Before: Sep 22 23:10:10 2026 GMT
            Not After : Sep 29 23:10:10 2026 GMT
        Subject: CN=6ab30ad2-54a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:b7:fd:e6:83:6c:4c:90:8e:63:46:39:86:
                    96:4c:bf:f7:7f:ac:98:b3:84:04:05:5a:fd:a0:f0:
                    9d:da:96:7a:04:b3:72:33:7d:62:80:0d:c7:8c:79:
                    dc:d0:7c:82:27:bd:f7:3b:38:52:eb:65:e3:eb:de:
                    2d:f0:12:d7:64:71:03:9e:02:5e:4a:be:b6:19:11:
                    f3:4d:88:66:2e:c4:86:ce:65:2a:fe:57:23:a4:ac:
                    c2:16:a1:4f:72:55:e0:ce:53:e5:fb:78:36:39:d1:
                    3c:6a:ae:ff:1f:61:32:53:9a:32:2f:67:fb:c9:d3:
                    c3:4d:d4:79:ff:e2:ec:52:60:cc:a5:9d:9b:78:04:
                    f6:c5:dd:48:ab:18:16:13:a9:b1:76:40:49:4f:95:
                    aa:5e:65:69:ed:f3:28:2b:ae:f5:1e:09:60:34:48:
                    ea:f2:47:15:b1:45:2a:9c:48:a3:35:b4:e2:2e:8b:
                    bc:4e:80:44:56:01:9b:8f:05:00:66:3a:ff:01:ad:
                    4c:c1:4e:9b:e1:07:69:74:04:26:0e:b4:97:b3:ec:
                    44:2a:4a:65:a9:34:84:3c:98:a4:e0:69:d5:85:ee:
                    2c:f8:3c:b9:d6:7b:8f:26:97:73:39:53:aa:62:92:
                    10:c5:51:ef:c2:01:b5:e0:39:9a:b8:6a:78:af:e8:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:57:71:F5:DE:4B:B0:DB:48:56:9B:F7:9D:F2:2B:1B:0F:EB:2E:B0
            X509v3 Authority Key Identifier:
                keyid:AC:7C:9E:71:82:2C:05:61:85:18:64:53:F9:60:B2:C1:E8:CA:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHyecYIsBWGFGGRT-WCywejKlOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4BB3/AEA873EC5BC711ECAD58B05FC4F9AE02/rHyecYIsBWGFGGRT-WCywejKlOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:86:aa:e2:b6:ca:66:57:03:3d:66:57:6c:a9:95:e5:26:
         51:92:84:b8:f9:7d:85:59:b4:2f:5e:36:78:fb:4a:c3:a4:01:
         3d:a7:0b:3d:ca:23:a0:6b:ba:37:84:b3:9e:ca:d6:2c:f2:d6:
         6f:92:47:c5:b3:92:ba:74:9c:49:72:38:3d:1c:a0:0d:96:c2:
         94:ed:60:79:a2:8b:2e:40:f0:a1:e1:fe:74:5e:a4:ba:72:ff:
         50:a7:02:1b:b6:55:11:7c:e2:81:6e:1f:3c:9a:02:80:3b:13:
         a5:5f:ea:e2:0e:35:ee:9d:e0:f2:35:87:7a:1f:4b:6e:19:88:
         12:28:aa:ac:1f:72:04:5a:b5:e8:88:a0:b1:36:94:d7:a2:47:
         d7:34:92:f5:48:02:f3:99:d2:9e:bd:f3:17:8c:1e:b4:c0:6b:
         dc:62:d8:23:85:8a:cf:4d:aa:2e:4a:17:0c:bc:b5:58:c4:dc:
         1a:10:04:f8:b7:91:fb:db:0b:d8:ff:43:ca:60:c5:92:82:00:
         90:b7:63:d3:24:46:1f:bd:b7:4a:4d:c4:f5:15:28:f1:6b:ed:
         44:df:a1:57:77:56:73:7a:55:61:da:c9:d6:8f:f3:7e:94:f7:
         9f:a5:98:95:db:24:91:af:02:ad:b3:a0:d1:dc:e1:4a:ed:1d:
         41:07:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:05:16 2026 by rpki-client