Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
File:                     yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json)
Hash identifier:          M5QFNcLoxv2maRjXjOzcs3i6FZBDaUhbwnolovef3Tk=
Subject key identifier:   7B:E0:36:DE:65:B5:47:6E:1C:9C:47:F9:1A:9E:B7:51:66:77:11:D6
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Certificate issuer:       /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
Manifest number:          01CB
Signing time:             Sun 15 Nov 2026 04:00:39 +0000
Manifest this update:     Sun 15 Nov 2026 04:00:39 +0000
Manifest next update:     Sun 22 Nov 2026 04:00:39 +0000
Files and hashes:         1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: fig7CKH1xCwV86DUsUJHT3ocbNKeSN1i+4UqjhmPnRQ=)
                          2: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: SY3cJmeJRYwxQTdV8LuINvKyBM5cYU9gdA5scwGtw/k=)
                          3: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: wyT3A7piAuRFJYSmj03a1CgN5dYY1alX8ULeMn9nACs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
        Validity
            Not Before: Nov 15 04:00:39 2026 GMT
            Not After : Nov 22 04:00:39 2026 GMT
        Subject: CN=6af92e67-c881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:19:dd:84:32:a6:d1:20:fc:78:14:fc:33:5c:
                    59:59:34:9d:b5:c2:8c:61:e1:f9:2c:3c:c3:26:1b:
                    4d:91:4d:ca:15:a1:98:d8:17:d3:b0:28:8e:e9:27:
                    ce:da:5e:da:f9:ea:14:df:a8:36:58:8f:57:94:00:
                    48:68:c0:0f:e4:5e:fc:f2:74:d5:7c:5c:a2:37:3e:
                    e1:c7:fb:6e:af:d0:56:f6:15:79:30:7d:9e:b1:94:
                    38:80:e4:20:d5:d7:4f:b0:a1:51:31:3b:15:74:1d:
                    b1:b9:ea:ca:29:f8:56:5e:67:e0:c4:03:df:a2:a8:
                    29:6e:71:28:c7:f9:40:31:28:dd:81:8b:96:d8:21:
                    d8:93:ee:80:82:51:2f:88:13:25:25:60:d0:f5:94:
                    9b:40:4d:89:79:8c:22:77:9a:53:db:a5:4d:06:83:
                    57:48:54:80:db:a4:b5:e2:fc:0d:c4:0f:6a:c7:f5:
                    d3:9c:30:0a:c2:82:cf:8f:d9:d5:60:72:da:f5:ab:
                    2d:9f:ec:aa:8f:92:5f:28:79:dc:d6:a4:09:ed:0f:
                    dd:e6:fa:17:55:6f:7a:f5:e3:00:f0:05:d5:55:4f:
                    af:c7:16:fa:b9:6f:75:aa:9b:d0:26:5b:ae:c8:c2:
                    77:46:78:1b:aa:ba:8b:11:db:63:b7:79:16:c3:bd:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E0:36:DE:65:B5:47:6E:1C:9C:47:F9:1A:9E:B7:51:66:77:11:D6
            X509v3 Authority Key Identifier:
                keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:79:0b:68:b6:ae:da:f6:ff:05:d6:59:76:41:8d:33:50:52:
         61:bc:5d:3b:06:fb:4c:34:b0:10:b8:49:bd:96:c7:2f:1e:e2:
         91:bd:b5:a6:59:80:fe:16:f7:ce:0a:bf:82:84:09:9a:5e:3a:
         94:f1:40:3c:dc:e0:a9:66:47:66:95:e9:ab:e1:05:49:f4:af:
         50:43:40:54:f2:c2:5b:1f:ec:33:da:8a:ab:7c:f3:9f:62:6e:
         76:e9:46:f8:df:c2:dd:1e:94:f8:15:cf:f2:47:13:44:9e:51:
         41:b7:31:5b:52:17:0a:d0:b1:02:63:4a:ed:7f:52:ce:fc:ee:
         07:97:44:8b:d5:33:9b:cf:30:36:80:f2:96:38:07:86:d8:d9:
         69:b6:16:be:75:fd:79:f8:28:95:8b:58:3a:be:61:31:d8:e6:
         6b:97:4c:3a:29:6f:90:06:57:31:17:e4:d3:7c:60:02:02:44:
         f8:4b:ae:9f:f3:19:f0:98:27:40:c3:9c:9c:36:d7:15:ba:cb:
         10:82:18:d8:8d:45:cd:c8:98:af:3d:46:88:57:b2:0f:20:b2:
         a5:80:34:09:5d:f4:91:4f:45:c1:68:37:a6:a5:b6:6b:db:20:
         38:68:82:34:f4:ab:b4:bd:29:23:5d:64:7c:ed:86:c6:37:bb:
         03:ff:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:41:09 2026 by rpki-client