Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
File:                     _yC8N52JoNs75vzykPo91S63-iA.mft (raw, json)
Hash identifier:          Z5KrXI3IFTpCY1ySmjbblyG7+rehHbJrAjfRncHKy5s=
Subject key identifier:   07:BD:93:76:DD:B6:91:BC:45:CA:0F:70:51:66:6B:2A:2E:E1:C6:C8
Authority key identifier: FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20
Certificate issuer:       /CN=A91FC4FB/serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
Certificate serial:       0143
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
Manifest number:          013C
Signing time:             Wed 23 Sep 2026 05:21:44 +0000
Manifest this update:     Wed 23 Sep 2026 05:21:43 +0000
Manifest next update:     Wed 30 Sep 2026 05:21:43 +0000
Files and hashes:         1: _yC8N52JoNs75vzykPo91S63-iA.crl (hash: L7HvGhjeK+LQqed5ubcq5rI7ywrZ7c9SAZSj/hJexw4=)
                          2: F20BD4DEDD5C11EFAA80BB1AC4F9AE02.roa (hash: aRva8pGWfYj5DsMq3R40rv0MUtezzZywAbZ+BrpHCAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl
                          rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC4FB, serialNumber=FF20BC379D89A0DB3BE6FCF290FA3DD52EB7FA20
        Validity
            Not Before: Sep 23 05:21:43 2026 GMT
            Not After : Sep 30 05:21:43 2026 GMT
        Subject: CN=6ab361e8-f6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:26:66:e0:7f:e7:5e:48:e2:e8:1e:81:f0:
                    44:22:6f:6c:ef:29:7b:ae:d4:8f:5b:aa:fa:cb:e3:
                    c6:ee:ab:9f:a0:46:ef:e1:49:4b:6e:a0:1c:f3:24:
                    1d:11:8e:2b:ec:5e:b0:55:83:63:35:b6:24:d0:95:
                    66:48:8b:f5:5e:09:87:e4:94:3a:0d:66:8e:6c:3e:
                    8d:0e:8e:45:57:d7:3f:86:69:d8:bd:c4:e6:6c:9f:
                    1f:7a:f0:1d:83:aa:93:b5:ce:eb:f7:d8:2f:61:fc:
                    3c:33:45:0e:73:05:e7:9a:f9:9d:0c:9d:11:b6:85:
                    e2:42:4e:20:c8:1d:67:01:68:8d:98:55:93:a4:b4:
                    e5:47:96:90:2a:b1:17:f2:03:b0:58:0e:55:9b:8c:
                    44:78:af:6c:7b:11:02:b3:54:3d:3d:e4:bb:04:f0:
                    79:e6:a1:55:ec:6e:49:be:b9:49:bc:07:a4:be:10:
                    8c:3a:2f:6d:82:f7:f3:f6:9c:e7:8d:ab:21:3d:d8:
                    7b:c1:a5:ee:26:f2:5d:a6:c9:56:c2:50:00:68:5f:
                    df:92:4b:aa:79:b6:e2:97:43:36:ef:26:d8:04:29:
                    c0:93:fa:a0:a0:6b:5f:a9:08:ee:47:db:f2:0e:9a:
                    ce:aa:dd:68:ac:df:8f:66:fb:26:ab:78:89:df:26:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:BD:93:76:DD:B6:91:BC:45:CA:0F:70:51:66:6B:2A:2E:E1:C6:C8
            X509v3 Authority Key Identifier:
                keyid:FF:20:BC:37:9D:89:A0:DB:3B:E6:FC:F2:90:FA:3D:D5:2E:B7:FA:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_yC8N52JoNs75vzykPo91S63-iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC4FB/098FE2E8DCDC11EF8E291844C4F9AE02/_yC8N52JoNs75vzykPo91S63-iA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:78:cb:a0:27:05:ee:cc:4e:31:71:6f:dc:a8:3c:99:aa:87:
         0b:d5:0e:fa:95:30:35:1b:91:c3:52:c3:d2:e2:73:86:fd:69:
         43:eb:88:1c:7b:40:4e:d3:57:0e:98:23:5c:a0:0b:a8:03:4f:
         67:60:b7:d6:47:19:15:2e:d2:75:ee:ff:fe:30:87:10:55:7a:
         a2:1c:a3:0a:51:a1:6c:90:93:c4:f6:4b:3c:b9:51:88:3f:58:
         5e:7c:e6:62:9a:5c:11:82:72:0e:cd:f2:4c:77:63:16:70:88:
         0a:67:ba:0a:ec:cc:cf:1c:59:b9:61:ba:d7:90:04:d2:58:0f:
         23:f4:d0:22:d6:58:e2:24:30:f3:0e:5a:32:cd:3e:fd:83:1e:
         54:24:3f:da:ea:b6:8c:5b:cb:42:b0:b1:e5:21:f4:1d:ef:c3:
         f6:41:7d:28:80:a2:f1:3d:d3:31:bc:fb:0c:3a:e9:83:0c:51:
         ea:9e:a2:9c:e7:0c:64:10:de:43:92:0d:7f:32:67:9a:97:56:
         83:3e:48:6b:0c:ec:6e:78:d1:5f:ef:2f:37:40:c2:1b:9f:8a:
         9d:fc:97:5b:62:62:7a:c7:01:a0:e4:8a:62:42:93:d6:52:34:
         d6:f6:6f:bd:ca:f2:c4:98:2b:45:c3:42:64:11:85:32:41:57:
         76:df:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:24:14 2026 by rpki-client