Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
File:                     Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json)
Hash identifier:          pse2dMTZ8cJ8j0M8DGOM4SOck8zH2/WVe4DrbcxN9vI=
Subject key identifier:   CF:09:36:8F:66:2C:EF:A8:24:2F:6A:B7:1C:96:65:65:F1:72:35:0E
Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF
Certificate issuer:       /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
Certificate serial:       09DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
Manifest number:          09D3
Signing time:             Tue 22 Sep 2026 19:41:17 +0000
Manifest this update:     Tue 22 Sep 2026 19:41:17 +0000
Manifest next update:     Tue 29 Sep 2026 19:41:17 +0000
Files and hashes:         1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: eZo3X4FGeZUABBZOXVYEb8DsxNh0ZYldyYNCoM+d/jI=)
                          2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: OzlAv6KjQltx6nWptS2CfrjVYRlijYIMI9XGPfT9vJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl
                          rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 19:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2523 (0x9db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF
        Validity
            Not Before: Sep 22 19:41:17 2026 GMT
            Not After : Sep 29 19:41:17 2026 GMT
        Subject: CN=6ab2d9dd-7987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:ea:bf:4d:24:87:8d:95:b0:8d:0a:8e:0d:
                    bc:87:3d:43:b7:24:5f:25:39:4b:ad:9d:1c:56:55:
                    ae:f7:3d:df:65:b4:f3:d3:90:ed:0e:b0:c8:7c:e8:
                    f0:39:a1:8f:ed:03:8c:4d:43:84:36:61:92:52:0b:
                    19:93:28:82:30:28:99:90:dc:0d:e0:42:76:81:90:
                    44:c5:ef:1b:28:bd:bb:61:6e:5c:82:97:48:3e:a9:
                    21:49:62:8a:a8:af:ad:12:53:43:16:00:98:58:0f:
                    78:eb:c5:1e:65:be:a6:1b:50:62:ec:73:37:ac:a9:
                    46:48:89:a7:7e:64:d2:ba:d9:81:d7:7d:32:34:cb:
                    69:66:9c:45:31:86:b4:e2:75:05:e6:b9:7e:e7:39:
                    3a:fd:5e:b2:93:a8:00:2f:12:f5:db:81:d7:76:ea:
                    a3:80:ac:75:2b:3a:6d:b9:b4:27:a3:02:fb:d9:da:
                    f7:53:4a:e8:bd:b2:2a:49:64:66:df:77:fc:98:ce:
                    10:61:a9:90:59:0d:4e:00:82:2a:97:be:37:17:05:
                    36:d7:8e:c5:88:9c:c9:f1:35:ef:96:fa:6a:1f:fc:
                    ec:52:0c:da:74:24:e1:59:1c:48:72:55:c7:0f:9d:
                    b2:ea:41:86:4c:70:04:3b:e4:61:be:73:10:2c:d0:
                    9e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:36:8F:66:2C:EF:A8:24:2F:6A:B7:1C:96:65:65:F1:72:35:0E
            X509v3 Authority Key Identifier:
                keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b4:10:2e:03:64:05:c5:63:b8:1c:d1:7d:48:9e:7f:cd:70:
         30:f7:ee:ad:b4:15:53:11:5c:9a:01:94:10:76:4d:c7:57:e6:
         3a:fe:9f:10:07:45:99:f4:73:1b:09:b5:ea:88:1d:86:21:91:
         dc:2d:b0:b3:50:27:64:d3:c6:bb:22:06:21:dd:d5:e1:8b:77:
         1b:fb:20:37:d1:c5:c0:eb:6b:04:da:b7:0c:fc:37:ed:2e:98:
         54:af:68:48:9b:6e:3a:4d:58:9d:24:46:de:65:d1:4d:bd:3b:
         3c:4c:ad:6c:15:4a:e2:d7:3b:de:42:7b:a5:26:bb:4c:ac:31:
         d5:a0:37:4d:31:65:84:32:58:70:69:8a:6a:3f:29:70:e1:51:
         08:4f:23:bb:77:fa:fd:29:24:f7:3d:86:8f:7b:aa:1d:33:ca:
         fc:c0:c9:b4:76:c1:1a:9d:ea:99:6a:7f:6f:c6:ce:42:e8:07:
         10:a5:ae:00:1b:8e:be:66:e0:08:81:19:a2:06:89:76:f4:70:
         4b:04:40:21:2c:2f:f7:6e:0f:b8:b2:85:8f:2f:cb:50:94:c9:
         64:d8:84:4c:fd:fb:db:19:9a:cb:b6:df:cd:28:a5:58:a1:60:
         cd:6c:28:ce:95:f6:b0:e0:ca:78:cd:f3:3c:cb:3c:03:ed:b4:
         c5:31:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:19:01 2026 by rpki-client