Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
File:                     YDUU_FCDUUDwM--oQ87pOWOWol0.mft (raw, json)
Hash identifier:          2447J/xoBWblnT6QpvOvolUs8wuaQ7YJshoIJrTeSyA=
Subject key identifier:   86:C2:69:59:C8:42:1C:E6:D6:EB:DE:5E:83:0A:E5:07:89:E6:BA:33
Authority key identifier: 60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D
Certificate issuer:       /CN=A91118FA/serialNumber=603514FC50835140F033EFA843CEE9396396A25D
Certificate serial:       0C1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
Manifest number:          0C10
Signing time:             Tue 06 Oct 2026 18:57:04 +0000
Manifest this update:     Tue 06 Oct 2026 18:57:03 +0000
Manifest next update:     Tue 13 Oct 2026 18:57:03 +0000
Files and hashes:         1: YDUU_FCDUUDwM--oQ87pOWOWol0.crl (hash: caWgGiEieaNeOMDKqdQ89PujTmFe2hhFvo8SGpxYOlw=)
                          2: 42EE36A240EC11EA875BC545C4F9AE02.roa (hash: bBVhbCo6heiqgBU4H5sMI8co7w9P7UakNEQeyHZwkxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl
                          rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 18:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91118FA, serialNumber=603514FC50835140F033EFA843CEE9396396A25D
        Validity
            Not Before: Oct  6 18:57:03 2026 GMT
            Not After : Oct 13 18:57:03 2026 GMT
        Subject: CN=6ac54480-1960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:03:b8:86:c3:0c:be:2b:90:df:9b:5c:f0:
                    5e:b8:d8:c4:3f:17:cf:85:c0:bf:c8:2d:f7:b4:4b:
                    75:1b:84:52:08:97:40:6c:65:58:7b:97:02:16:18:
                    5e:37:e4:7c:2b:bd:3b:6b:f0:ba:ae:57:9b:22:e2:
                    3d:95:db:12:cf:0b:7d:50:4b:90:a5:45:e7:ec:1e:
                    5a:d4:bb:79:1e:ee:bb:60:af:91:96:25:a8:b4:89:
                    4e:f7:07:17:f2:d8:77:e2:6f:a3:df:fe:19:95:39:
                    4c:b0:6e:2d:a5:35:82:42:bd:03:99:fc:c2:9a:47:
                    57:f5:81:df:16:a7:fe:b6:f9:5a:b8:ce:de:e8:19:
                    3e:ac:75:3b:38:f2:66:48:61:44:d6:3c:78:93:fc:
                    52:8b:d4:bf:45:fd:e0:46:ee:7e:b5:94:40:c7:48:
                    e5:10:c1:83:8c:cf:da:0e:b8:78:e7:15:ed:2e:3e:
                    1d:a0:48:21:3a:0a:f7:df:a1:4c:5d:d0:12:ae:e2:
                    a5:2d:76:d4:be:7d:37:b3:1b:b1:87:e1:be:26:75:
                    e5:e6:48:13:c4:62:82:de:1b:8c:aa:4e:65:da:4c:
                    80:85:70:21:ec:0a:29:b6:17:1e:01:43:64:be:f0:
                    8a:c2:81:8d:96:de:7d:69:1f:7a:3f:c5:68:50:4b:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C2:69:59:C8:42:1C:E6:D6:EB:DE:5E:83:0A:E5:07:89:E6:BA:33
            X509v3 Authority Key Identifier:
                keyid:60:35:14:FC:50:83:51:40:F0:33:EF:A8:43:CE:E9:39:63:96:A2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDUU_FCDUUDwM--oQ87pOWOWol0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91118FA/9842449C40EA11EABB01BD42C4F9AE02/YDUU_FCDUUDwM--oQ87pOWOWol0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:60:b5:ce:0f:e8:fe:76:43:7b:b1:c9:71:49:a0:6e:a9:a9:
         e1:8a:18:a7:b7:b4:5d:e3:39:2f:be:02:0d:37:40:8b:41:d0:
         1e:89:2a:1f:68:78:a8:d5:35:b1:58:12:47:75:89:22:3b:4e:
         56:c8:ed:23:b3:46:a4:9b:a2:d7:06:94:98:3f:d7:54:71:45:
         aa:2f:da:23:cc:76:27:cd:8b:f1:f4:34:18:8b:37:c3:00:50:
         c0:1a:7d:90:a4:ad:c0:c2:f2:b4:8c:bb:f8:b5:ea:30:e9:f6:
         23:4d:62:30:33:18:a4:32:65:31:7f:82:e5:49:4f:e6:d3:c1:
         02:f1:8f:cc:a3:d5:ef:0a:3f:78:cc:f6:31:cd:b6:0c:99:0a:
         af:5b:0f:73:ca:54:a9:6c:45:e6:a9:d8:f5:97:a2:d7:fd:99:
         70:bd:3a:42:32:18:11:7d:94:aa:db:ff:fc:e2:99:8c:4a:f3:
         8d:b5:8b:e5:13:8e:bc:2b:8d:c3:49:66:54:b7:40:32:7d:b5:
         64:e3:84:e1:b1:5c:2d:99:8f:07:c1:90:e8:e9:42:dc:8f:01:
         99:a2:bb:b7:45:62:31:e2:c0:f2:ea:e6:0c:a1:e7:0e:22:94:
         bb:18:2e:2c:c5:8e:4d:01:f9:8f:a1:0c:16:c5:d1:83:cc:63:
         5f:2e:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:31:25 2026 by rpki-client