Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File:                     aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier:          +8n5xHQAfaxg3ebJn7qSYQ4tNg0SWDoJiq/KCV993+k=
Subject key identifier:   F3:3C:F4:0F:15:56:B6:B9:BF:30:C0:CE:6F:F9:14:0E:06:C0:94:1E
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       04A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number:          0491
Signing time:             Sun 20 Sep 2026 23:48:21 +0000
Manifest this update:     Sun 20 Sep 2026 23:48:21 +0000
Manifest next update:     Sun 27 Sep 2026 23:48:21 +0000
Files and hashes:         1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: phkkursPUAee+a4JSLY5RQoEqkAaNsLJz2dpNMin5Uc=)
                          2: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=)
                          3: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1186 (0x4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Sep 20 23:48:21 2026 GMT
            Not After : Sep 27 23:48:21 2026 GMT
        Subject: CN=6ab070c5-46fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:65:63:8b:68:53:c3:68:65:36:73:9a:f2:b9:
                    d9:10:36:03:2a:cb:c7:76:5a:42:19:cb:49:f0:79:
                    d1:da:25:06:c8:a2:d1:a8:85:56:4a:6d:e9:e6:0f:
                    5b:5b:55:08:d5:9c:e2:15:9b:77:38:00:f9:9d:1a:
                    78:cf:84:2d:7a:0e:32:1f:fa:12:8e:ff:86:e5:7d:
                    57:c8:c2:b2:75:19:87:36:52:a5:7e:a6:19:43:78:
                    c0:4e:f5:9c:05:62:0e:08:c1:ed:54:6d:63:27:51:
                    b9:af:d1:c1:66:68:33:3f:4c:01:fc:2b:72:01:7b:
                    72:ca:89:6f:28:21:40:b5:99:c2:62:99:ca:f1:31:
                    3b:70:a6:13:ef:a7:1f:18:d3:2a:2d:ce:a2:b7:3d:
                    ef:fd:dc:e1:87:33:41:ac:0d:e4:38:24:08:ac:38:
                    86:f8:4e:8d:87:55:fd:28:f9:4e:4d:35:bd:2c:05:
                    12:65:5e:0e:85:3f:68:3f:2f:e1:78:e4:0d:9e:33:
                    03:2c:88:79:d2:88:a6:69:08:e6:67:d6:ea:ac:5a:
                    15:86:ef:10:6f:73:f3:8d:74:c3:f9:0c:c6:2e:75:
                    45:14:0a:fe:06:91:7f:9b:bd:09:f5:4c:34:3c:6b:
                    d6:7b:67:e6:45:c5:c0:8d:46:9b:5a:ac:25:a5:75:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3C:F4:0F:15:56:B6:B9:BF:30:C0:CE:6F:F9:14:0E:06:C0:94:1E
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:44:fe:29:c7:f1:63:7b:8c:39:29:6e:79:c9:ce:84:3c:8f:
         37:ba:8e:69:87:91:b8:70:78:1d:58:05:57:d6:2c:84:55:92:
         fc:86:ce:de:8a:9c:d1:03:18:30:e5:d3:e3:c5:34:b6:1e:07:
         27:a2:bd:99:78:49:75:ba:1c:c2:86:4d:9e:69:a4:ed:9c:21:
         69:a4:54:23:21:02:36:e4:10:ff:4c:23:59:46:68:0a:7e:82:
         30:ec:eb:e2:49:8c:cb:c4:cf:ef:99:ce:cf:08:80:1d:c4:93:
         26:98:f7:b8:08:dc:91:e5:40:b2:b1:f2:6a:27:7d:5d:ec:c1:
         b7:85:40:c9:97:0b:e2:eb:ff:f2:bc:3a:22:b1:3c:59:5e:19:
         f3:77:8f:2d:d0:a3:e6:2c:75:2e:3c:55:f7:a1:7f:69:16:ad:
         c6:eb:4e:cb:e7:9d:76:d9:ea:12:5e:39:67:6c:e1:82:c7:3d:
         09:1a:fb:e2:5b:19:4a:1f:75:1d:b7:99:9d:8e:04:1d:9e:97:
         e6:4e:cd:a0:db:ca:11:3a:aa:44:28:0c:09:79:62:45:86:1f:
         11:b9:72:df:83:4b:ff:a4:07:4c:49:51:10:94:4d:71:06:f8:
         10:c5:ac:ef:e4:3a:fb:c3:8e:8c:dc:9d:17:93:b5:66:d3:1c:
         45:53:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:48:35 2026 by rpki-client