Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
File:                     -Y3cNC9-J7aMoI09R8emmyaVXqE.mft (raw, json)
Hash identifier:          isYOW2FHB2Q5yFJV5IPLaKale8JXHeOOavqm4m1dbyU=
Subject key identifier:   BA:F7:5D:17:8F:80:82:89:CC:F9:A0:F6:1A:37:55:19:BD:41:05:01
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
Manifest number:          029B
Signing time:             Mon 21 Sep 2026 02:43:28 +0000
Manifest this update:     Mon 21 Sep 2026 02:43:27 +0000
Manifest next update:     Mon 28 Sep 2026 02:43:27 +0000
Files and hashes:         1: -Y3cNC9-J7aMoI09R8emmyaVXqE.crl (hash: Eh2TqNF9OQ6yQH6NOzWANbwRxZ974/VA70p4TY5PnXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B, serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
        Validity
            Not Before: Sep 21 02:43:27 2026 GMT
            Not After : Sep 28 02:43:27 2026 GMT
        Subject: CN=6ab099cf-e518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c0:d7:95:93:ab:1f:2c:af:e9:de:d9:46:5b:
                    a8:0a:3f:79:97:70:b6:42:59:1b:2b:3c:72:b9:75:
                    72:16:52:d4:28:e2:14:40:a8:7c:bc:d4:1a:06:c5:
                    84:fd:43:bd:be:67:71:2b:fd:e0:2d:59:d5:ac:a2:
                    5d:fc:86:a9:e6:ed:97:20:29:3f:c0:be:04:21:7c:
                    4a:a9:a8:55:02:58:96:9f:36:fc:91:c6:77:54:0b:
                    2d:fc:e6:98:04:c7:58:bd:ec:d5:81:45:c9:fe:8b:
                    81:06:ec:23:f2:c5:cb:93:ca:9d:c3:97:e3:4f:f7:
                    5a:60:2f:5d:87:a9:6e:90:1a:ad:9e:1b:8c:41:ba:
                    64:10:f9:38:6a:42:64:6b:25:44:34:85:10:4d:c2:
                    55:24:17:c9:6a:42:72:a3:59:2a:78:12:49:68:d1:
                    13:d2:5c:a9:ae:a4:dc:72:6a:4d:7b:5f:f7:a4:75:
                    4e:02:16:18:cf:0f:4d:be:d7:88:b6:cc:33:f3:6f:
                    4f:68:f8:53:a8:cf:cd:20:c5:ef:18:f8:0d:b6:63:
                    09:f5:01:ac:71:57:6b:c7:16:6d:2c:04:ad:ae:39:
                    60:a8:8c:eb:9c:d2:cf:c2:a9:64:9a:b9:aa:e8:e9:
                    ba:29:49:74:44:fd:af:77:31:bd:ee:50:31:19:be:
                    f3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:5D:17:8F:80:82:89:CC:F9:A0:F6:1A:37:55:19:BD:41:05:01
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:69:cd:a8:b6:0f:e0:f5:58:31:5b:27:39:0d:d4:61:b7:4d:
         91:a1:e9:76:d2:01:e2:bd:da:26:bd:be:57:13:09:ee:82:08:
         96:91:c2:3a:2d:68:7a:db:ef:1c:0d:30:c6:1d:4b:09:fa:1b:
         75:67:64:40:b6:c5:e7:bf:f5:62:e8:18:ce:8d:17:75:34:2a:
         5a:7f:e9:4e:6f:51:d8:5b:b0:e1:ef:33:09:3c:2a:d7:79:83:
         9e:be:92:3e:91:9e:96:1e:fe:4a:77:7b:92:67:83:93:7e:87:
         c8:9d:7a:bd:ed:5c:53:cf:57:63:08:03:d5:e1:c1:48:7b:f8:
         6f:b4:2f:7c:01:7b:33:86:ed:9b:05:29:a6:15:62:71:c4:b3:
         e4:00:f8:cf:be:0b:c8:7b:d7:5d:50:5d:01:6e:27:91:71:34:
         96:3c:5e:9b:89:a7:1b:c4:f9:2b:44:93:be:62:d1:a2:e5:ef:
         40:ca:11:36:73:98:1d:2e:77:32:45:86:bd:cb:20:af:ff:dc:
         ee:b5:a6:c2:85:1e:59:8c:6c:f2:e1:1b:d2:90:f9:1e:c7:93:
         4d:2b:f0:3b:b9:c1:cc:94:9f:27:eb:b5:73:ad:27:82:81:02:
         e8:05:32:28:97:50:6a:08:5c:27:74:10:a0:dc:ff:07:30:97:
         3a:8e:4e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:27 2026 by rpki-client