Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File:                     YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier:          EBRJyejyyFtn6cs0N323yx2J2f+xmfvD219AvOYrpzs=
Subject key identifier:   12:F9:E8:A7:25:09:41:27:7E:60:C2:4D:D7:20:5E:69:60:58:EC:30
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer:       /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial:       0AC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number:          0ABB
Signing time:             Mon 12 Oct 2026 19:36:02 +0000
Manifest this update:     Mon 12 Oct 2026 19:36:02 +0000
Manifest next update:     Mon 19 Oct 2026 19:36:02 +0000
Files and hashes:         1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: 55WV8GUNyYLp2/Y7mT3hyBjQiTZ67Raiy9bFoUTtdTc=)
                          2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: gzbpBLHjuyIbIn1f9T7JlFlrPpRUrvtd4lxp7A9hka0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
                          rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755 (0xac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
        Validity
            Not Before: Oct 12 19:36:02 2026 GMT
            Not After : Oct 19 19:36:02 2026 GMT
        Subject: CN=6acd36a2-bdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:5d:b9:ff:05:63:75:ee:15:d9:b0:65:11:
                    b0:fe:69:9b:07:a0:1a:68:d5:3d:ce:6f:c3:64:a5:
                    19:d5:7e:e7:44:59:9c:04:55:84:85:2e:00:26:a9:
                    3c:41:47:a3:34:ef:72:3b:91:9c:ae:f3:f1:9e:d5:
                    4c:39:ba:37:8a:a7:b1:d3:ea:ec:cb:4e:7f:2a:8a:
                    5a:46:6a:7b:26:7d:a4:cb:e0:53:9c:1b:6b:38:bb:
                    36:b3:5f:58:e4:67:7c:0d:af:ec:17:d4:33:72:75:
                    a6:2a:3d:68:1f:be:bc:3e:ce:f4:a2:b5:47:98:77:
                    3b:21:05:7d:72:19:13:f5:e5:a3:9d:14:0b:a3:c4:
                    c6:d7:e5:a2:ba:f3:84:b7:d6:af:13:d1:30:21:50:
                    2f:af:d8:04:ee:0b:5b:6d:2f:38:b0:a0:0e:86:17:
                    ba:bc:34:41:7d:9d:9c:d7:51:aa:3d:8a:d5:e4:69:
                    18:92:24:c4:09:b3:7d:ff:44:48:e1:5e:b7:fa:e7:
                    5d:37:e6:a1:b2:15:5d:e3:4c:67:d1:b0:cf:4d:42:
                    95:72:fa:46:6e:59:91:e4:50:62:fb:a2:9c:7b:1e:
                    70:bc:ed:9b:a4:fa:fe:10:25:e5:e1:a7:0f:48:fa:
                    7e:bc:96:b5:e3:df:78:4d:55:4f:16:4e:a9:26:f4:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:E8:A7:25:09:41:27:7E:60:C2:4D:D7:20:5E:69:60:58:EC:30
            X509v3 Authority Key Identifier:
                keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:90:8c:27:bd:30:23:f3:11:ab:72:bc:bd:8d:f9:d9:51:
         f4:0a:98:47:3e:e5:58:8d:cf:e2:fc:d3:dc:8d:32:04:4d:13:
         bc:33:eb:ee:7a:04:b4:60:bb:f2:60:51:26:5a:4a:14:47:80:
         a4:45:06:ae:85:85:d2:01:9a:97:07:64:c5:20:ff:a9:ad:b1:
         e4:70:43:75:d2:bf:e2:a5:c5:60:38:10:f3:1f:62:ba:47:0a:
         2a:3b:87:77:34:7f:79:33:95:4f:77:42:16:5a:2a:e3:9e:df:
         f4:ba:1b:cf:89:ae:8f:74:87:a0:da:2e:c3:5b:09:22:69:7d:
         c4:ea:d0:6e:94:15:0b:a6:57:b0:81:f7:73:89:bd:48:a0:f3:
         8c:a5:fe:32:92:9d:93:fd:f5:2d:34:bf:a7:91:b3:73:41:40:
         ff:f7:7e:ff:d1:44:a9:d8:27:20:27:fb:98:3e:28:3f:fa:e3:
         a3:9d:cd:b7:98:e0:61:2a:30:18:79:0b:4e:13:1b:db:2f:06:
         d1:04:3a:27:8f:df:79:46:85:ec:5c:c9:17:b4:c6:41:b2:f6:
         22:75:1b:f9:6a:1b:65:d6:52:bf:73:cd:ea:70:87:83:49:b9:
         2d:68:1b:88:a2:6d:df:dd:34:97:c6:17:e7:e1:da:a0:ca:43:
         ac:80:9b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:37:26 2026 by rpki-client