Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          tCzOvin/C4GEzb/hwwnDZrjSKHiTQWCsjs0/lTJPt4Y=
Subject key identifier:   3E:E7:8D:B4:CF:CB:93:AE:8B:76:CC:43:67:5D:F0:08:81:05:EE:B8
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0671
Signing time:             Mon 12 Oct 2026 22:54:08 +0000
Manifest this update:     Mon 12 Oct 2026 22:54:07 +0000
Manifest next update:     Mon 19 Oct 2026 22:54:07 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: tZcwZwaVRm++fju68QURa+pf6i6JpJqKjSPf8g/nrOc=)
                          2: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: 76lRYOMfjkUMm+Un1zeocycozFiB0INpBONXd9P7hPY=)
                          3: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: P3doc8TT7mhfzcSps7B9O0W5pUgwSQGVyt8vLzQ3gnQ=)
                          4: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: BEIgK3O7SaFfmvnXuudxvNqnEJFGtTYbWVAvUD/sJ80=)
                          5: 0BE2C2AE36D111F1B4901F67AE833773.roa (hash: /OgpFRh5NEAU3z4wwECmDgcOT565YH6iPJyK+iNYSGM=)
                          6: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: E2OVt2t2RwL7eW2IIag4jKtOfPTzQfuNebzivsrFSS4=)
                          7: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: was++B3SwvJo/jYlrUZOE1nul8ZmbRH0XpfbBmWRHUM=)
                          8: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: +DF99Ubi5p18DFX3fy9zXroAvqR+SzPVZSDJ6eGx684=)
                          9: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: QfgNIRVotvzOl/OtkhG76+nsJvG/v20On9wM86renGQ=)
                          10: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: Y/kcRh9cdh4fRkGWFjsevbts3BzCqCsOpihXsbd47mU=)
                          11: 3BE907D6178411EC83735974C4F9AE02.roa (hash: LapSxfvv7t72TR7bD/JuXkQOXoQJku5oYR+x3zF+4Gk=)
                          12: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: qz8JxNgXuDID5Fu8pAdCqUZ2ItHDzr2G2xNt310Kyxo=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: fBWTjHPBb9W8ORcqqmeo2+AlFAMHhNrE1/hdXfgEV54=)
                          14: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: CQrq+NiLvVYKAgaoEAHrvb21lZZoBmbhEQ+h41OOoGc=)
                          15: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: yDyFhacoRHxiPGknJ0mgO/37kULvXy/vpyy7xuwfubc=)
                          16: DB208FD4175911EC87322F85C4F9AE02.roa (hash: Aiyh5u8GDVLoN3Fgru0NzcB9kxObiOTjfl6VZSmSgGQ=)
                          17: 3B398B8A178411EC83735974C4F9AE02.roa (hash: VpETKfJnCy8IjWBOd18JxClx6aJBFefNpsEPuTPhgK8=)
                          18: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: +IL/6i7R12qOZpauH7RSFncfC8CSU6slGsg4NRFUeQk=)
                          19: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: eNh6GSQojSwJZWNPuyTqjhXY4Z0HAmSbKzGnoY8nD7A=)
                          20: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: lHkuWmke07Q2mFWhxNC8gJVF88cEoSJsFIhxbtoDZqI=)
                          21: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: w37EL0tDFGT/iQwVZqrRmtYEMaPOpCjLT7Den89y7yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Oct 12 22:54:07 2026 GMT
            Not After : Oct 19 22:54:07 2026 GMT
        Subject: CN=6acd6510-48ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:35:fe:36:91:00:3e:38:85:c2:ea:2a:85:
                    7b:14:6f:f2:9e:50:1f:a6:8d:a8:01:dc:a6:5b:48:
                    80:c4:5c:88:c5:61:bd:66:42:ec:55:39:2d:a6:84:
                    7f:49:37:c6:23:73:ef:38:57:18:41:4d:78:6f:66:
                    9a:22:0f:00:d2:51:6f:f6:3a:54:e1:a2:40:43:98:
                    e3:7a:96:82:20:25:38:4f:08:ca:7c:67:25:4c:83:
                    3c:fb:63:4f:17:65:e3:bc:c6:2e:d4:61:42:e4:d9:
                    5b:74:21:37:ad:43:e8:66:d0:c1:9f:17:ad:fb:b8:
                    d5:41:79:69:cf:1c:ca:9c:86:1d:d2:19:3b:a2:a3:
                    ad:79:c4:a9:92:c8:07:94:5a:f8:f8:3f:5a:63:d7:
                    f2:a3:0f:c7:ad:7b:5f:5d:10:29:b7:92:64:b1:84:
                    5c:36:4b:2b:af:bd:2c:a6:59:5e:e3:15:b6:5d:3b:
                    52:fe:f4:67:96:9f:fa:66:14:85:7a:16:53:4a:8c:
                    49:67:cb:c6:50:09:bd:d3:87:cc:0f:95:04:37:91:
                    0b:df:9a:a9:2a:b3:5c:7f:20:7d:30:04:13:bd:d3:
                    12:52:e5:07:a9:93:cc:cc:2d:9e:cb:3f:57:01:dc:
                    74:c3:4c:92:37:8f:21:8c:9b:30:98:1e:a8:ee:8c:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:8D:B4:CF:CB:93:AE:8B:76:CC:43:67:5D:F0:08:81:05:EE:B8
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:39:e2:d5:ac:7f:f5:d3:cc:11:9c:17:6b:8e:0a:86:3c:29:
         20:ae:9a:49:ea:6f:99:3d:a5:41:09:03:f1:45:be:78:7b:87:
         6d:7c:de:9e:20:d9:33:8b:6f:3a:12:77:2c:34:f0:00:27:d4:
         1a:fe:2e:f4:93:c2:5e:18:b4:b5:74:24:1f:2b:64:99:34:83:
         99:f1:5c:67:d4:b6:f1:db:73:74:56:1e:b8:af:5c:c4:ba:97:
         98:f2:61:8b:86:3d:f1:5d:b7:13:e0:74:a4:16:d6:ea:da:ba:
         48:cd:a6:bb:a1:de:58:63:bd:bd:c1:91:a5:78:1f:bb:c6:1d:
         df:bc:5c:36:67:77:f4:0f:94:d7:bc:00:59:dc:33:76:53:37:
         c7:c5:f8:1f:5f:b4:63:90:16:44:a2:2e:69:ff:4c:6d:af:e4:
         08:af:22:d3:f9:07:e6:8f:89:ed:98:19:f0:98:bd:6f:a8:43:
         35:67:a1:87:dc:97:70:3e:91:18:8b:99:ab:f2:43:bb:12:d6:
         58:48:4a:ea:4e:05:a3:65:62:64:aa:50:88:3e:f8:5a:9c:21:
         6f:05:b8:e2:be:b1:3a:4b:ce:1e:2a:86:91:f4:d8:b1:d7:49:
         78:72:86:52:33:0c:93:df:2a:48:39:f4:86:50:fa:f9:30:e2:
         15:2c:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 00:44:19 2026 by rpki-client