Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
File:                     4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft (raw, json)
Hash identifier:          a5C3YKfE34a7GD77x98wK8IwLo+FWC7NAR9ztUliAqE=
Subject key identifier:   FB:E5:B7:2A:65:B6:A5:32:22:7F:3A:93:BA:AC:46:48:9E:8A:58:CF
Authority key identifier: E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E
Certificate issuer:       /CN=A917336A/serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
Certificate serial:       0197
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
Manifest number:          0196
Signing time:             Wed 07 Oct 2026 04:50:06 +0000
Manifest this update:     Wed 07 Oct 2026 04:50:06 +0000
Manifest next update:     Wed 14 Oct 2026 04:50:06 +0000
Files and hashes:         1: 4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl (hash: qDvjusGmfceC/lbhn5y3rHWqD2vd02gleHy1elg4cM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl
                          rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 04:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917336A, serialNumber=E0B608AF53414B6F597D18CAE7A214483E8A659E
        Validity
            Not Before: Oct  7 04:50:06 2026 GMT
            Not After : Oct 14 04:50:06 2026 GMT
        Subject: CN=6ac5cf7e-f39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:2f:4a:d6:70:a5:e2:b8:e7:64:ea:68:29:
                    d1:e2:de:51:10:2d:47:2e:a8:56:2c:73:60:d1:58:
                    42:e6:6d:5b:e2:29:88:a1:8a:4d:cc:cb:f7:37:5c:
                    da:6b:cf:c7:47:3f:3a:3a:cd:ee:12:86:fd:fe:eb:
                    46:35:01:bb:d4:43:9f:67:27:1b:63:7f:85:6d:12:
                    d7:71:59:3d:94:4f:3f:1e:ad:eb:ac:bd:5b:56:ab:
                    67:39:2f:3f:66:47:80:69:c2:fc:ff:18:8d:f5:24:
                    04:8d:30:aa:a4:42:eb:57:98:81:b9:ad:0b:20:11:
                    f8:24:32:40:25:00:fc:29:f6:a4:a5:f4:75:e2:f9:
                    09:a0:db:1b:dd:e0:5c:fb:68:91:eb:83:21:a1:df:
                    3e:2d:23:9d:9d:b7:41:09:a5:4e:d6:6c:cd:03:c4:
                    cb:fc:c9:cf:b9:fe:11:28:70:de:4b:8c:05:8f:33:
                    74:a0:99:91:79:86:e6:00:0c:50:ce:3c:62:ad:24:
                    e3:3d:e7:7e:eb:88:46:60:5a:0a:57:aa:28:a4:09:
                    c7:26:a2:aa:4c:26:3c:76:c5:05:fc:a8:28:fc:e0:
                    ba:6c:1c:c8:07:12:c0:be:e0:93:f5:dd:6f:ea:ec:
                    b0:2f:95:52:01:67:ab:65:29:1c:d0:bf:c5:72:4d:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E5:B7:2A:65:B6:A5:32:22:7F:3A:93:BA:AC:46:48:9E:8A:58:CF
            X509v3 Authority Key Identifier:
                keyid:E0:B6:08:AF:53:41:4B:6F:59:7D:18:CA:E7:A2:14:48:3E:8A:65:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LYIr1NBS29ZfRjK56IUSD6KZZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/86D7B8625AEA11EF94E93D6EC4F9AE02/4LYIr1NBS29ZfRjK56IUSD6KZZ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:49:52:c7:00:cd:32:8f:11:9d:a7:c1:0d:20:39:af:76:
         d1:8c:52:94:84:22:66:ce:37:b8:e0:da:1a:cc:64:a9:d9:70:
         42:de:44:ca:cc:f5:bf:45:54:35:b1:ed:25:5b:07:8f:01:24:
         53:cc:7f:23:8e:d4:cb:7a:4c:42:a4:3e:68:38:7f:40:c7:c5:
         a0:e3:82:a5:4f:c4:2b:d9:6a:92:fb:ca:f2:f0:99:c9:54:2f:
         e9:be:ed:92:73:a1:73:eb:e2:7f:c9:a9:cf:82:9f:63:6a:17:
         a9:4e:80:7f:43:31:02:d0:47:68:6d:c1:a1:e4:6b:0b:2b:74:
         81:96:ef:7a:82:24:31:48:54:43:4a:9a:5f:b1:4f:34:bf:e6:
         fe:20:50:3c:b0:61:c7:17:a8:3b:c0:27:0a:00:1e:06:fb:2b:
         1b:2d:b6:3f:30:a1:58:a8:19:ca:53:19:ac:d3:fc:fc:72:f6:
         9b:8d:95:0f:60:2e:81:72:6e:ff:a0:8d:ff:4d:77:2c:21:fc:
         b9:f4:cc:1d:c7:c9:bd:e0:b1:9c:f7:d0:34:6f:74:8e:14:4d:
         6d:4b:65:53:bf:47:a6:ae:48:07:8d:36:01:a0:c9:25:d4:b2:
         e4:29:b8:67:b9:b1:d9:d4:9f:dc:59:f6:16:3d:e8:24:d9:4f:
         fb:a3:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:15:19 2026 by rpki-client