Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
File:                     kyv2OTHDR-dryQidQb4k9jcPJYI.mft (raw, json)
Hash identifier:          YgFzbetgzUY3AzTDrX3w18hZRO1m25RL4uiKTbLWoWg=
Subject key identifier:   4A:7B:21:A4:BA:75:F4:F0:41:62:E9:BF:86:13:65:7A:EC:BC:B9:1D
Authority key identifier: 93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82
Certificate issuer:       /CN=A919879C/serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
Certificate serial:       03A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
Manifest number:          039A
Signing time:             Thu 05 Nov 2026 00:59:44 +0000
Manifest this update:     Thu 05 Nov 2026 00:59:43 +0000
Manifest next update:     Thu 12 Nov 2026 00:59:43 +0000
Files and hashes:         1: kyv2OTHDR-dryQidQb4k9jcPJYI.crl (hash: /8HvojwHLye9qAbTzNAoPDkzl/BaNUcfADPkmYfy1jM=)
                          2: E7C34456073711ED8BA93630C4F9AE02.roa (hash: JBdiolDGXrg1Q+GA3QTIBG2F1Ty2dd4Su0qV2ot2OMo=)
                          3: IwMydz1yNKna-Bu7y5N_sDrFLdU.asa (hash: HZ6IS7fTmMuj6TUXHzWf+konPn15YRV0/gBMLsx26GY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl
                          rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Nov 2026 00:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919879C, serialNumber=932BF63931C347E76BC9089D41BE24F6370F2582
        Validity
            Not Before: Nov  5 00:59:43 2026 GMT
            Not After : Nov 12 00:59:43 2026 GMT
        Subject: CN=6aebd500-0daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:7d:13:35:c3:98:28:3a:60:eb:a6:91:72:
                    6a:71:65:ff:68:09:f6:41:48:0c:b3:04:a5:26:ac:
                    fd:b2:9d:7b:0f:03:dc:13:b4:ce:67:75:f0:6e:47:
                    34:57:75:4a:87:86:fa:a8:86:9f:8a:56:05:2f:8c:
                    56:45:e1:32:3e:5e:73:3b:df:6c:dd:f2:c3:a1:a9:
                    aa:e6:2c:17:e1:df:13:3f:f5:03:6e:36:21:1a:86:
                    89:be:d9:ab:70:b2:cc:42:11:5e:cd:87:d7:91:55:
                    7c:b4:6a:9f:de:d4:9c:ba:99:28:a6:b7:20:13:6d:
                    3e:ca:5b:e6:6d:d6:63:57:94:d4:88:e6:8a:90:28:
                    d4:f2:0f:10:f3:0f:83:c3:a4:ea:b7:96:d1:26:8e:
                    8b:a1:0d:d2:44:92:22:7e:3b:4e:0c:6c:1b:dd:4d:
                    2c:8c:cd:31:c8:32:59:21:36:32:40:1a:15:c2:68:
                    98:51:f5:d0:23:09:87:89:56:10:57:92:41:ba:07:
                    64:b3:59:d7:44:5f:f5:94:0f:ef:8e:aa:cf:92:d6:
                    09:a8:10:67:bf:4e:79:88:66:ff:98:19:c3:89:18:
                    47:09:8c:1a:d5:0b:ed:62:9e:92:04:47:f6:71:5d:
                    88:73:0a:ca:77:03:fc:8b:da:9f:0b:13:c3:a1:45:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:21:A4:BA:75:F4:F0:41:62:E9:BF:86:13:65:7A:EC:BC:B9:1D
            X509v3 Authority Key Identifier:
                keyid:93:2B:F6:39:31:C3:47:E7:6B:C9:08:9D:41:BE:24:F6:37:0F:25:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kyv2OTHDR-dryQidQb4k9jcPJYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919879C/E1D20292073411EDB04D372DC4F9AE02/kyv2OTHDR-dryQidQb4k9jcPJYI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ea:23:43:ef:07:92:5f:ef:86:13:c1:24:2e:1c:63:08:ec:
         60:1f:a3:29:f6:01:fa:da:7c:ae:2b:3d:65:ee:80:22:43:f8:
         c4:4e:90:ce:9f:e1:7b:7a:b8:93:5c:3a:77:e6:c8:3f:d2:83:
         3f:fe:9b:e6:6c:ea:87:75:d0:03:87:97:ce:ce:c7:5a:8d:48:
         1f:ba:ab:1a:5f:bf:09:75:2c:e8:4a:c8:a4:5b:cb:17:00:06:
         2b:31:80:34:9b:5d:94:30:3f:5c:c7:a8:ce:27:d3:80:a5:88:
         a9:57:fe:a3:53:f6:d4:9b:3e:d9:bc:82:a9:5a:40:66:f1:10:
         9d:fa:6c:7a:04:96:c6:2e:03:47:43:3c:c3:5d:3c:5a:cd:0f:
         79:9e:67:fc:c5:db:34:37:4d:56:d5:16:76:e4:39:f1:d4:ae:
         ad:e8:05:69:7e:54:bf:fc:f1:cc:47:e6:52:0b:df:bb:94:94:
         22:f3:fc:95:07:ac:85:aa:e8:04:31:2a:6d:99:82:59:2a:e0:
         e9:dd:9f:1f:c5:e0:7b:8f:53:a3:9a:66:82:33:9f:26:e2:7a:
         8d:2f:cd:20:4c:a3:07:90:0a:7d:87:8a:10:b6:80:11:6f:8d:
         cf:4a:13:2d:13:bf:39:48:03:b7:c1:53:ef:1e:1d:26:7b:98:
         ae:b3:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:11:56 2026 by rpki-client