Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
File:                     YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft (raw, json)
Hash identifier:          sBMC5/assh9UNSDo+9ZqEFv3N0g2qIGFWv9uljVZX/c=
Subject key identifier:   B1:B9:94:C1:59:A7:BD:E4:F5:58:12:EE:66:90:17:39:A6:78:A0:6D
Authority key identifier: 61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79
Certificate issuer:       /CN=A91A0277/serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
Certificate serial:       07A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
Manifest number:          0794
Signing time:             Mon 12 Oct 2026 21:43:35 +0000
Manifest this update:     Mon 12 Oct 2026 21:43:34 +0000
Manifest next update:     Mon 19 Oct 2026 21:43:34 +0000
Files and hashes:         1: YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl (hash: iePdCUprAgcmehMTFqTH6N1le72qYVDMhtItnmcXhec=)
                          2: 9C6E6E1A590711F1BFB17D66C1833773.roa (hash: 3QDKR7zlMI9yB2AG4huTX0L6b7QbB9p1ajmpuc0/OaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl
                          rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 21:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1961 (0x7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0277, serialNumber=61D909494AAC099E5DC67BD9DECCFEBE44B77779
        Validity
            Not Before: Oct 12 21:43:34 2026 GMT
            Not After : Oct 19 21:43:34 2026 GMT
        Subject: CN=6acd5487-d0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:1c:64:5d:06:7c:24:a8:08:5c:a1:ec:35:
                    f4:cc:33:87:54:60:29:f0:ed:7a:5c:cf:1d:c9:ad:
                    44:70:09:a0:87:9f:19:18:b0:9c:16:5a:d7:98:ba:
                    ce:3e:cb:68:35:cd:b7:c7:77:b6:b7:cd:1f:ea:a6:
                    95:b0:f6:c9:bf:2c:c9:0c:59:2a:07:cd:b4:a0:01:
                    74:2c:6e:63:36:88:bb:dd:6f:7e:36:69:d0:41:16:
                    12:a2:98:11:57:09:2e:4a:e9:c3:9b:b9:1b:ea:52:
                    44:9d:92:44:aa:7a:b1:00:c3:d2:18:c6:5c:59:65:
                    0a:89:3f:f2:4a:c5:fc:ef:d2:85:91:d0:27:8d:8a:
                    cd:2e:75:c4:82:d9:dc:0b:4f:a8:94:c3:47:c4:f0:
                    5f:6d:ba:4f:b0:ce:7d:3b:b2:71:20:d8:de:fc:f9:
                    2c:91:ae:c9:39:c8:a2:7a:38:93:f7:34:32:16:45:
                    07:a4:f4:bc:01:c5:b4:66:17:82:36:1e:e0:82:b9:
                    e3:d2:f6:09:bf:bd:38:9a:23:ef:45:9c:18:16:6f:
                    77:c2:e0:79:bd:8b:cd:4a:51:01:c3:1c:b5:6a:e8:
                    ed:2c:bb:24:8c:04:74:7c:de:12:8c:b7:e4:f8:a8:
                    c7:f2:5a:38:27:36:70:3c:9b:97:e9:65:7a:e8:2c:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B9:94:C1:59:A7:BD:E4:F5:58:12:EE:66:90:17:39:A6:78:A0:6D
            X509v3 Authority Key Identifier:
                keyid:61:D9:09:49:4A:AC:09:9E:5D:C6:7B:D9:DE:CC:FE:BE:44:B7:77:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0277/D419D81075CB11EB952DD66AC4F9AE02/YdkJSUqsCZ5dxnvZ3sz-vkS3d3k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:8b:09:9f:be:c7:05:c8:e1:eb:43:8f:a0:08:25:fb:a2:
         fc:4c:ef:1a:29:2d:88:bb:af:c6:96:b1:01:d4:8f:55:3c:12:
         97:19:19:bf:0a:e5:33:9c:7e:a0:45:94:04:73:ac:c2:1a:0c:
         fc:87:a4:1b:e8:f9:c9:f2:a2:8d:68:66:71:a2:33:3e:94:16:
         69:f4:76:37:9c:4d:ff:d7:fb:5b:27:7d:b5:e2:7d:dd:a0:2d:
         f1:60:df:6c:15:61:43:cc:83:78:72:7e:f2:d4:22:53:af:ac:
         13:23:73:c1:2d:df:54:ff:0a:04:9f:75:9e:ea:02:ec:44:f8:
         b1:9e:38:d8:0b:00:e0:4f:10:a6:cf:4a:47:a2:5e:ea:eb:a5:
         17:74:16:8c:d1:5d:f5:3f:48:c1:fd:0c:0c:dd:f9:40:44:79:
         3a:7b:13:db:18:06:2c:c0:75:0a:d8:64:47:81:30:69:c2:d8:
         e0:7e:2a:55:bc:46:b0:f0:dc:79:3b:08:ca:6b:80:2f:a7:c7:
         f1:74:5b:83:9a:3d:c2:27:70:84:d6:5e:4e:c3:e2:c6:bf:13:
         aa:e2:a5:0a:34:72:90:ae:07:a9:33:66:9e:28:53:0f:61:26:
         a4:19:a7:8e:37:32:1d:a6:0a:f5:59:1f:0f:f8:12:bc:b2:bc:
         71:90:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:35:38 2026 by rpki-client