Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File:                     yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier:          +UYFXgPXcD+gcmw5aqjbiCDdiC+umL4OyzSg5pEpIh8=
Subject key identifier:   42:0B:76:89:FC:E0:1C:F9:47:F4:1B:FA:EF:27:3E:7C:BE:E4:EF:14
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number:          98
Signing time:             Mon 21 Sep 2026 07:30:46 +0000
Manifest this update:     Mon 21 Sep 2026 07:30:45 +0000
Manifest next update:     Mon 28 Sep 2026 07:30:45 +0000
Files and hashes:         1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: C14Af3e+eiEnPPIhwbg9oh9EKYTZHvmcBlr5JssVf4g=)
                          2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
                          3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Sep 21 07:30:45 2026 GMT
            Not After : Sep 28 07:30:45 2026 GMT
        Subject: CN=6ab0dd25-dfc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:73:ec:12:04:43:d2:98:c6:a8:6d:c3:b8:
                    c9:7a:da:a2:57:56:3d:34:64:2f:f8:2f:11:43:b9:
                    aa:7f:d6:21:e3:71:7a:ba:ed:06:15:8b:8f:26:a2:
                    a0:59:ac:7c:fa:f3:a7:bf:d4:68:13:8e:da:74:ca:
                    03:99:9d:e3:fe:b4:1e:65:ad:d1:51:f9:a8:91:24:
                    a1:58:90:3d:10:b2:0a:d2:54:0c:4e:e8:ac:bf:f4:
                    d6:97:78:70:c8:e8:a4:b5:ca:b3:5a:87:73:03:44:
                    a6:ba:d9:f9:14:56:33:33:6d:c5:6b:d8:b2:33:54:
                    c7:ba:4c:16:86:eb:45:ad:3b:91:43:0d:af:d1:de:
                    88:b8:7e:f3:1d:32:1d:c2:d3:e2:ff:2e:92:b5:81:
                    a0:99:5f:46:e0:2b:08:66:f3:b9:ae:c2:1c:53:e6:
                    c8:5c:db:e0:9b:33:33:d6:be:12:43:fd:e2:43:28:
                    55:df:fc:d6:73:97:17:00:eb:a1:e5:4d:78:c9:9f:
                    09:3e:b1:27:4d:32:0f:67:da:82:b6:f2:e8:33:be:
                    ec:42:54:db:c2:b4:55:71:2c:1c:6a:4d:2d:10:f4:
                    d1:50:fd:65:01:53:ee:3e:b7:59:f4:eb:c9:dc:ec:
                    eb:ce:27:3f:17:58:81:ce:34:06:09:9d:53:aa:0e:
                    8f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:76:89:FC:E0:1C:F9:47:F4:1B:FA:EF:27:3E:7C:BE:E4:EF:14
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:30:43:9b:d0:a3:01:45:fd:da:7e:b5:c7:ac:67:4a:74:0c:
         74:e6:5d:c7:02:1e:4e:e6:78:35:e9:4e:2a:ee:56:6f:82:56:
         64:e5:66:b6:ab:b1:65:e4:a0:13:f9:a3:0e:83:16:da:0b:e3:
         90:da:5f:f2:fa:e3:ed:2f:b9:49:e7:76:7c:37:8c:d7:30:39:
         16:93:b4:e4:ae:da:c6:c1:57:4f:fb:1e:ac:07:6e:dd:e2:5d:
         e9:1b:b4:5d:0a:57:5b:2d:65:f3:84:22:4b:af:94:8b:7a:cf:
         c9:36:c2:1b:ab:b5:58:68:67:aa:63:86:94:d5:81:89:45:ec:
         87:39:be:89:ca:61:e9:25:f0:c4:94:b7:4d:8d:24:fb:21:fb:
         81:18:1d:54:4f:08:40:2f:12:0f:1e:72:7f:45:76:09:e3:db:
         27:c2:7e:c2:5f:92:65:4f:b0:ae:f8:c4:3a:d8:e6:10:12:22:
         98:2e:c5:55:5d:a9:1b:a2:25:73:81:00:9e:08:89:a1:ee:6a:
         ee:8f:f6:12:cf:31:85:44:f2:35:8a:f7:3f:c3:59:e8:f1:8b:
         a8:bd:76:68:c2:75:96:59:ac:00:03:a8:b4:83:04:ba:c9:64:
         2c:c8:09:d5:2a:40:19:8e:2f:02:3c:8c:1e:2e:34:01:05:a4:
         66:71:c2:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5NDYxMTAvBgNVBAUTKEM4RUJDMjQ1QzA0Q0YzRTQ2Q0ZFRTc4MTIzODdDQzFE
NUFEMzhFNUQwHhcNMjYwOTIxMDczMDQ1WhcNMjYwOTI4MDczMDQ1WjAYMRYwFAYD
VQQDEw02YWIwZGQyNS1kZmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArxpz7BIEQ9KYxqhtw7jJetqiV1Y9NGQv+C8RQ7mqf9Yh43F6uu0GFYuPJqKg
Wax8+vOnv9RoE47adMoDmZ3j/rQeZa3RUfmokSShWJA9ELIK0lQMTuisv/TWl3hw
yOiktcqzWodzA0Smutn5FFYzM23Fa9iyM1THukwWhutFrTuRQw2v0d6IuH7zHTId
wtPi/y6StYGgmV9G4CsIZvO5rsIcU+bIXNvgmzMz1r4SQ/3iQyhV3/zWc5cXAOuh
5U14yZ8JPrEnTTIPZ9qCtvLoM77sQlTbwrRVcSwcak0tEPTRUP1lAVPuPrdZ9OvJ
3Ozrzic/F1iBzjQGCZ1Tqg6PrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEILdon8
4Bz5R/Qb+u8nPny+5O8UMB8GA1UdIwQYMBaAFMjrwkXATPPkbP7ngSOHzB1a045d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjk0Ni9BQ0Q0RkI1RURC
MzMxMUYwQTJDRTUzNjg4Q0QzNjQxRC95T3ZDUmNCTTgtUnNfdWVCSTRmTUhWclRq
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lPdkNSY0JNOC1Sc191ZUJJNGZNSFZyVGpsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mjk0Ni9BQ0Q0RkI1RURCMzMxMUYwQTJDRTUzNjg4Q0QzNjQxRC95T3ZDUmNCTTgt
UnNfdWVCSTRmTUhWclRqbDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAijBDm9CjAUX92n61x6xnSnQMdOZdxwIeTuZ4NelOKu5Wb4JWZOVmtquxZeSg
E/mjDoMW2gvjkNpf8vrj7S+5Sed2fDeM1zA5FpO05K7axsFXT/serAdu3eJd6Ru0
XQpXWy1l84QiS6+Ui3rPyTbCG6u1WGhnqmOGlNWBiUXshzm+icph6SXwxJS3TY0k
+yH7gRgdVE8IQC8SDx5yf0V2CePbJ8J+wl+SZU+wrvjEOtjmEBIimC7FVV2pG6Il
c4EAngiJoe5q7o/2Es8xhUTyNYr3P8NZ6PGLqL12aMJ1llmsAAOotIMEuslkLMgJ
1SpAGY4vAjyMHi40AQWkZnHCqA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:54:20 2026 by rpki-client