Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File:                     YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier:          jlGTr9R1KLHBVABAndtNyctsrhnakP/380yZRxI5NMM=
Subject key identifier:   0C:20:F7:1A:8C:9C:DE:69:8F:93:A2:02:06:8E:98:01:50:55:2F:01
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       058D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number:          0588
Signing time:             Sun 20 Sep 2026 23:05:49 +0000
Manifest this update:     Sun 20 Sep 2026 23:05:48 +0000
Manifest next update:     Sun 27 Sep 2026 23:05:48 +0000
Files and hashes:         1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: 6MN4mhGtK8V7wHzJfmDfhiN4iIUHaXNIp2YxD0zNOJk=)
                          2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: 1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1421 (0x58d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Sep 20 23:05:48 2026 GMT
            Not After : Sep 27 23:05:48 2026 GMT
        Subject: CN=6ab066cd-efa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c6:62:05:ad:ae:e4:11:1b:a7:4a:dc:19:4b:
                    81:4b:ed:ad:4e:49:76:4d:4d:15:2a:18:33:14:89:
                    6d:40:de:1f:32:e5:c1:83:2b:c8:ad:5c:7f:81:eb:
                    ee:a7:5f:c9:29:7e:88:aa:b9:6d:50:c0:5f:ff:19:
                    fd:b3:a9:17:a5:7b:d7:f5:3d:91:bc:aa:1d:0f:fc:
                    e7:0e:ff:92:07:8e:ba:32:a0:5d:55:b0:f8:56:ea:
                    d1:ed:8a:2c:da:8a:7d:70:a4:e1:86:82:7b:78:0e:
                    f5:73:2a:d7:5c:01:6c:3e:97:e3:de:03:9a:b7:0d:
                    db:ba:ae:9c:41:f2:db:b1:b1:8e:5e:51:86:0d:18:
                    f0:50:e4:71:90:37:ac:f0:1c:21:d5:07:1c:af:5a:
                    27:37:55:d8:45:23:b9:b8:d5:ad:ae:e5:d0:4b:87:
                    89:36:6a:48:ba:56:1a:00:39:19:cb:97:23:d4:f8:
                    a9:c2:78:ef:c7:39:9c:62:32:cc:ae:a2:fb:c3:ee:
                    fb:00:f9:b6:71:e7:40:7e:a3:b1:3d:32:f3:e4:3d:
                    7b:56:cb:93:e5:0f:c2:3d:0e:ac:64:3f:43:36:7f:
                    c6:32:4f:75:76:3f:7e:f3:15:a4:e0:a7:8f:4f:cb:
                    2a:27:4f:0e:34:44:d5:52:63:18:8a:35:1d:f7:2f:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:F7:1A:8C:9C:DE:69:8F:93:A2:02:06:8E:98:01:50:55:2F:01
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:db:01:88:23:b5:d5:95:79:c3:86:f9:cd:2a:d6:7c:a5:ba:
         91:34:99:85:5c:6e:84:aa:67:ee:34:c0:1e:f2:20:c1:3c:ef:
         92:5c:cd:c1:e1:69:24:89:f5:f1:ae:d3:23:f5:e0:c7:fe:3c:
         7b:66:bb:44:30:2f:92:ae:4e:8f:1a:c2:e8:6e:95:85:26:73:
         dd:81:25:21:ec:95:56:3f:60:e0:60:4b:4b:a9:a4:31:bf:67:
         69:83:d9:8f:b9:7f:27:b7:b6:19:c2:1d:8b:5f:59:00:81:4d:
         10:cf:d2:8a:53:93:db:d7:bc:0c:54:ba:83:98:41:07:83:ed:
         c1:5f:77:a3:7f:1a:e3:1e:a1:38:79:fb:e0:62:36:e8:d6:b9:
         d1:54:1e:d4:5d:e1:a8:4a:bc:d1:7d:74:f4:cc:0e:fc:4e:fe:
         84:58:d8:bb:b5:09:03:ba:25:5d:4d:6c:cd:91:a9:f2:78:77:
         cc:c8:a7:9f:f4:bf:09:53:ef:bb:c2:bc:27:d0:b4:85:9b:82:
         36:50:79:ed:36:ae:98:d3:df:5d:f0:ab:e2:e3:b8:cc:a4:77:
         d3:6c:84:55:dc:dc:a8:5c:a2:34:50:09:ea:ce:c8:6d:05:b5:
         be:fb:4d:85:f3:7e:15:3e:70:f7:a1:06:37:ca:58:e3:03:03:
         d0:5d:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:29:31 2026 by rpki-client