Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
File:                     FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json)
Hash identifier:          gQZc8Jc2K68Eeuk2swrVsnRfo23Hi/4rrXP/xG/lqIo=
Subject key identifier:   1A:A6:95:B1:68:14:80:08:9B:AE:A0:83:F6:4D:E7:43:3E:F8:0F:6F
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Certificate issuer:       /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial:       0CDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
Manifest number:          0CD2
Signing time:             Wed 14 Oct 2026 18:40:37 +0000
Manifest this update:     Wed 14 Oct 2026 18:40:36 +0000
Manifest next update:     Wed 21 Oct 2026 18:40:36 +0000
Files and hashes:         1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: Be/70VlMX1WfsAfE3z0Ie6zz+Bknweo3a0ZJW/dQP1M=)
                          2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: 4ablXLJzigDQjMav8RJlsCl5xohBbLZT5yMn2LFHDVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Oct 2026 18:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3293 (0xcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
        Validity
            Not Before: Oct 14 18:40:36 2026 GMT
            Not After : Oct 21 18:40:36 2026 GMT
        Subject: CN=6acfcca5-4935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:b5:a9:51:a9:3e:8f:28:2d:92:4e:5c:8c:
                    78:e2:a3:15:99:41:9f:78:74:cb:30:c2:91:18:50:
                    ef:1d:3d:51:64:24:21:52:bd:4f:d1:01:94:32:db:
                    e6:33:27:43:b9:ca:06:a8:71:45:47:1c:d3:6d:38:
                    6c:6f:f4:82:2b:18:11:6f:fd:d0:53:56:85:a8:b5:
                    4a:b6:39:ed:f4:08:05:43:0b:35:ff:d3:6f:86:a1:
                    ce:d2:0c:4b:f2:82:dd:ba:66:32:c4:12:d9:f6:fc:
                    15:63:44:31:97:16:b8:a8:dd:a1:5d:a2:8d:68:2f:
                    dc:2a:12:42:62:5f:5d:e9:fa:96:97:e7:da:5f:ed:
                    ac:19:f5:6e:5d:6d:28:be:99:c7:11:be:cf:25:7e:
                    ec:2f:6f:6f:1b:dd:5d:1e:6e:d2:45:49:2a:33:d1:
                    93:10:c2:a4:42:11:14:a3:bc:19:e6:9c:63:ec:da:
                    82:e0:62:3e:9b:4a:98:93:51:ae:24:82:e2:a2:67:
                    7f:53:58:a0:a0:97:90:25:1a:58:29:98:9c:82:be:
                    72:69:7c:79:8f:ff:86:30:b7:15:d9:0f:cd:e8:58:
                    71:e1:4e:a7:c4:46:a4:5a:f6:a2:0e:3b:fe:ff:8e:
                    db:fa:09:51:ad:f9:17:1c:de:85:c3:40:f3:2b:fe:
                    bd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A6:95:B1:68:14:80:08:9B:AE:A0:83:F6:4D:E7:43:3E:F8:0F:6F
            X509v3 Authority Key Identifier:
                keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:d5:da:c6:aa:2b:3a:e5:8e:fd:11:c0:c1:36:9f:93:70:
         b5:24:32:89:8b:72:d0:af:69:93:37:9d:e1:8e:a8:8c:fe:55:
         8c:01:ea:ac:54:fc:dc:a9:3c:5f:b8:1a:cf:2c:fe:75:06:89:
         c7:63:93:81:f8:6a:89:54:4a:80:b7:b3:51:fc:a8:9d:9b:80:
         db:10:18:6a:13:3f:18:be:ce:86:27:69:c8:3f:68:d6:19:a0:
         a0:9f:5f:17:32:52:a3:d9:75:64:72:72:53:64:78:36:6a:cb:
         01:26:5d:e6:aa:75:b5:eb:d3:6a:4a:b1:a0:9d:a8:4a:4e:49:
         7c:7c:aa:48:62:fa:9b:cc:7c:49:95:87:70:70:eb:a9:ff:e4:
         49:b8:3d:4f:31:da:09:62:54:be:36:5c:1b:a3:46:17:80:6c:
         1f:d6:20:7e:71:bb:5d:e7:97:b6:91:90:df:4b:d5:2d:4b:98:
         35:17:d4:0f:67:80:3e:1b:e2:12:76:79:33:6f:3d:a0:68:83:
         25:0e:fd:94:9b:a8:34:53:2f:3f:55:51:cd:28:0d:03:89:8b:
         17:a0:4c:25:25:24:5c:7b:87:6a:32:6c:71:0d:56:12:7d:dd:
         47:db:a1:51:9a:ff:e5:f7:8a:45:ce:03:a7:a1:77:eb:a5:99:
         d7:a2:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:30:30 2026 by rpki-client