Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File:                     ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier:          P6QZjYQIC2fTBUe1a64U8q5cQeq7IkRqvlSWjC3cDWQ=
Subject key identifier:   77:E6:E1:B4:1A:8F:38:00:4B:22:8A:BA:90:35:5D:17:85:00:77:72
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer:       /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial:       0C68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number:          0C49
Signing time:             Sun 20 Sep 2026 18:44:05 +0000
Manifest this update:     Sun 20 Sep 2026 18:44:04 +0000
Manifest next update:     Sun 27 Sep 2026 18:44:04 +0000
Files and hashes:         1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: kc83mR1xXfHtEO0TkUSt8YsIImg/gWeZ/AHQsnyDIHU=)
                          2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 18:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3176 (0xc68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
        Validity
            Not Before: Sep 20 18:44:04 2026 GMT
            Not After : Sep 27 18:44:04 2026 GMT
        Subject: CN=6ab02975-9956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:b9:9f:25:f4:14:3f:b4:15:54:4a:8b:39:
                    fe:31:e5:8a:f1:e3:ae:d1:c2:72:bb:07:49:c4:4d:
                    69:c1:c0:01:a4:16:c3:c5:c0:56:f5:a4:91:8a:80:
                    d6:9a:41:87:a8:a3:01:12:21:d1:06:36:54:b5:18:
                    da:84:bb:23:6d:c1:c3:39:80:b1:56:df:17:a7:99:
                    05:ed:62:a8:96:37:c2:7e:71:9d:62:73:11:6d:2f:
                    d0:10:bd:a2:cf:32:7f:ff:f1:44:c7:4c:9b:77:d8:
                    b7:f6:22:bc:de:6f:2e:f2:9f:00:66:2f:95:41:82:
                    cb:ac:53:e3:6d:86:ef:d1:ce:f2:65:88:ba:dc:5c:
                    e1:6c:b1:3d:57:0a:a1:39:0b:2e:b8:7b:08:22:df:
                    1a:99:0f:1a:a9:83:2f:cc:f3:c9:29:17:56:a1:d1:
                    bb:8b:70:00:fe:fa:10:39:4b:2c:8a:3a:31:2b:54:
                    7f:02:cd:15:a2:d9:a4:f6:0b:34:7f:a8:a4:20:15:
                    6f:23:f1:7c:b1:42:09:4b:e5:85:4c:6d:70:43:30:
                    1d:50:23:ea:94:72:31:d9:3f:c3:1b:44:aa:ba:0e:
                    15:cc:d7:f8:db:de:7b:4a:c6:04:6e:b2:f6:52:c2:
                    af:ee:fc:30:45:0d:30:94:99:6b:ad:65:b5:d7:cd:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E6:E1:B4:1A:8F:38:00:4B:22:8A:BA:90:35:5D:17:85:00:77:72
            X509v3 Authority Key Identifier:
                keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3b:00:6d:78:51:be:e5:1c:99:0f:d1:a7:c8:0e:2d:d9:91:
         03:6a:a5:1f:29:ee:8f:f0:00:51:ee:8a:bf:b0:83:88:62:39:
         a5:f2:66:6a:c8:ca:c8:7f:17:f8:98:2f:c0:36:5b:d1:d9:da:
         7e:d1:83:26:a3:68:55:70:79:22:01:13:c1:df:ee:8c:bd:ad:
         0c:3e:17:3e:d4:e1:51:ce:3a:67:f9:e0:93:b4:74:d4:ca:4d:
         66:21:81:2b:e1:3a:6d:4a:ee:42:32:99:68:80:fa:3b:81:88:
         de:cc:46:4c:15:01:d1:8c:a5:8c:c4:0d:54:25:35:08:2f:d9:
         7a:44:80:d0:87:83:e9:16:a5:fb:6f:fa:57:e5:87:f1:03:8a:
         8b:b0:2c:81:ee:4a:e6:d2:0f:e1:c8:07:c8:dc:bd:8e:73:29:
         fc:58:32:b9:8d:c4:ab:ae:30:d4:3f:f5:d2:15:50:50:8c:4c:
         86:96:ae:70:7c:2a:17:1e:1d:6f:e5:c9:16:a1:7c:9e:6d:7d:
         ce:5a:f2:d9:eb:aa:0b:ce:d5:3a:f4:50:91:e9:f9:c4:fd:a2:
         c4:02:d5:86:21:e5:f5:15:78:e9:52:1d:c3:68:be:e9:0b:92:
         2e:f2:62:0a:d3:7f:99:db:4b:43:2a:a4:a9:1e:bd:66:91:d5:
         a8:13:95:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJDNDMxMTAvBgNVBAUTKENBMENFMkNCQTk5Q0RFMEQ5MDI3RkNFNDg2NEYyNkM5
MTNENDE5RTMwHhcNMjYwOTIwMTg0NDA0WhcNMjYwOTI3MTg0NDA0WjAYMRYwFAYD
VQQDEw02YWIwMjk3NS05OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspi5nyX0FD+0FVRKizn+MeWK8eOu0cJyuwdJxE1pwcABpBbDxcBW9aSRioDW
mkGHqKMBEiHRBjZUtRjahLsjbcHDOYCxVt8Xp5kF7WKoljfCfnGdYnMRbS/QEL2i
zzJ///FEx0ybd9i39iK83m8u8p8AZi+VQYLLrFPjbYbv0c7yZYi63FzhbLE9Vwqh
OQsuuHsIIt8amQ8aqYMvzPPJKRdWodG7i3AA/voQOUssijoxK1R/As0Votmk9gs0
f6ikIBVvI/F8sUIJS+WFTG1wQzAdUCPqlHIx2T/DG0Squg4VzNf42957SsYEbrL2
UsKv7vwwRQ0wlJlrrWW1181WaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHfm4bQa
jzgASyKKupA1XReFAHdyMB8GA1UdIwQYMBaAFMoM4supnN4NkCf85IZPJskT1Bnj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM0My9EQzJGNTQ2ODM5
RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNnMlFKX3praGs4bXlSUFVH
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lneml5Nm1jM2cyUUpfemtoazhteVJQVUdlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkM0My9EQzJGNTQ2ODM5RTQxMUVBOTYxNzMzNzRDNEY5QUUwMi95Z3ppeTZtYzNn
MlFKX3praGs4bXlSUFVHZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAljsAbXhRvuUcmQ/Rp8gOLdmRA2qlHynuj/AAUe6Kv7CDiGI5pfJmasjKyH8X
+JgvwDZb0dnaftGDJqNoVXB5IgETwd/ujL2tDD4XPtThUc46Z/ngk7R01MpNZiGB
K+E6bUruQjKZaID6O4GI3sxGTBUB0YyljMQNVCU1CC/ZekSA0IeD6Ral+2/6V+WH
8QOKi7Asge5K5tIP4cgHyNy9jnMp/FgyuY3Eq64w1D/10hVQUIxMhpaucHwqFx4d
b+XJFqF8nm19zlry2euqC87VOvRQken5xP2ixALVhiHl9RV46VIdw2i+6QuSLvJi
CtN/mdtLQyqkqR69ZpHVqBOVyA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:11:03 2026 by rpki-client