Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
File:                     0y2jboghgi5r08gs_6mE56kJw_Y.mft (raw, json)
Hash identifier:          VNiF4qH1om+BpUquUdhMU+IMqRmsboSVVsdmkN2/t/U=
Subject key identifier:   4E:9E:3C:52:DF:0A:15:44:F0:BC:71:D4:69:42:1D:C7:C3:67:F8:A1
Authority key identifier: D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6
Certificate issuer:       /CN=A91B8EF9/serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
Certificate serial:       34DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
Manifest number:          34CA
Signing time:             Mon 12 Oct 2026 15:20:06 +0000
Manifest this update:     Mon 12 Oct 2026 15:20:05 +0000
Manifest next update:     Mon 19 Oct 2026 15:20:05 +0000
Files and hashes:         1: 0y2jboghgi5r08gs_6mE56kJw_Y.crl (hash: smDN0+N0IwJL0zktCakrp8t6GVADwgVFDYtVfx7MEuw=)
                          2: A1C2C79680FE11E985D53F55C4F9AE02.roa (hash: Ej83i8NuEYKasou7W/9D745hYaGsqd2oMKEiRlHzF4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13532 (0x34dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8EF9, serialNumber=D32DA36E8821822E6BD3C82CFFA984E7A909C3F6
        Validity
            Not Before: Oct 12 15:20:05 2026 GMT
            Not After : Oct 19 15:20:05 2026 GMT
        Subject: CN=6accfaa5-8894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:54:be:e7:b4:14:2e:0f:e2:b8:fe:49:18:
                    ae:1b:25:8f:6d:5f:d5:87:cc:48:3d:0f:8c:09:4d:
                    74:8c:85:27:62:66:5c:46:28:8f:b3:73:97:a4:87:
                    3b:2a:f1:b9:fd:e1:5a:6e:16:01:24:e8:b5:e1:29:
                    08:c7:b4:e2:73:9d:58:60:d4:b0:e5:67:6e:8c:07:
                    13:7d:e7:72:38:07:93:d6:58:e5:6f:db:bc:c0:10:
                    94:13:58:23:4d:6d:92:b7:37:9e:45:64:ff:13:f3:
                    a6:87:cd:d1:8f:38:98:38:b8:d8:30:0f:b7:d1:37:
                    d9:3c:7c:67:c6:cd:9a:1e:14:51:31:f2:76:5f:c1:
                    4d:b9:16:1f:46:8c:2d:8c:07:e7:ec:27:a8:50:de:
                    eb:27:76:b2:9e:9d:3a:82:1a:bb:71:75:86:e5:f4:
                    12:6b:aa:13:92:de:29:82:ee:14:1e:50:22:d1:78:
                    75:69:a6:ee:58:ec:34:80:b0:fa:1a:5a:69:5b:ce:
                    d2:c9:d9:6a:c2:f2:66:e7:cc:54:a6:94:ff:d2:68:
                    6c:42:39:51:86:f2:36:a4:72:03:2f:ab:d3:08:a7:
                    40:91:a8:29:50:73:e1:78:5a:8f:74:ae:82:46:d4:
                    6b:b4:66:ba:c7:52:88:fa:76:cb:f6:96:fe:2e:16:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9E:3C:52:DF:0A:15:44:F0:BC:71:D4:69:42:1D:C7:C3:67:F8:A1
            X509v3 Authority Key Identifier:
                keyid:D3:2D:A3:6E:88:21:82:2E:6B:D3:C8:2C:FF:A9:84:E7:A9:09:C3:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0y2jboghgi5r08gs_6mE56kJw_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8EF9/44A805EE44C911E2B35AC4842979BB20/0y2jboghgi5r08gs_6mE56kJw_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d1:f3:2b:68:fb:62:3c:cd:4e:15:b0:58:86:cc:d4:be:94:
         75:3c:86:b8:88:c3:24:8b:95:db:ce:ff:c5:17:d3:e5:fb:2d:
         e3:33:3e:37:ee:2a:66:a8:c9:de:50:54:cf:2e:fb:59:76:51:
         7e:69:5b:a0:4f:38:8f:89:52:c5:d9:ed:97:12:6c:e4:6b:08:
         9d:ef:a8:c6:92:36:40:b8:6d:74:40:53:74:66:fd:0c:a9:1d:
         b9:ca:15:0f:64:51:df:77:42:8b:37:43:a7:9e:3f:92:38:08:
         3f:6f:39:4b:99:f0:54:f7:fd:4a:6d:d0:88:0d:f1:03:8c:9c:
         a2:b9:2e:fd:42:c2:34:08:6e:c1:37:5a:cf:4d:93:f5:41:c6:
         8d:95:81:49:3d:89:a5:6d:ea:63:c8:78:f2:5e:65:e1:22:b5:
         91:68:8f:97:5c:48:e8:92:c4:b9:bc:7e:24:ea:6a:f7:5f:6d:
         bd:a3:05:26:69:06:74:b8:e4:7d:84:e4:ef:ef:78:7e:dd:7c:
         22:c5:de:71:29:8f:7e:39:39:d7:29:47:19:24:05:e0:17:a8:
         bf:4a:e7:d6:28:76:3a:51:45:de:5d:fa:2f:d0:b0:e0:d2:c8:
         56:73:db:39:e0:54:c2:54:e8:61:48:f9:18:8f:12:ce:87:c5:
         51:1b:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:49:45 2026 by rpki-client