Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
File:                     4Y0K0YMT4gIg3qG4cW37310JzPg.mft (raw, json)
Hash identifier:          wWoEqwE5opdMGA86Cx4uQH+KzpJ7LES3ZZfGAj2T55g=
Subject key identifier:   BD:26:B6:82:21:2E:93:D8:E6:CC:30:33:71:C3:F0:34:01:47:AC:5B
Authority key identifier: E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8
Certificate issuer:       /CN=A91DBB66/serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
Manifest number:          0101
Signing time:             Mon 21 Sep 2026 06:09:51 +0000
Manifest this update:     Mon 21 Sep 2026 06:09:51 +0000
Manifest next update:     Mon 28 Sep 2026 06:09:51 +0000
Files and hashes:         1: 4Y0K0YMT4gIg3qG4cW37310JzPg.crl (hash: AvJwImPSJ8+Im8xJPS/0d5Yq7rmWbsYHp/3plYnv1pA=)
                          2: 099A56FE2FB311F09E3A9373C4F9AE02.roa (hash: qvpf3tPeZUwo+lZY0cw/+448QOLDPYiAWRZZeAUm0FA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl
                          rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBB66, serialNumber=E18D0AD18313E20220DEA1B8716DFBDF5D09CCF8
        Validity
            Not Before: Sep 21 06:09:51 2026 GMT
            Not After : Sep 28 06:09:51 2026 GMT
        Subject: CN=6ab0ca2f-42a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:91:3a:92:96:b3:f7:16:60:6b:a5:a9:71:
                    e3:02:89:34:bf:c0:cc:3e:5e:f4:5d:e1:9e:4a:9a:
                    38:70:6c:51:1f:1d:b1:9f:30:e9:f0:6e:92:82:79:
                    db:af:3e:27:b7:c2:c3:1e:ae:86:fe:58:9b:5f:af:
                    43:f9:4b:90:e2:50:33:87:5a:29:61:60:43:8a:5b:
                    d3:5f:ab:d4:2e:c6:86:04:4d:44:b2:b5:03:d4:c8:
                    02:e5:05:b5:67:2e:64:3b:66:c8:30:ea:16:b8:55:
                    7a:9a:bb:ef:a3:a0:1c:30:b4:ca:8f:9b:af:d8:c2:
                    5c:c9:87:b7:c9:90:ee:72:2a:5a:27:e4:d6:fb:5c:
                    58:b7:89:66:1e:f6:91:9b:70:57:cf:6c:35:6c:f0:
                    5a:d2:c5:d0:5b:84:d2:d0:da:f4:23:a7:5a:f2:28:
                    20:5e:0b:cd:cb:dc:0a:f5:69:8f:9a:4d:7d:5b:40:
                    95:e1:f8:3d:3b:68:69:ae:79:10:60:30:6b:cc:33:
                    00:f5:c2:de:c6:f1:3f:be:88:15:6f:e9:2b:a6:04:
                    4d:d0:43:28:d7:69:71:dc:d8:38:5a:a6:c4:27:20:
                    9e:16:7a:84:e8:a2:9a:c0:da:ec:e7:d9:6b:7b:12:
                    d2:81:ff:0f:aa:ba:9a:5c:0c:4a:f4:11:76:6e:53:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:26:B6:82:21:2E:93:D8:E6:CC:30:33:71:C3:F0:34:01:47:AC:5B
            X509v3 Authority Key Identifier:
                keyid:E1:8D:0A:D1:83:13:E2:02:20:DE:A1:B8:71:6D:FB:DF:5D:09:CC:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Y0K0YMT4gIg3qG4cW37310JzPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB66/0C0D80DE2FAC11F08CEA0A71C4F9AE02/4Y0K0YMT4gIg3qG4cW37310JzPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:5e:e8:0f:38:ef:c5:9f:06:ab:bc:08:43:fb:74:88:02:
         0e:45:55:ee:d1:65:4e:fd:8f:8f:90:9b:95:c1:c4:8e:bd:97:
         0f:61:bc:9c:ad:f6:f3:64:92:0b:dd:f7:59:a0:8c:05:6e:8a:
         a3:35:cf:51:92:06:00:6a:85:6b:57:27:c5:56:2f:e3:a9:56:
         d8:e3:1c:e9:e8:66:ea:5d:dd:da:b6:20:68:df:55:79:16:c2:
         21:29:00:c0:f8:3a:2d:78:08:a5:3c:b7:2d:76:90:a5:cc:fc:
         7c:ff:f2:78:34:56:49:7f:94:35:e0:bd:ab:c6:90:0e:1c:81:
         4b:89:e9:f6:c2:da:e2:2d:54:17:30:57:7e:c2:57:78:0e:c9:
         1e:7f:dd:6b:83:e7:74:6a:da:4a:33:e0:ef:69:ad:88:34:0c:
         4d:dd:a7:9b:eb:c5:a9:da:6e:6d:20:2b:01:80:53:a6:a0:df:
         18:81:03:6d:d3:64:1e:97:bf:7d:5b:7d:2f:b4:75:0b:5f:6f:
         0a:cf:4c:56:87:bc:cc:e7:cb:65:3b:42:a8:a5:15:bb:a9:f1:
         a0:cf:86:76:cc:55:37:2b:b2:fe:f7:3a:62:ce:17:f7:13:c5:
         1a:26:e8:5d:f6:63:6f:c9:c1:5c:89:9c:82:68:71:99:2c:0b:
         aa:c7:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:57:21 2026 by rpki-client