Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File:                     Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier:          /BFVKP5rUn1hQKfUsPzNOz50oZ2w15XgiKP+Vvy5NOk=
Subject key identifier:   87:46:9A:3F:38:08:C5:F7:9B:EB:61:1C:00:FB:B9:8C:B7:7A:56:E4
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer:       /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial:       0227
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number:          021F
Signing time:             Mon 21 Sep 2026 02:55:35 +0000
Manifest this update:     Mon 21 Sep 2026 02:55:34 +0000
Manifest next update:     Mon 28 Sep 2026 02:55:34 +0000
Files and hashes:         1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: 4ItmcipbzIPRNzNJYn7+nN3Yl62mdDzfyQg40+36LJ8=)
                          2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: NxYGUXPru1ELvBZ6qbFZeX9tHWu2f3PZOepm5U8d3eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
                          rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
        Validity
            Not Before: Sep 21 02:55:34 2026 GMT
            Not After : Sep 28 02:55:34 2026 GMT
        Subject: CN=6ab09ca7-e9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:54:6b:1d:14:92:37:3d:f3:7b:3e:56:c2:
                    27:e5:12:4b:47:b7:28:d3:e3:98:ff:e4:cc:12:08:
                    94:f8:3b:73:5f:70:b3:2d:6a:24:f5:6f:ae:ba:3e:
                    e3:bd:ba:e6:9a:8d:7d:78:83:59:3e:56:64:19:90:
                    66:98:db:08:f5:42:a3:91:07:da:89:1d:38:50:ba:
                    4e:41:9c:23:d0:c8:33:5e:11:17:71:f2:50:9f:ae:
                    66:69:7e:8f:bf:b6:fe:a2:51:b3:d1:06:4a:35:df:
                    05:59:89:af:44:d4:1c:4f:a3:14:b3:99:7f:e5:11:
                    81:9e:67:b6:a2:21:67:af:56:cb:09:16:ac:37:58:
                    1b:94:f2:96:98:19:5d:65:da:c5:0c:04:44:e1:df:
                    87:71:6d:f3:ab:57:8c:04:f0:c4:c6:2f:24:b5:69:
                    35:a2:40:6c:d6:7d:dd:10:d8:fe:4c:bc:e9:02:3c:
                    50:3f:33:ce:15:80:f9:9e:7e:ba:8b:c6:92:66:6a:
                    ac:36:bf:a0:1f:e7:aa:38:d2:0c:86:84:bd:6c:52:
                    d0:43:aa:ec:47:81:1a:d4:24:e6:31:ff:aa:01:da:
                    75:d5:39:e3:e1:0b:7b:3a:32:b0:cc:0d:e4:0a:d9:
                    2f:0b:c9:3f:8e:9c:b8:74:af:be:d7:4c:b9:9a:3a:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:46:9A:3F:38:08:C5:F7:9B:EB:61:1C:00:FB:B9:8C:B7:7A:56:E4
            X509v3 Authority Key Identifier:
                keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:00:02:93:b5:a9:a6:0f:71:d2:c2:0f:45:d5:49:a0:4b:5e:
         ad:ef:ce:62:8d:a7:67:64:af:99:bf:8a:28:4e:b3:d7:48:f7:
         a0:73:9f:a8:ce:c4:19:59:99:ac:8f:ed:c2:b9:1f:c0:36:d7:
         9b:4a:5c:57:fc:98:17:b2:9c:51:24:02:d1:01:df:f8:41:bd:
         c6:ad:74:72:df:09:35:71:a7:31:7d:b7:e6:66:e8:82:a7:f6:
         fa:97:c6:fb:41:32:84:dc:fd:46:0e:d4:36:2d:1a:0c:b5:08:
         bd:7d:74:9b:b2:b3:d5:bf:df:08:0c:a0:e4:ca:ba:5f:bf:f9:
         b0:17:1d:a4:87:61:04:eb:2a:a3:c0:36:c1:47:b9:75:c1:41:
         a8:32:59:32:58:8c:1f:2d:27:f2:cc:3d:08:06:89:19:27:52:
         94:53:14:0d:6f:cd:28:41:6f:8a:d7:4c:1f:1a:e6:1d:39:6f:
         53:48:92:b1:e4:86:c5:e9:48:c1:5d:05:78:86:a8:97:3f:db:
         a4:0d:3f:2c:c2:40:27:a3:a1:dc:96:aa:6c:0b:b4:83:d4:0c:
         b3:7c:67:b0:ca:60:b0:4b:35:12:62:ab:08:41:6a:bf:b7:98:
         7b:16:a2:ab:dd:3d:77:cf:41:d0:ce:5c:7c:36:f5:06:f0:d6:
         26:c8:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:05 2026 by rpki-client