Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File:                     yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier:          LE/jH7KxEivjRgp7hUssMcbqpc3P6pPKf/+BSsSIOwc=
Subject key identifier:   E0:EF:CA:8A:27:6A:D1:66:02:92:63:27:9B:3A:39:E4:21:E9:F9:6A
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer:       /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number:          0623
Signing time:             Mon 12 Oct 2026 22:57:34 +0000
Manifest this update:     Mon 12 Oct 2026 22:57:34 +0000
Manifest next update:     Mon 19 Oct 2026 22:57:34 +0000
Files and hashes:         1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: xpBv+DMQ36Ve6Aes1ezaFkmFa+o1mDA5+E872VQKFk4=)
                          2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: hhhDivZPfpYVc/TnYUA+tCpDp/wVvW/IZEwMGB5mPu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
                          rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
        Validity
            Not Before: Oct 12 22:57:34 2026 GMT
            Not After : Oct 19 22:57:34 2026 GMT
        Subject: CN=6acd65de-d38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:f9:13:96:fc:ed:98:23:78:71:ad:5f:31:
                    31:1c:74:b7:ca:d7:9b:f8:c2:e4:a7:03:85:22:b5:
                    22:46:19:de:22:65:d8:e6:14:68:8b:44:1a:e6:46:
                    6c:e6:f7:3a:df:0f:68:f6:e9:15:2d:ae:f9:99:f2:
                    29:68:44:f3:eb:29:5c:de:a4:c1:73:76:d4:d8:bc:
                    75:6f:62:21:79:3f:5a:4e:c2:37:05:5e:4c:6f:a0:
                    50:15:8d:22:45:f2:a5:8a:c9:ca:83:90:e3:ac:f1:
                    94:d3:e8:17:db:04:69:48:f1:3b:49:d2:9f:28:bd:
                    33:3c:77:cb:12:1f:19:f8:00:1f:6c:67:ad:5a:4b:
                    b1:3c:a0:63:a0:bf:b1:a1:0a:a0:86:c5:27:54:e4:
                    d9:16:61:66:97:24:62:5e:79:a3:fb:30:83:3d:ed:
                    26:f7:fa:8a:1b:41:01:7a:32:af:98:ec:f9:6e:12:
                    74:65:a4:72:1c:d0:cb:e1:86:43:a9:74:4e:45:b8:
                    44:73:6d:7b:56:43:a7:c3:68:ce:ed:89:6f:a8:da:
                    f4:3c:79:ae:91:5b:52:be:d5:f7:4a:c5:40:09:71:
                    b7:7f:7e:71:b2:8d:f9:fe:ce:66:cd:1e:31:61:88:
                    be:19:9f:6c:f4:e0:2f:55:e6:e3:46:77:5f:05:77:
                    96:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EF:CA:8A:27:6A:D1:66:02:92:63:27:9B:3A:39:E4:21:E9:F9:6A
            X509v3 Authority Key Identifier:
                keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:2b:9c:ec:bc:9c:53:44:b2:ef:7b:7b:2f:11:8c:43:e6:
         73:db:eb:a4:03:f6:5a:66:09:c4:da:a6:74:7d:e7:d6:85:91:
         41:78:39:07:5a:2d:e4:ae:26:ae:5a:6e:fc:b5:9c:52:a1:44:
         1a:a1:96:9e:16:aa:8b:5c:33:6c:e8:74:29:5e:71:73:d7:9a:
         7c:0d:61:27:26:c8:f5:5a:e0:67:b1:97:76:0b:7e:ae:cd:fb:
         10:85:79:1d:aa:73:a1:47:79:86:31:25:bd:80:cf:13:c3:04:
         35:5d:4d:3a:d6:1b:a1:61:f0:bc:2d:9c:b6:31:d6:de:14:c2:
         9a:f9:9b:e4:5e:9f:22:e6:65:73:0f:fc:80:28:88:e3:be:02:
         7b:ec:9f:d6:9d:c6:70:83:c5:c5:c8:b4:a6:8e:c4:9a:9a:60:
         bd:8a:d0:e6:9f:ff:18:e7:ba:1c:ad:aa:06:0d:cf:3b:12:e1:
         de:e9:7c:f0:3d:9b:25:9c:b9:7c:b0:7b:43:ae:b6:76:eb:06:
         95:a5:b1:bc:3e:60:0a:f8:b8:03:61:4a:aa:5a:5a:70:c1:19:
         77:08:48:18:cc:1a:3a:b4:46:07:30:b1:5b:f4:80:e1:bb:ed:
         15:04:a9:c4:ac:b3:e0:f0:45:6f:e5:af:e3:19:46:9d:82:12:
         aa:f5:56:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:47:41 2026 by rpki-client