Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File:                     YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier:          kh8PKuxgHTcJFdMe5VXZL0EHvHJwrEjokwg6xEqCzsQ=
Subject key identifier:   23:4E:0E:16:86:2B:ED:A3:9E:DA:10:7A:D8:FC:A5:52:81:A8:43:58
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer:       /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number:          013E
Signing time:             Mon 21 Sep 2026 05:28:21 +0000
Manifest this update:     Mon 21 Sep 2026 05:28:20 +0000
Manifest next update:     Mon 28 Sep 2026 05:28:20 +0000
Files and hashes:         1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: HcdSRx4EYhikai/7yga0zGblQsGugOK4xpAekVARX/M=)
                          2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
        Validity
            Not Before: Sep 21 05:28:20 2026 GMT
            Not After : Sep 28 05:28:20 2026 GMT
        Subject: CN=6ab0c075-1ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:1a:c0:dc:d1:89:5b:4f:3f:60:5b:02:f5:
                    57:0d:48:ff:4f:e6:77:71:c8:95:3e:ac:14:d7:21:
                    ad:f2:f4:85:ea:3d:b9:37:30:a2:00:a5:7b:b6:e6:
                    9a:fa:57:9b:0b:f0:cd:00:a0:c7:90:7d:a9:bc:21:
                    47:29:2b:c6:68:ee:96:59:bd:0a:09:3c:0d:41:93:
                    e7:d5:c0:df:49:8e:e2:ad:43:9d:de:95:71:7e:17:
                    49:a6:bb:46:ad:03:94:f9:4b:60:b4:5b:d5:79:b4:
                    a2:4b:b9:e3:2f:59:61:79:fb:f9:ff:f6:2b:8f:c9:
                    24:38:62:63:3f:11:b3:60:70:e4:e9:ed:66:fd:a2:
                    d4:72:7b:24:cd:20:90:5b:b5:76:ee:bf:c2:a3:7b:
                    3e:a5:1f:3e:ce:09:6a:60:3b:8d:60:d7:18:77:a8:
                    a1:95:9c:45:7d:d8:89:f0:2f:a0:64:33:69:d8:d3:
                    86:84:ac:a0:ea:cc:aa:1b:e8:01:71:f9:59:f5:74:
                    e2:b6:3a:c3:ea:79:b8:b2:b7:0d:d5:9c:8b:69:09:
                    9d:e1:4f:e8:50:e7:6c:f6:d4:4b:86:b0:00:a5:50:
                    4a:d2:5d:b3:4e:32:e1:91:45:20:c4:ad:c4:27:c2:
                    be:03:8c:c9:a5:20:cf:d9:2f:f0:7c:57:e9:e4:34:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4E:0E:16:86:2B:ED:A3:9E:DA:10:7A:D8:FC:A5:52:81:A8:43:58
            X509v3 Authority Key Identifier:
                keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:85:32:4f:71:35:de:f6:5f:a6:43:4b:f6:d2:17:9b:ee:ee:
         96:0d:b8:81:cd:98:de:d1:ff:8d:3d:12:f6:b0:e3:d7:a6:05:
         18:c4:25:9c:ed:d2:e4:b1:51:eb:9a:4d:26:46:64:45:4d:c2:
         17:b6:8e:8c:22:f4:99:c7:da:70:1a:86:06:c9:2b:0c:f2:17:
         5f:97:fe:e4:c8:d9:fc:f4:0f:8f:b6:21:9d:fe:8f:b4:0c:c3:
         f0:90:18:90:ca:fc:30:99:bd:21:45:39:46:6c:d4:60:0e:41:
         57:ef:78:52:2e:b1:fc:9d:bd:a8:b5:55:df:c1:58:7b:3e:b5:
         cb:fc:c2:b3:8e:27:3c:6c:fc:93:f6:d3:42:77:7e:c0:08:ee:
         a1:a3:7c:ed:b6:21:8c:6f:40:f3:c8:17:db:2a:ae:f8:da:07:
         ea:c6:04:fa:52:ea:8c:f1:74:52:7d:1a:1e:ef:8f:ea:cb:36:
         09:b1:9c:30:19:27:67:d7:d4:a3:e9:90:0c:67:a5:16:08:cd:
         e2:7a:ba:86:f6:b6:bd:8f:89:b7:7a:3d:b6:fa:05:91:f3:9b:
         e6:d0:bf:d2:86:e1:10:0e:cc:87:3d:64:0c:75:70:27:ba:1c:
         ba:5c:d3:65:7e:c5:f2:db:cd:c9:c9:ad:43:47:71:f6:e3:b0:
         59:d7:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:59:50 2026 by rpki-client