Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
File:                     yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json)
Hash identifier:          5aDGABMLdCHRmrLDMO4YlzFDyVKLUjKrFuCHiJwEHuQ=
Subject key identifier:   CA:DD:73:E8:5D:C3:BA:05:BC:FA:76:C5:27:AD:F0:7E:DC:E8:D2:B3
Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
Certificate issuer:       /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Certificate serial:       0775
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
Manifest number:          0775
Signing time:             Sun 20 Sep 2026 21:29:17 +0000
Manifest this update:     Sun 20 Sep 2026 21:29:17 +0000
Manifest next update:     Sun 27 Sep 2026 21:29:17 +0000
Files and hashes:         1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: plracLn7BLP/zhOKN1AgUpvxa8f3Fzlq0gsS9xQwjVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 21:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
        Validity
            Not Before: Sep 20 21:29:17 2026 GMT
            Not After : Sep 27 21:29:17 2026 GMT
        Subject: CN=6ab0502d-7c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:d7:92:4b:98:18:0d:d5:f0:0c:b0:36:65:
                    dd:f1:50:e1:b5:47:30:91:db:a7:c8:7a:48:62:a6:
                    59:59:fa:8d:d7:ce:5d:61:43:e9:8d:6a:53:7f:28:
                    45:84:b2:97:15:ee:a9:1c:db:79:80:88:6d:42:dd:
                    c4:83:89:df:14:83:e9:9b:85:54:40:f0:8f:6b:c9:
                    33:af:7a:f2:23:2a:47:23:b3:16:4f:fa:5b:a5:68:
                    8c:64:cb:f6:5d:b3:8d:34:82:76:e7:27:40:68:05:
                    4f:7b:c5:80:13:24:5f:cc:74:0a:ca:90:72:67:0a:
                    51:04:f6:0f:59:78:d3:fa:ea:1a:1c:cf:c0:68:06:
                    eb:d1:4c:0e:c7:56:36:b0:bb:bb:90:af:9e:bc:db:
                    2c:51:c3:14:eb:f2:aa:99:8d:be:1c:b4:3f:62:6b:
                    f2:0d:f9:73:2b:05:da:5c:1f:c8:bc:f1:67:65:92:
                    8e:6f:b6:be:4e:cf:3b:0b:2e:ff:a4:11:26:cf:3b:
                    3e:c3:2d:fd:30:55:1e:47:be:9a:31:1f:3f:c2:27:
                    f0:62:4b:11:8f:bf:93:8e:11:2a:10:ae:17:08:f8:
                    e8:4c:aa:56:83:cd:84:d0:50:d4:98:0f:89:e1:d6:
                    a2:0b:6b:fb:01:3f:09:80:d0:23:f3:4d:76:9d:59:
                    52:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:73:E8:5D:C3:BA:05:BC:FA:76:C5:27:AD:F0:7E:DC:E8:D2:B3
            X509v3 Authority Key Identifier:
                keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:43:53:98:7a:d0:66:3a:46:12:63:45:a3:29:9e:3c:75:
         a9:f8:42:0d:4e:ee:04:e6:90:c0:1a:93:f5:32:c1:2a:ac:bd:
         3c:9e:8e:93:19:3e:f8:b6:c5:b1:b9:24:8b:f5:11:21:55:32:
         8d:b8:60:44:4c:78:6a:2f:ec:86:c5:6e:ba:8a:ac:70:6c:92:
         e3:89:49:98:99:8f:33:1c:02:ea:e3:ab:44:eb:8d:e3:38:9f:
         a5:71:7b:5f:29:f5:8d:72:5f:56:35:ee:26:eb:a5:5a:6b:5e:
         5d:aa:21:80:0c:54:5d:4b:b5:6a:52:5a:5b:94:ad:5c:ef:70:
         5b:94:90:72:21:f1:61:54:a4:f1:1a:3f:ff:4c:d8:cc:b3:88:
         ab:40:85:19:52:c4:f0:80:12:da:41:97:a9:6a:51:46:96:9e:
         63:6c:b1:1c:3f:6a:e8:0e:5b:9a:2a:0c:0f:a3:31:5c:30:c5:
         69:6c:0a:2b:5b:32:e3:dc:63:78:45:1f:6b:6d:a7:4d:d2:41:
         1f:3d:83:18:fe:92:27:70:f0:ef:04:9f:13:39:82:f0:ac:34:
         8d:40:58:ed:bb:7b:df:27:0a:01:e8:82:31:b1:5b:35:3a:c6:
         fc:f7:ee:f0:16:54:9e:f7:1f:45:c7:66:b5:99:15:88:3f:72:
         6b:b5:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:05:34 2026 by rpki-client