Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
File:                     yuPbit7noWq2ylN_I0ewIFvfT3Y.mft (raw, json)
Hash identifier:          3ArDOeqUrz2H12j4Hg23/UdSP35OJnSshfwVxvhYz/k=
Subject key identifier:   DB:DF:D7:90:E0:85:DF:8F:6A:12:52:4F:74:3A:70:7B:D4:AE:80:6B
Authority key identifier: CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76
Certificate issuer:       /CN=A91FA6FF/serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
Manifest number:          01AF
Signing time:             Mon 21 Sep 2026 04:05:48 +0000
Manifest this update:     Mon 21 Sep 2026 04:05:48 +0000
Manifest next update:     Mon 28 Sep 2026 04:05:48 +0000
Files and hashes:         1: yuPbit7noWq2ylN_I0ewIFvfT3Y.crl (hash: Y5svgsPhjwriHsI/fJeyAAie2cmVFpnGnDKeieSk+0g=)
                          2: 66476E182EAC11EFAAAF8E67C4F9AE02.roa (hash: SY3cJmeJRYwxQTdV8LuINvKyBM5cYU9gdA5scwGtw/k=)
                          3: 12032AE02EAC11EFB73C0767C4F9AE02.roa (hash: wyT3A7piAuRFJYSmj03a1CgN5dYY1alX8ULeMn9nACs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6FF, serialNumber=CAE3DB8ADEE7A16AB6CA537F2347B0205BDF4F76
        Validity
            Not Before: Sep 21 04:05:48 2026 GMT
            Not After : Sep 28 04:05:48 2026 GMT
        Subject: CN=6ab0ad1c-36dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:02:2c:6e:c7:bf:83:db:f7:8b:c1:ed:56:
                    ed:c4:0e:1b:9d:9e:1e:b6:27:fe:db:24:4b:b4:e9:
                    59:cc:cd:91:d2:c1:39:65:bc:28:e6:f5:3b:3b:ee:
                    45:23:79:60:6f:fd:00:fe:f0:97:39:10:4c:6d:c1:
                    b8:f3:77:ee:31:d2:e6:7e:4b:ef:cc:0c:20:ae:f1:
                    13:b3:a4:3a:30:2e:f9:12:b1:82:d0:85:e8:c3:5f:
                    0d:a5:ec:c0:7d:3f:52:da:e6:5d:af:80:0f:85:e4:
                    31:33:0e:94:3b:8f:62:64:9d:ed:d7:00:dd:c4:2b:
                    19:05:fa:fb:18:63:dc:76:bd:5e:0a:87:41:25:3b:
                    4a:c8:b4:44:95:7f:3e:06:d8:36:43:8d:16:78:60:
                    c8:dc:8a:23:02:0b:39:fb:90:ea:95:ec:ec:cd:ba:
                    17:a8:59:c2:8c:a5:6a:2b:d3:e0:ee:ed:67:2e:ec:
                    df:ad:70:70:0e:0f:62:7f:73:a9:c7:c1:fd:6f:13:
                    be:23:cb:02:3e:40:1d:80:2d:8f:0e:9b:5b:44:3a:
                    c1:be:45:7a:85:0e:7d:4d:40:47:5c:12:9e:18:fa:
                    c3:d2:9e:9f:9c:02:d8:f9:4c:7f:8c:8f:12:d3:dd:
                    87:c6:bd:7b:6c:9a:b1:d9:d5:62:d2:49:a1:bd:bd:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DF:D7:90:E0:85:DF:8F:6A:12:52:4F:74:3A:70:7B:D4:AE:80:6B
            X509v3 Authority Key Identifier:
                keyid:CA:E3:DB:8A:DE:E7:A1:6A:B6:CA:53:7F:23:47:B0:20:5B:DF:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuPbit7noWq2ylN_I0ewIFvfT3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA6FF/D281E7302E2911EFBAED6A1AC4F9AE02/yuPbit7noWq2ylN_I0ewIFvfT3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:0c:57:68:f0:95:8f:5c:d6:ea:92:39:62:f4:7f:2a:9a:
         d4:d2:11:9e:e5:de:8d:63:ca:27:d0:bb:e5:d2:83:0c:92:eb:
         2c:a6:83:17:1a:ba:98:6f:fb:fc:39:a9:2c:58:43:bb:68:a3:
         18:3b:e9:96:65:28:81:b1:2b:27:52:14:be:8f:29:d6:39:c6:
         39:6b:a9:4d:e0:20:1e:7b:20:b9:68:b6:84:0a:c0:8d:50:34:
         a1:2a:f0:cb:b0:e2:94:53:98:dc:fa:8d:e9:04:21:52:dc:da:
         fb:e9:0f:b7:db:b8:73:87:92:d7:8d:36:87:6d:44:3d:94:f6:
         81:3f:27:da:57:52:12:b1:73:03:f9:8b:90:2a:29:68:e5:20:
         54:87:9f:0e:94:30:66:c3:72:97:30:58:4c:f5:e0:bf:37:b5:
         47:7c:e9:d3:51:b6:7f:d0:73:0d:1c:9e:05:4c:3e:95:25:79:
         70:5e:53:bc:f4:fd:cd:f4:a1:cb:39:da:84:74:29:8a:d3:b1:
         97:d8:fa:33:5e:75:b7:f3:23:05:87:0b:80:5e:dc:fc:dc:bc:
         34:a2:70:84:01:05:c6:cd:64:2c:ef:67:f6:76:f4:cc:22:99:
         33:f2:e2:b9:37:41:3e:7d:dc:0b:5c:5d:a0:a8:72:a4:51:d3:
         9d:0f:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:12:37 2026 by rpki-client