Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
File:                     Yr76HCON-N6XLqX-GAl7ES7wR3s.mft (raw, json)
Hash identifier:          hKOmGnIO2VYJxeNWgIOKR43Sh7mkINhOf34Iocrocmg=
Subject key identifier:   1D:85:47:AF:AD:A6:9D:8E:E5:EA:05:24:C8:D4:59:78:79:02:36:86
Authority key identifier: 62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B
Certificate issuer:       /CN=A91307F0/serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
Certificate serial:       02B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
Manifest number:          02AC
Signing time:             Sun 25 Oct 2026 01:47:22 +0000
Manifest this update:     Sun 25 Oct 2026 01:47:21 +0000
Manifest next update:     Sun 01 Nov 2026 01:47:21 +0000
Files and hashes:         1: Yr76HCON-N6XLqX-GAl7ES7wR3s.crl (hash: oF009KivlJQ3T4jFJmfisu3gRIfSBQQ8Amr40mnJgQI=)
                          2: E5817A58B8BE11ED83994B4AC4F9AE02.roa (hash: ZJ1JXD8OMZ1/bFwQ4CUwNfMJD2mA1nTwWCd7m4pPBcY=)
                          3: E4E7AE6EB8BE11ED83994B4AC4F9AE02.roa (hash: IQ7wQrkp6KFdnuD/CeQ1UB+HAtSyDPflLHSW+K88QUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl
                          rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 01:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91307F0, serialNumber=62BEFA1C238DF8DE972EA5FE18097B112EF0477B
        Validity
            Not Before: Oct 25 01:47:21 2026 GMT
            Not After : Nov  1 01:47:21 2026 GMT
        Subject: CN=6add5faa-15ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:8e:c2:8c:62:2d:c2:47:50:05:f2:ec:65:
                    0d:97:5d:60:11:5e:b2:20:4e:07:29:6e:03:58:8f:
                    a2:4a:38:e8:05:bd:7a:66:8a:bf:85:9f:bf:08:fd:
                    f7:af:5a:45:24:26:a0:79:76:f9:c6:24:da:1d:f1:
                    2e:6c:98:1b:2f:ae:df:11:96:93:36:02:71:81:27:
                    3f:83:b1:af:f7:c6:d3:f3:8b:4f:66:36:34:75:ac:
                    55:ad:77:b0:7e:b8:ca:61:ae:0e:df:a4:e1:ac:ce:
                    30:25:f9:47:71:e7:ad:51:67:c2:f4:3b:b3:d4:a8:
                    10:7e:19:de:5f:61:7e:db:f6:bf:ca:9a:14:d1:80:
                    5e:01:9e:f8:3a:ed:70:ec:6c:ae:dd:7e:13:97:f6:
                    53:09:b0:cb:09:28:c5:2a:26:05:3e:83:47:53:fc:
                    fe:41:62:9a:96:13:60:44:04:23:49:37:c9:e6:28:
                    2f:05:4e:65:bf:ce:7a:fb:d6:aa:00:73:fe:2a:9a:
                    ab:b1:7c:86:c9:30:f6:cb:68:a7:e3:f7:b5:d3:f1:
                    a7:46:e9:c0:f2:d9:55:8c:a1:ef:36:3a:da:98:e9:
                    3b:45:44:f4:cd:b1:dd:65:c2:68:7f:7b:4d:ac:fb:
                    8c:cb:ad:3a:b8:80:ef:7e:07:cb:80:77:68:bb:49:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:47:AF:AD:A6:9D:8E:E5:EA:05:24:C8:D4:59:78:79:02:36:86
            X509v3 Authority Key Identifier:
                keyid:62:BE:FA:1C:23:8D:F8:DE:97:2E:A5:FE:18:09:7B:11:2E:F0:47:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yr76HCON-N6XLqX-GAl7ES7wR3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91307F0/60D0C9FAB8A811ED9FA47843C4F9AE02/Yr76HCON-N6XLqX-GAl7ES7wR3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:35:8a:e5:44:4a:5b:96:7a:73:17:06:46:9a:08:7e:70:
         e3:56:55:71:08:b2:ae:96:dd:56:dd:ba:d5:03:67:45:5f:81:
         9f:b0:dd:19:f3:2d:fa:33:0d:3a:44:82:37:a7:30:57:e5:5c:
         76:d9:aa:a7:a0:38:31:81:c2:20:5f:99:76:2e:82:13:a3:21:
         aa:4b:7a:00:bc:43:f8:c7:46:70:da:74:53:4d:46:08:7c:23:
         67:0a:80:89:2c:b2:05:6a:ba:8e:ec:17:c8:99:40:29:51:63:
         88:a9:c0:83:bf:af:d9:3a:9b:aa:6f:ad:62:21:25:a8:7a:00:
         79:5d:57:ae:d0:0d:a9:0c:43:c9:c8:28:6e:85:0e:e6:9b:52:
         65:86:e0:6c:f9:d3:0d:77:d2:b9:9d:ce:1d:c4:6b:1d:d4:dd:
         79:a7:f7:5a:9b:e7:82:7d:e8:b4:8b:87:51:2c:97:96:cb:61:
         de:df:f2:01:29:95:b3:8c:28:f7:dc:97:e1:08:2b:69:9a:ef:
         c0:36:30:8d:c5:8e:8c:2b:47:b4:39:00:a4:3e:7b:68:84:bf:
         4d:0f:41:57:5e:13:2f:60:46:bd:3e:2c:71:0a:65:00:de:76:
         dc:5c:06:2e:9b:25:d3:7c:38:2a:56:93:56:07:a4:c2:56:c0:
         b0:e1:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:36:28 2026 by rpki-client