Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
File:                     yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft (raw, json)
Hash identifier:          hQjnW7dAzgCyMa3Mf062HSDaAoq4fJzJ1bhOai0hFbI=
Subject key identifier:   C4:0E:D4:1C:0F:14:71:A1:E5:FC:FC:40:4F:6E:58:FD:E7:0B:1C:09
Authority key identifier: CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1
Certificate issuer:       /CN=A913814E/serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
Certificate serial:       02F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
Manifest number:          02E7
Signing time:             Mon 19 Oct 2026 01:26:32 +0000
Manifest this update:     Mon 19 Oct 2026 01:26:31 +0000
Manifest next update:     Mon 26 Oct 2026 01:26:31 +0000
Files and hashes:         1: yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl (hash: wbQJJY84AgcrhQiNAIYjd6lF5Dw7/XgxJf9Bl8lqw1M=)
                          2: D479653E5F2911EDB481A53EC4F9AE02.roa (hash: wIOi13R4/dA4DTHTJMojbNkaTsZfB7lqp2vrNL+3Iok=)
                          3: oMdy5kzjAyoSbArhjS-NYZ-b3hM.asa (hash: n2kIMp96ssGTJd5NFtbFt9lhgVF98uEeuBTbEwn87ko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl
                          rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 01:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913814E, serialNumber=CA3803699AD5B0906C00797A3A1E9CD95B6591B1
        Validity
            Not Before: Oct 19 01:26:31 2026 GMT
            Not After : Oct 26 01:26:31 2026 GMT
        Subject: CN=6ad571c8-78f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:f5:c4:00:9b:b2:c0:ed:0c:ec:cc:d0:90:
                    40:4c:9c:70:f0:39:59:42:90:ae:b6:7e:50:56:15:
                    a8:42:85:15:df:76:50:39:93:4e:be:ed:0c:8f:af:
                    ad:af:61:f3:37:57:0b:b1:af:e8:58:d5:86:cd:79:
                    04:26:c3:75:c9:25:ee:58:7d:70:fd:fc:9a:17:57:
                    2a:aa:83:72:79:e5:6a:75:5d:42:90:1c:3c:6a:07:
                    31:42:7c:d2:41:1e:0d:d4:13:2d:99:e3:18:e3:fc:
                    ba:55:5b:bd:1c:ec:95:38:ba:af:db:69:93:43:e0:
                    59:2a:d7:7f:0d:60:73:66:8e:49:f6:f7:12:19:42:
                    0c:fb:31:0e:fe:3e:e0:12:17:ca:3c:e4:6d:38:4b:
                    17:69:da:19:dc:5e:a0:2a:de:95:d4:17:e1:2e:55:
                    7f:d8:2e:03:83:62:42:10:91:5f:b3:4b:ff:50:59:
                    de:a5:5b:8b:de:fd:ab:fb:85:c7:5d:e6:4f:cf:0f:
                    f0:2a:ee:ed:f0:ac:05:e0:63:b0:25:05:dd:b4:39:
                    6f:78:0e:d7:b6:5c:9f:c7:de:4c:37:75:47:1f:fe:
                    8f:b4:a3:5a:e7:8c:4c:fc:23:01:a8:83:5b:1b:fa:
                    50:89:e7:94:03:8c:56:68:ba:32:ac:61:32:8a:1b:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0E:D4:1C:0F:14:71:A1:E5:FC:FC:40:4F:6E:58:FD:E7:0B:1C:09
            X509v3 Authority Key Identifier:
                keyid:CA:38:03:69:9A:D5:B0:90:6C:00:79:7A:3A:1E:9C:D9:5B:65:91:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913814E/80C95AAE5F2711EDB1D5FA3DC4F9AE02/yjgDaZrVsJBsAHl6Oh6c2VtlkbE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:8b:61:b5:7d:56:96:2a:11:e2:4b:7b:8d:a0:a0:b4:9b:20:
         ad:74:05:b5:85:d3:d2:d6:d8:c1:82:14:11:1b:b0:b2:d5:6c:
         ea:d2:14:7a:a8:d9:31:80:f2:bb:db:e1:29:cb:97:78:42:77:
         f0:60:11:5d:d6:69:bc:8c:4f:d3:ca:eb:ca:68:85:c6:e2:fb:
         4a:37:e4:37:12:9f:1d:16:67:e3:1f:4f:f6:a0:3a:0c:04:5a:
         8f:29:b2:f9:64:7c:e5:d5:f8:95:76:f6:1c:bc:8a:e4:e2:6d:
         94:78:6e:86:7b:e7:de:0b:80:ae:26:b9:b7:c4:23:a4:8a:75:
         4b:7c:ae:45:87:20:1b:c1:0c:57:6f:ae:7c:21:ff:1d:46:55:
         55:36:29:b5:f7:5f:f9:6e:93:ef:5c:74:71:3a:2d:61:5e:91:
         08:07:7e:91:95:27:1e:c8:ec:c5:25:72:8e:11:89:93:70:50:
         11:94:bb:4b:cf:ef:ca:c0:b9:81:fa:be:43:5f:cb:4a:1a:ae:
         c5:4e:30:42:98:93:9e:60:3d:34:07:85:a8:28:29:f9:ad:69:
         87:60:64:88:76:f9:c6:e2:00:12:48:9d:f5:1c:87:7c:8b:e4:
         f4:6f:ab:7f:b4:d9:11:eb:16:ee:64:4d:d0:71:6f:15:b8:73:
         5b:36:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:44:33 2026 by rpki-client