Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          A9B74a35E4TTJP3sWHSQBGm8RpQUZx3zrY4SN1KbML0=
Subject key identifier:   FF:DE:1F:8D:0E:0A:BE:1D:63:0B:FF:A9:24:9F:15:0A:04:77:09:15
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          0104
Signing time:             Tue 27 Oct 2026 06:28:49 +0000
Manifest this update:     Tue 27 Oct 2026 06:28:48 +0000
Manifest next update:     Tue 03 Nov 2026 06:28:48 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: yD3PIxIdx9OqZ5zqJabB1c4AGh3SwtIylKeLqSxtwIs=)
                          2: E4A2EB14869F11F1A80CEA8D6FA30FBC.roa (hash: wlceanp773MrpLK0sTWpr1n6WrJhb6I7XoRfHGDFg10=)
                          3: 9F9EF74086A111F18D87851971A30FBC.roa (hash: qeRptk8ohukeooW32zLh4Y06AUp3e5YLRKi35Dg+s9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 06:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Oct 27 06:28:48 2026 GMT
            Not After : Nov  3 06:28:48 2026 GMT
        Subject: CN=6ae044a1-bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3e:e5:49:10:1d:f7:07:f2:fa:a6:9b:22:ca:
                    07:be:e3:14:93:ad:92:56:d1:cc:ae:46:0f:f2:c1:
                    4a:de:fa:3a:1c:2c:82:b3:e8:d6:c9:73:44:1e:80:
                    ef:8d:6b:97:1c:51:18:48:c6:80:db:64:7a:d5:de:
                    a8:de:4b:fa:b6:1b:7c:14:7c:72:08:ac:32:64:94:
                    a7:69:53:7e:61:87:e0:cb:46:bd:45:d7:0c:72:e4:
                    42:8f:e6:9b:71:68:12:7d:60:73:93:00:58:49:59:
                    d3:e4:4a:99:a5:91:53:ec:2a:5e:bb:ca:20:ac:b5:
                    de:78:5b:3a:e1:ec:37:71:4e:22:43:87:dd:fe:97:
                    b9:ef:aa:95:b9:52:38:0b:bf:b3:70:ee:5d:07:3f:
                    13:9e:48:d0:95:88:c7:88:87:8a:0a:eb:7e:0f:5d:
                    09:2a:64:89:b3:31:b1:7a:31:84:49:20:d3:85:28:
                    7d:c1:83:4f:a6:06:80:68:24:bd:70:cb:40:00:c7:
                    a0:44:ff:59:10:d6:31:f8:8d:a7:82:cc:f9:c9:c3:
                    af:cc:9a:06:e5:f9:49:d9:23:2c:f7:71:be:bc:fb:
                    b9:88:b5:23:be:9f:6e:b4:ac:22:94:b1:b3:10:f2:
                    59:58:34:f9:8c:48:76:78:67:4a:ba:21:1b:4b:55:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DE:1F:8D:0E:0A:BE:1D:63:0B:FF:A9:24:9F:15:0A:04:77:09:15
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:24:96:26:54:08:00:a2:be:d2:f8:21:8e:62:c4:69:0d:76:
         64:47:8f:ac:dc:6c:0c:26:97:9c:a9:8f:4c:12:74:f0:da:b3:
         02:55:bc:b5:5f:82:d1:0d:d0:7f:89:a1:91:31:b8:8e:26:9a:
         de:18:25:69:1f:06:06:09:b6:42:c5:9a:1f:2d:9e:2c:7f:97:
         17:aa:ff:6f:9e:c4:c6:65:97:a5:de:5a:87:bc:7d:37:f2:fd:
         d7:4b:58:2e:1e:bd:11:1e:e8:44:8f:c8:98:a6:9b:bd:c1:41:
         3f:18:cc:b7:df:71:00:77:f9:8c:7f:ee:ee:a9:38:30:8f:bb:
         67:77:5e:2a:35:cb:bb:6f:f9:13:94:1c:53:d4:f2:12:85:0d:
         8a:e5:06:58:c9:b3:09:73:db:59:ca:34:57:36:46:63:fb:65:
         fa:46:8a:cd:bb:60:22:ad:5f:27:ae:5e:c4:f4:ea:88:b9:98:
         c5:7c:de:2d:54:82:b9:ac:69:3f:00:e8:9d:4e:38:5c:94:bb:
         28:39:e9:64:b9:04:ea:4a:e8:13:7e:7d:4f:6d:e3:43:37:89:
         34:66:c8:8f:44:9e:6a:d2:78:35:c4:d1:6d:ca:ed:f8:17:50:
         37:42:c8:93:4e:15:ec:03:df:93:19:24:1d:ab:30:f6:cb:0c:
         4a:79:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:05:26 2026 by rpki-client