Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          dY6DhC2+aDbTOwsjVkXSs6j447NtBYO1y1bEzR7IinM=
Subject key identifier:   86:65:42:EC:54:16:51:1A:BF:3A:0F:48:44:4F:7D:C5:D7:DD:57:FA
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       073C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          067A
Signing time:             Fri 30 Oct 2026 22:46:33 +0000
Manifest this update:     Fri 30 Oct 2026 22:46:33 +0000
Manifest next update:     Fri 06 Nov 2026 22:46:33 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: twAJ7UoyLYe/lTOtBt4+RuVu+P9z9UzezbUkuTkFPD0=)
                          2: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: QfgNIRVotvzOl/OtkhG76+nsJvG/v20On9wM86renGQ=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: 76lRYOMfjkUMm+Un1zeocycozFiB0INpBONXd9P7hPY=)
                          4: 3BE907D6178411EC83735974C4F9AE02.roa (hash: LapSxfvv7t72TR7bD/JuXkQOXoQJku5oYR+x3zF+4Gk=)
                          5: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: qz8JxNgXuDID5Fu8pAdCqUZ2ItHDzr2G2xNt310Kyxo=)
                          6: 0BE2C2AE36D111F1B4901F67AE833773.roa (hash: /OgpFRh5NEAU3z4wwECmDgcOT565YH6iPJyK+iNYSGM=)
                          7: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: +DF99Ubi5p18DFX3fy9zXroAvqR+SzPVZSDJ6eGx684=)
                          8: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: eNh6GSQojSwJZWNPuyTqjhXY4Z0HAmSbKzGnoY8nD7A=)
                          9: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: lHkuWmke07Q2mFWhxNC8gJVF88cEoSJsFIhxbtoDZqI=)
                          10: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: yDyFhacoRHxiPGknJ0mgO/37kULvXy/vpyy7xuwfubc=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: w37EL0tDFGT/iQwVZqrRmtYEMaPOpCjLT7Den89y7yk=)
                          12: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: E2OVt2t2RwL7eW2IIag4jKtOfPTzQfuNebzivsrFSS4=)
                          13: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: CQrq+NiLvVYKAgaoEAHrvb21lZZoBmbhEQ+h41OOoGc=)
                          14: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: Y/kcRh9cdh4fRkGWFjsevbts3BzCqCsOpihXsbd47mU=)
                          15: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: was++B3SwvJo/jYlrUZOE1nul8ZmbRH0XpfbBmWRHUM=)
                          16: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: +IL/6i7R12qOZpauH7RSFncfC8CSU6slGsg4NRFUeQk=)
                          17: DB208FD4175911EC87322F85C4F9AE02.roa (hash: Aiyh5u8GDVLoN3Fgru0NzcB9kxObiOTjfl6VZSmSgGQ=)
                          18: 3B398B8A178411EC83735974C4F9AE02.roa (hash: VpETKfJnCy8IjWBOd18JxClx6aJBFefNpsEPuTPhgK8=)
                          19: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: P3doc8TT7mhfzcSps7B9O0W5pUgwSQGVyt8vLzQ3gnQ=)
                          20: DA504F0E175911EC87322F85C4F9AE02.roa (hash: fBWTjHPBb9W8ORcqqmeo2+AlFAMHhNrE1/hdXfgEV54=)
                          21: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: BEIgK3O7SaFfmvnXuudxvNqnEJFGtTYbWVAvUD/sJ80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Nov 2026 22:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1852 (0x73c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Oct 30 22:46:33 2026 GMT
            Not After : Nov  6 22:46:33 2026 GMT
        Subject: CN=6ae51e49-0c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:54:6d:a0:ef:33:ad:49:42:e4:21:95:91:
                    02:f2:d0:83:55:1b:f0:88:03:93:65:b6:de:df:59:
                    ff:de:a8:09:ae:c0:f4:12:57:81:b2:ed:d9:f4:af:
                    40:90:91:e2:6b:a2:d7:5e:79:e2:92:23:4a:f3:f1:
                    8a:e8:6b:05:89:14:f2:39:2d:1a:3e:39:91:0a:e9:
                    43:b2:c2:bb:65:ed:2d:0f:9c:d8:d4:b2:20:44:89:
                    fc:59:43:17:ee:7a:0f:7b:5e:ff:3a:2e:16:38:13:
                    e1:13:10:90:43:cd:bb:d4:13:4c:e3:af:d2:67:24:
                    cf:b9:ba:85:fe:6e:66:16:66:4b:d1:b2:1d:62:43:
                    56:13:cd:40:7f:ae:62:ba:aa:e9:9d:5a:b6:fa:13:
                    ba:9d:22:ec:83:a3:9d:b4:a5:a4:70:96:04:10:42:
                    14:14:c4:26:ba:1a:df:b5:3a:94:46:99:8f:cb:b2:
                    f9:db:d6:f2:94:0a:08:c1:c5:c3:82:40:f3:a1:3d:
                    35:7d:18:42:5d:68:8e:4e:02:a4:8f:a6:a5:6d:a2:
                    9a:82:af:8c:61:6c:1a:a6:84:23:21:fc:fd:43:87:
                    d1:1c:6f:47:1a:f0:da:e6:71:08:4f:51:09:12:2b:
                    1d:ac:4e:ff:ee:fa:1e:64:92:57:4b:3e:90:1a:79:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:65:42:EC:54:16:51:1A:BF:3A:0F:48:44:4F:7D:C5:D7:DD:57:FA
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:05:35:7c:a5:35:ed:3b:6d:1e:fb:6b:c8:8c:89:5f:0a:18:
         de:67:f1:51:54:1c:3f:e6:83:fc:50:ab:b8:8f:51:60:41:37:
         55:42:53:bc:a9:27:db:91:ef:b0:12:2c:7d:2e:00:d6:2e:9c:
         83:62:22:5e:d9:a7:b6:0d:0e:56:29:c1:c2:ff:25:c6:85:fc:
         d4:8c:d9:54:27:84:cc:1a:19:9b:cf:56:91:b3:48:80:cb:e6:
         a7:89:7f:19:f9:fb:de:23:46:b3:e8:0a:ad:59:a4:41:75:cd:
         80:11:de:3c:b9:97:bc:0d:6e:7a:f0:2a:99:72:ff:17:ed:88:
         a9:65:44:5d:e6:eb:38:f1:7b:c1:f1:75:89:ef:f9:15:01:da:
         0f:28:6f:af:0e:40:70:71:55:ac:31:13:88:3e:e8:c7:49:72:
         d2:ec:92:7d:09:df:9e:a3:8a:8a:b0:98:5b:6e:f3:56:be:b7:
         41:40:6f:35:51:d9:ac:a5:35:45:ac:dc:97:5e:3e:80:39:59:
         83:32:10:df:86:91:22:8a:e1:15:cc:e1:96:71:a4:12:c0:1f:
         6d:b1:fc:a3:7b:20:de:96:7b:bd:c7:05:03:0f:96:2d:01:a4:
         5b:4c:31:e7:06:83:18:e7:58:d5:67:42:ab:16:02:c0:d7:44:
         80:d8:1a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:20:53 2026 by rpki-client