Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
File:                     yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft (raw, json)
Hash identifier:          f3oYyGd2sDAP3/5oZ/p8ZxR2YNC6UpBfwaD4bCfYB8Q=
Subject key identifier:   AC:10:AE:3C:1A:9E:1B:F9:7C:E2:18:D0:61:13:07:2B:D9:85:86:B3
Authority key identifier: CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF
Certificate issuer:       /CN=A9153675/serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
Certificate serial:       01CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
Manifest number:          01C5
Signing time:             Mon 05 Oct 2026 04:09:27 +0000
Manifest this update:     Mon 05 Oct 2026 04:09:26 +0000
Manifest next update:     Mon 12 Oct 2026 04:09:26 +0000
Files and hashes:         1: yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl (hash: xpdFFd87hN0BhkoijeZkCQHMOi7DCytv2gRLw9/ONFQ=)
                          2: F8636CC60F9D11EFA1E14343C4F9AE02.roa (hash: /3nOzfVBV3G4XKfktsyW3g/oGq96lm0UNw7VtIzketI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl
                          rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153675, serialNumber=CA24583106FB54984C7815895E3E19EDF79C98BF
        Validity
            Not Before: Oct  5 04:09:26 2026 GMT
            Not After : Oct 12 04:09:26 2026 GMT
        Subject: CN=6ac322f7-7ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:24:76:90:47:e3:19:dd:25:c7:16:f5:5f:
                    dc:ff:d1:f0:55:98:83:cb:f5:a0:73:7e:62:f2:5e:
                    b8:38:9b:af:44:ce:3a:86:8c:95:f2:fe:bc:13:6b:
                    20:dc:b8:e3:73:01:b6:6e:37:e6:93:5a:9f:02:89:
                    1c:cb:25:6c:a0:2b:8a:91:aa:63:32:2b:21:f1:8c:
                    9c:fb:e1:7c:a7:dd:ae:39:d0:73:6b:79:e0:8d:75:
                    07:b3:b9:87:31:4c:c0:c8:8c:13:b0:6a:8c:f0:57:
                    3a:59:1a:f5:1d:b1:dd:52:fe:cc:07:64:b0:85:93:
                    fc:b3:e9:3d:d1:e1:98:2e:48:a9:71:8e:21:60:16:
                    fa:c4:ca:c1:78:a7:3b:59:fd:8f:df:95:2e:a8:b8:
                    41:db:26:e3:2b:ec:2a:8b:d7:13:25:06:ed:b5:65:
                    8f:fd:3f:0b:7b:f1:4a:2b:23:29:27:34:68:5b:ee:
                    8e:0e:74:cb:6f:4c:d9:df:7b:dc:24:9d:4a:41:82:
                    61:ef:80:d8:4d:5a:6e:f1:19:cb:b7:97:b0:e4:d5:
                    50:2e:5c:5b:2c:e8:77:0c:22:75:73:4c:97:da:82:
                    41:16:8d:e2:42:b7:06:98:ed:4a:1f:13:ac:04:22:
                    5c:e2:49:c8:2a:71:98:6a:25:d0:be:a9:0d:9d:54:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:AE:3C:1A:9E:1B:F9:7C:E2:18:D0:61:13:07:2B:D9:85:86:B3
            X509v3 Authority Key Identifier:
                keyid:CA:24:58:31:06:FB:54:98:4C:78:15:89:5E:3E:19:ED:F7:9C:98:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiRYMQb7VJhMeBWJXj4Z7fecmL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153675/915A28660EB311EF89CAD12CC4F9AE02/yiRYMQb7VJhMeBWJXj4Z7fecmL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:51:27:b3:1f:d4:8a:ee:de:02:60:42:69:8a:43:a4:25:ac:
         52:1a:a3:e1:62:a1:3e:a9:75:27:29:a8:2f:95:4c:5a:c4:b1:
         de:28:04:cb:1e:e9:9e:2e:f2:ef:00:7f:64:3b:c5:a7:cb:5e:
         20:71:8b:15:1b:c3:8a:95:65:e5:cd:85:25:5a:da:c4:52:95:
         f1:72:05:fe:8d:1f:96:34:4e:a2:a2:93:67:b9:a3:03:14:64:
         f3:2e:0c:e0:b7:5f:5b:93:08:e7:28:67:5d:9b:d4:1a:46:64:
         ac:24:be:a4:e9:5b:47:09:03:8e:fe:c5:e7:93:2c:5f:23:a9:
         60:ec:94:fd:50:c7:3b:d4:6e:f4:49:00:88:16:42:29:a1:cb:
         ad:28:ff:50:19:9d:81:40:86:59:6e:4a:73:da:70:29:7c:a8:
         0b:44:d3:69:53:a0:74:c2:0c:3c:50:f6:0d:97:9c:dc:d0:95:
         44:74:f9:62:92:4e:b6:70:85:5c:1e:d8:38:83:68:63:0f:e3:
         3f:71:f4:41:25:4e:ef:5f:c8:04:ef:11:27:06:c0:f6:72:83:
         76:87:69:d7:b8:e4:88:23:e8:b9:f6:b3:8e:69:07:2d:15:3a:
         a8:f1:2c:bd:77:41:a4:a7:a7:e3:dc:17:f9:11:2d:63:fe:a3:
         1c:7d:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:15:19 2026 by rpki-client