Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
File:                     ypDU0hJfAza1OY7gmXcpby5AkrQ.mft (raw, json)
Hash identifier:          oltyu7gWbOMaPmQQ4GLHbUqARO29EU7bxX5SPlFzWEM=
Subject key identifier:   82:5E:E8:35:4E:4E:15:33:64:54:06:65:2A:94:6C:90:E0:70:66:DA
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Certificate issuer:       /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial:       0398
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
Manifest number:          036C
Signing time:             Mon 07 Sep 2026 00:39:02 +0000
Manifest this update:     Mon 07 Sep 2026 00:39:01 +0000
Manifest next update:     Mon 14 Sep 2026 00:39:01 +0000
Files and hashes:         1: ypDU0hJfAza1OY7gmXcpby5AkrQ.crl (hash: hmQc1GsOMrOZ3opcpzaLXqnj+uNHdfwVU/Pp7xwmIYQ=)
                          2: 69F7328030A611F0BBA4642EC4F9AE02.roa (hash: PPilQKcKXmCzfDra94ptz+UOBe/ruKL5vBBrgys75yQ=)
                          3: 61A03234B57C11F0B3EF6D44C4F9AE02.roa (hash: U6gY9KKT7NSCpx8jpV/iJKW5bvGforRTQeZvJLFkBWs=)
                          4: 69046BD0ECFE11F0B05C9076386F56BC.roa (hash: YCe2AE1AYEPbcU1s9LwUlVk97WjIwXee65C9XOQSVi0=)
                          5: 35AB985C68B511F18E116D7B7F47A888.roa (hash: zJzm+IxndwR1rSvg7Wy91Pwrmnj3T3uEe3l4l9/HMCw=)
                          6: 39FCB4EC4F4E11EDB169BF33C4F9AE02.roa (hash: UazZSGRsaobkFh+uwdDtJ065Ep6bEbys8yH2m9dsJpw=)
                          7: 4D608CC0800211EF81167A23C4F9AE02.roa (hash: ayI2v9zEaoadhkrRa+ZcLsyQwGLPommiSdSXuXbqNDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
                          rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 00:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91580D2, serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
        Validity
            Not Before: Sep  7 00:39:01 2026 GMT
            Not After : Sep 14 00:39:01 2026 GMT
        Subject: CN=6a9e07a6-e878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:3f:0a:b0:7b:65:af:e2:bb:49:75:73:6c:
                    24:83:9f:66:48:c1:c1:93:9c:96:ad:91:ed:62:fc:
                    e7:5e:cb:fe:26:60:dd:95:a9:80:3c:7e:0d:90:71:
                    27:2a:41:52:42:f7:82:16:82:a0:4a:dc:d4:2d:dc:
                    c7:12:3d:74:7b:66:f3:6b:39:1b:d9:ed:47:b1:97:
                    cb:fc:3f:40:1a:fe:28:57:81:39:ba:8c:f9:8d:17:
                    25:5d:68:eb:d5:c3:2a:ce:d2:2c:72:4a:39:8d:5d:
                    c4:8e:85:b5:56:bd:28:87:8f:02:29:0f:29:c7:cf:
                    6d:63:81:2d:91:40:d5:9a:d9:f9:8f:20:9a:6b:c3:
                    b7:43:9d:22:79:f5:64:03:b3:fc:6c:77:a5:ba:ed:
                    c4:10:dd:66:16:23:9e:28:de:28:57:da:75:f6:f3:
                    b7:bd:78:d3:d7:b9:19:d3:bc:99:ef:b9:36:bb:d2:
                    04:4d:4d:3d:b1:6e:88:44:dd:1e:e5:8b:15:b2:b3:
                    51:25:6e:6a:46:5b:39:c9:a8:e3:37:63:97:5b:bb:
                    bd:2e:80:27:9a:d3:36:af:79:ee:06:b2:1e:cd:f4:
                    26:3b:02:78:05:51:ed:18:d0:af:46:11:87:11:10:
                    e0:1e:f6:51:49:e7:15:f7:06:64:00:44:60:cf:5b:
                    cd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:E8:35:4E:4E:15:33:64:54:06:65:2A:94:6C:90:E0:70:66:DA
            X509v3 Authority Key Identifier:
                keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:66:10:0a:d5:ac:a4:41:65:7e:51:6e:ee:1c:b1:16:02:21:
         c0:c1:bb:0b:bd:c0:aa:cf:91:92:90:dc:74:92:a7:2a:74:58:
         59:40:e9:9c:9b:eb:27:69:a7:2f:9d:4b:16:8b:d5:a9:66:5f:
         29:18:c2:61:cd:99:bb:b2:ff:73:2a:b0:e7:69:96:2e:83:f3:
         2f:71:37:82:bf:5e:dd:40:98:0e:eb:50:04:e3:9a:1b:bb:16:
         f4:56:83:a6:8d:25:79:71:95:04:28:3b:9b:e3:06:b3:5c:ac:
         02:3c:6c:a1:ed:07:2d:87:a9:2c:ad:a7:db:b9:5c:56:8e:6c:
         3b:44:45:88:29:dd:4d:90:e1:d1:62:ab:93:27:00:c1:8f:c2:
         86:18:e7:5a:a2:3c:c6:fd:dc:26:52:af:98:ed:1d:a1:14:59:
         6b:7f:95:b3:f3:f8:2f:b3:43:47:12:a1:54:d5:66:68:f0:1c:
         6a:7a:ed:12:b8:59:a8:a5:74:e9:26:0b:9e:0d:b1:9a:2b:07:
         03:18:a8:da:09:96:bb:0a:95:fd:cc:dc:51:87:75:6a:0b:1c:
         01:24:0e:b0:11:9e:9f:29:13:5d:f3:59:11:68:8c:c2:81:89:
         31:bd:3f:3c:51:c1:e7:1c:5c:fa:2c:bb:c8:3d:86:16:68:80:
         07:ce:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:06 2026 by rpki-client