Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File:                     ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier:          e44kWUHyKRNwjevp0x7OsC3AHEVJNk4+wRkmUcuPDZA=
Subject key identifier:   00:60:9B:B1:6F:BA:58:C8:19:D1:D3:5F:92:A6:C6:AC:6D:1F:A5:71
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer:       /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial:       35B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number:          359D
Signing time:             Sun 04 Oct 2026 14:44:11 +0000
Manifest this update:     Sun 04 Oct 2026 14:44:10 +0000
Manifest next update:     Sun 11 Oct 2026 14:44:10 +0000
Files and hashes:         1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: lGuGR8TMZ/onWOiK15hy0+EKe53+t33GerxShv62v2o=)
                          2: 929D25381D1711F1981A78170E3D8C67.roa (hash: pkxruOivazr+5qgFvACHs2jVuJZHgefEb08Dy4uHw4w=)
                          3: 67AAC7161D1411F1B0E2BAD80C3D8C67.roa (hash: RfZh/c3Oxj+j3RxxpaEAH33yqsib4ZdkZSMoIm68Qac=)
                          4: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: jzO63g5AOxElScYYdVv06DFzK3TIOCqanZ+0EjTukYM=)
                          5: 4821776AD9A211F092913C6268D3641D.roa (hash: LOgkEDPU6qR9vCf6pUezUGPbjzvlJI1psdU+DoBEifc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
                          rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13747 (0x35b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
        Validity
            Not Before: Oct  4 14:44:10 2026 GMT
            Not After : Oct 11 14:44:10 2026 GMT
        Subject: CN=6ac2663a-878c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:48:49:a4:68:f1:03:4a:e1:db:63:f6:37:
                    24:b7:86:32:a0:5e:ec:fb:d8:04:e2:ce:90:7e:85:
                    a0:8a:89:29:e5:ef:8e:e1:95:c9:0b:33:45:2c:a0:
                    2e:77:d7:98:10:e1:21:96:1a:7b:04:e2:ca:c6:95:
                    ce:e1:81:47:ce:8d:35:ff:67:35:50:32:e0:54:3f:
                    60:eb:c8:9a:13:bf:71:0c:81:6d:98:a1:29:76:89:
                    f5:eb:3e:fc:ae:a3:f1:4c:99:14:00:47:6c:4d:b0:
                    40:df:05:4b:b7:6f:5e:1c:75:68:ec:28:e2:81:1f:
                    97:3e:11:25:0e:ea:04:e9:13:5d:9f:b4:b2:14:ae:
                    94:ba:13:e4:01:55:28:96:b9:64:ba:6b:85:64:c6:
                    2a:86:12:e7:63:37:e7:a5:88:97:c1:14:bf:0b:3b:
                    f1:11:f4:c7:d5:ae:28:e0:8f:34:ef:63:05:58:a8:
                    8d:f2:0f:f5:2e:58:1a:86:b0:b7:71:86:f7:b5:28:
                    6b:1d:3b:ee:9f:d0:f5:24:38:79:aa:8d:7b:3b:f3:
                    06:4c:62:00:de:3f:0c:d6:b5:e8:d4:72:b4:d0:07:
                    bf:5f:56:26:ba:9b:14:3f:90:5b:83:89:2e:01:8d:
                    dd:3b:67:c8:06:32:e3:f9:79:7f:24:f0:1b:3d:c8:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:60:9B:B1:6F:BA:58:C8:19:D1:D3:5F:92:A6:C6:AC:6D:1F:A5:71
            X509v3 Authority Key Identifier:
                keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:21:92:92:b0:06:77:5b:76:48:fd:b1:e1:d4:1b:0c:65:77:
         2e:60:e5:e8:f5:21:c5:9c:99:35:76:4e:fb:44:f6:03:3a:6c:
         6f:c0:b3:ad:90:9f:67:92:3f:a6:95:30:a7:3d:f4:05:20:73:
         3d:6c:fd:01:ce:9d:5d:b1:a0:eb:57:9f:7f:8b:ab:39:0a:08:
         10:5e:1c:02:cb:0a:66:6d:2c:b3:65:af:67:5f:89:47:75:10:
         65:ff:8e:45:0f:6e:de:55:68:ab:82:f8:30:c0:59:47:06:7c:
         2e:b9:73:72:80:e8:f2:df:ab:00:15:7c:4b:72:28:65:d3:2b:
         ca:aa:50:eb:35:cb:40:cc:b1:cf:86:35:bc:9f:23:05:d5:45:
         7c:b5:25:4a:20:98:7a:01:77:82:f1:30:74:d7:c5:8c:db:fb:
         71:ea:83:fb:6c:27:41:5f:f8:d6:f3:79:ea:16:49:dc:7d:da:
         0d:16:f2:fa:f3:fb:a8:9f:de:26:83:04:53:d6:3d:08:88:b4:
         4e:c0:1f:39:3f:13:59:2f:b1:a1:da:b9:7e:23:da:22:36:ed:
         dd:6f:2b:a3:93:cf:4b:54:79:6b:6f:ec:d2:be:dd:e0:68:35:
         d6:ca:29:22:79:6f:8c:eb:54:e6:45:f2:ea:33:73:89:c8:df:
         74:c5:5b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:06:50 2026 by rpki-client