Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
File:                     _YASv-mRKe-ci7ekYDIUQvbSZWI.mft (raw, json)
Hash identifier:          4ueHRfXLKRNrr3WiqePOyzhxWWK30F1ArGlFffYA/Ek=
Subject key identifier:   FC:F8:83:F0:42:0A:02:77:C7:52:6E:2F:F0:5F:D9:9E:8F:03:C2:18
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       0182
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
Manifest number:          0181
Signing time:             Thu 15 Oct 2026 05:33:46 +0000
Manifest this update:     Thu 15 Oct 2026 05:33:46 +0000
Manifest next update:     Thu 22 Oct 2026 05:33:46 +0000
Files and hashes:         1: _YASv-mRKe-ci7ekYDIUQvbSZWI.crl (hash: hYD1JVu8f0b2Eb8VdZrHDNWOnA2dQzcQxY1c0molbhA=)
                          2: 1C247386C63411F18D09886A5211F970.roa (hash: M3jFNc5AL7aOL1gnvOVGMM8mcs2Z7pXUWJsdP4ebfLU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 05:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Oct 15 05:33:46 2026 GMT
            Not After : Oct 22 05:33:46 2026 GMT
        Subject: CN=6ad065ba-88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:c4:d2:02:95:ae:ae:cd:0b:f4:0f:d0:44:
                    d1:07:13:36:ad:7b:b8:29:37:fe:dd:c8:27:44:fd:
                    c8:9f:11:13:9e:4b:01:c5:b0:fe:f7:58:49:af:8a:
                    90:6f:9f:6a:66:43:d8:09:61:9d:d9:78:44:f2:e1:
                    69:3d:e3:e8:89:90:8c:06:f1:b7:56:4c:ea:cc:cf:
                    4c:ec:26:7a:c0:8a:d7:55:aa:54:9c:25:bd:89:d5:
                    72:bf:d7:60:49:8d:b2:9e:95:10:fe:57:88:b8:d4:
                    a7:0c:9d:ac:d6:63:43:22:f8:77:5b:65:38:09:10:
                    05:d2:59:61:9d:4a:c9:ec:d8:33:02:95:60:f7:39:
                    6e:b8:3e:b3:f2:d6:f4:6f:33:91:c1:2f:63:4d:94:
                    0f:96:fc:18:de:91:a3:c8:ad:09:3a:80:34:c5:13:
                    40:b8:e8:de:a9:68:a9:e0:cf:ea:ce:d4:bb:9b:44:
                    f8:7d:77:aa:4c:b4:fe:01:c0:0a:3a:f7:38:cb:91:
                    75:9e:66:6c:47:c9:b4:f2:3f:f3:5a:93:96:ae:20:
                    fc:44:17:94:3e:e7:a4:73:50:5b:65:e7:d2:b7:95:
                    4f:53:c1:a3:ad:88:bc:9b:e3:dd:c8:7a:3d:90:61:
                    ea:0d:38:0e:ac:42:1f:a9:7e:78:f0:ad:85:af:27:
                    91:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:83:F0:42:0A:02:77:C7:52:6E:2F:F0:5F:D9:9E:8F:03:C2:18
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:65:ee:cf:c6:3f:92:c7:a5:92:0a:d9:5e:1f:ba:66:1b:
         88:f6:06:2b:2b:69:97:45:47:e0:65:67:50:05:60:f0:b2:d9:
         2f:32:59:05:5c:65:6a:1c:0e:61:69:dc:72:22:a9:7c:d4:1b:
         9f:bd:03:a5:ad:dc:5f:47:cf:f7:fa:79:37:ce:51:93:95:9b:
         1d:9c:d5:a3:73:97:8a:5d:9d:b6:bd:ec:0f:40:01:70:56:5e:
         50:50:30:3e:da:15:85:ee:ab:b3:75:7f:15:1a:25:f1:27:67:
         34:ba:39:63:53:b6:85:5f:21:14:00:8c:74:58:d7:7b:8f:b9:
         c0:59:6d:7b:f3:af:67:05:44:b3:02:6c:bb:2e:00:b3:a5:80:
         d6:f6:8a:3d:2b:29:b8:b5:0c:a1:30:1d:c9:3e:47:f4:88:9c:
         9f:9c:dc:1f:3c:9d:48:fe:82:bb:f8:f9:b2:70:52:bd:da:62:
         9d:86:30:60:76:60:5d:f5:3b:34:b6:09:4c:8f:44:dd:0a:5a:
         9a:e5:7e:c3:43:9d:1f:14:52:65:53:82:2c:98:4d:1d:80:f3:
         42:2a:14:5b:02:50:45:d6:74:4d:e2:df:b4:03:9a:01:a7:c1:
         f6:79:4e:ac:f6:ab:70:4e:ce:e6:49:bc:a3:a7:4c:c6:b5:36:
         ac:22:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:14 2026 by rpki-client