Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File:                     -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier:          HmUvxdSDSMkGOKP1pk1Naa0oKWZ+5WzsgN/qct+L7yM=
Subject key identifier:   CD:3A:1D:F5:6B:6F:B1:FD:5E:6C:66:85:47:F9:2E:5B:CE:CC:C5:48
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer:       /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number:          01B5
Signing time:             Sat 17 Oct 2026 04:34:35 +0000
Manifest this update:     Sat 17 Oct 2026 04:34:34 +0000
Manifest next update:     Sat 24 Oct 2026 04:34:34 +0000
Files and hashes:         1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: Oh3rDP98QQGJlHEiPk73wG024sAAG3/D1pWhW3YyTpQ=)
                          2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: 05nFnz6le7/gfCsII6bmMAMlQ4HFGQxS/gFaNZcGMLg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
                          rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 04:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
        Validity
            Not Before: Oct 17 04:34:34 2026 GMT
            Not After : Oct 24 04:34:34 2026 GMT
        Subject: CN=6ad2fadb-d1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:b6:6e:3e:77:19:c4:2d:4a:37:46:af:ce:
                    8b:bf:67:50:23:b0:6c:29:36:8d:1a:d1:f8:64:3f:
                    18:04:34:2f:60:b3:bd:9f:a4:2a:94:ed:3d:d4:5b:
                    99:c5:88:95:85:65:e7:0c:d5:44:9c:3b:8f:9d:84:
                    24:47:20:b7:24:ef:3a:6a:e6:ea:95:72:22:05:c0:
                    e7:77:68:df:47:1f:3b:a8:60:04:64:8e:af:05:47:
                    15:14:f9:b3:66:6e:68:32:21:bc:75:c3:cd:37:d3:
                    bc:9e:7b:7a:a5:39:7f:35:a1:22:69:22:ad:4f:81:
                    15:7b:9a:ea:6d:1b:f0:87:96:00:19:12:8e:bc:09:
                    b9:df:3d:db:72:af:8b:af:0e:24:dd:f3:36:18:e9:
                    ef:d1:b9:7d:3a:5e:60:5c:04:a5:dc:f8:95:d1:59:
                    23:65:86:51:c3:21:e2:6b:c1:f0:bb:b7:7d:7f:ad:
                    11:d7:5b:c7:22:f6:e6:cc:53:43:e7:86:c3:7c:13:
                    f2:b0:97:da:4e:27:d5:91:fe:d6:57:2f:52:da:f2:
                    fc:68:bf:1a:0d:d0:29:e3:8a:b4:e6:ea:85:62:74:
                    17:aa:10:f1:22:78:16:51:4d:33:fd:85:fa:96:a0:
                    d6:23:5b:b0:ae:45:42:a0:2f:65:79:60:1a:dc:90:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3A:1D:F5:6B:6F:B1:FD:5E:6C:66:85:47:F9:2E:5B:CE:CC:C5:48
            X509v3 Authority Key Identifier:
                keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:4b:f9:a6:58:e9:94:43:e5:2c:51:bd:58:2b:14:de:52:4c:
         32:55:97:09:85:bd:6c:93:96:ab:f7:98:5e:09:20:ff:b2:10:
         b9:10:05:ce:df:e7:40:03:6f:e7:8e:2c:45:9d:4b:5e:7f:55:
         3b:aa:4c:85:34:b7:a0:48:3c:67:75:f3:c0:fc:98:5c:7b:33:
         de:91:62:ad:d7:7c:66:5d:46:3c:e7:9a:a6:17:2f:6e:7e:98:
         48:2c:39:6a:95:58:87:ca:f3:bb:2c:ea:d2:d8:53:7d:b4:01:
         6f:2d:15:c0:a0:03:c9:68:96:82:ba:bd:fe:6c:62:d9:b3:d0:
         18:62:1e:eb:b0:69:55:f6:2c:c0:40:32:22:48:a7:c3:fc:fb:
         d6:6d:b5:19:58:89:8b:1d:6e:8d:cc:51:2c:fd:b0:65:d3:45:
         82:26:5a:66:e1:d6:fa:7a:5c:fd:52:2a:c4:ae:e2:ae:0e:f8:
         a5:77:f3:2f:fc:e8:e2:8c:e9:78:d1:ca:52:6f:88:37:61:e4:
         73:cd:cc:be:de:4b:5a:89:7b:b1:7a:8d:71:49:8e:6c:fd:44:
         ea:9d:af:26:67:38:c0:a2:0d:05:3e:b9:e1:09:ef:28:d8:a0:
         d7:83:3d:c1:b2:01:32:7a:98:f5:a4:43:cf:19:1a:55:76:e4:
         17:5a:9d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:00:11 2026 by rpki-client