Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
File:                     YBqj_Udwv8aa8kBvLoDtCOfca0M.mft (raw, json)
Hash identifier:          0k9+jhwl5jCiRmknqat+3sUvMXoxOrI5gPz+WMH040o=
Subject key identifier:   4F:85:C7:5F:24:F9:E9:57:2F:88:C9:84:8D:02:04:5F:43:40:CD:6E
Authority key identifier: 60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43
Certificate issuer:       /CN=A91954E2/serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
Manifest number:          0193
Signing time:             Wed 19 Aug 2026 04:58:10 +0000
Manifest this update:     Wed 19 Aug 2026 04:58:10 +0000
Manifest next update:     Wed 26 Aug 2026 04:58:10 +0000
Files and hashes:         1: YBqj_Udwv8aa8kBvLoDtCOfca0M.crl (hash: KnxXaxVkkqEL+ivUHyV59Qwn6ppMwISgH7mni2FykMc=)
                          2: CC8E710C347011EF9F04CE66C4F9AE02.roa (hash: X1FdTZreaYzPMLMjzCOoJBeITWWNKAQhsJsRuSe7wy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl
                          rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:58:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954E2, serialNumber=601AA3FD4770BFC69AF2406F2E80ED08E7DC6B43
        Validity
            Not Before: Aug 19 04:58:10 2026 GMT
            Not After : Aug 26 04:58:10 2026 GMT
        Subject: CN=6a8537e2-40a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:fd:6f:f5:db:71:6b:cc:79:65:d1:ae:f8:
                    f8:11:0b:f6:a3:90:c4:09:27:b3:e0:12:8f:61:54:
                    ac:0d:c7:91:bf:78:cf:6b:66:ca:91:57:b5:c6:58:
                    c0:b6:a9:99:0c:56:78:1a:fe:04:93:41:44:eb:f8:
                    c0:56:63:bf:ef:ad:86:29:09:71:ac:e5:84:1d:cb:
                    8d:e2:d4:9d:8d:3a:d7:6a:b3:1d:f5:33:1b:da:9c:
                    a8:4a:76:cc:1b:4c:5a:4c:bd:2e:ec:62:3a:5c:c4:
                    c5:8b:5c:72:fc:02:c6:e2:a4:b4:5d:47:2a:05:e4:
                    eb:dc:c5:05:61:7f:e6:ba:fb:38:ee:1e:8d:cf:25:
                    0c:75:f2:8a:e2:ba:49:a7:23:01:e0:ae:a4:f7:fe:
                    83:9a:8f:e1:97:16:c2:1e:b9:99:95:2c:6e:c5:59:
                    d9:ce:7d:1b:da:a4:92:7d:79:51:e1:8e:cf:fd:05:
                    b5:9f:f3:22:21:b2:95:fe:29:64:bf:2a:ea:7d:4c:
                    48:8e:c0:2b:55:9f:6f:d5:30:37:80:94:8b:18:f3:
                    fd:08:08:6b:62:21:24:b1:32:46:50:ec:05:53:68:
                    3c:4c:78:c0:b6:98:b5:f2:49:f8:37:84:8a:75:28:
                    e2:c1:4d:d8:c1:42:db:7d:97:f5:74:e3:d8:c4:3c:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:C7:5F:24:F9:E9:57:2F:88:C9:84:8D:02:04:5F:43:40:CD:6E
            X509v3 Authority Key Identifier:
                keyid:60:1A:A3:FD:47:70:BF:C6:9A:F2:40:6F:2E:80:ED:08:E7:DC:6B:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBqj_Udwv8aa8kBvLoDtCOfca0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954E2/73EBE6A2346F11EF97CA7546C4F9AE02/YBqj_Udwv8aa8kBvLoDtCOfca0M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:ce:90:80:36:57:1c:af:cd:a8:32:b4:81:d1:06:be:8c:
         6b:09:dc:f5:3c:08:68:3d:4c:f3:64:b4:16:f9:de:e1:45:07:
         48:6c:ba:1c:c1:da:44:7a:a4:98:0c:35:8b:57:23:4e:40:b2:
         47:58:f8:53:c4:a3:0a:d9:ae:dd:1b:1a:65:db:1a:d5:ad:47:
         57:13:cf:90:b2:a6:5d:39:d9:2a:56:89:02:bf:b7:24:73:bc:
         7f:60:f3:33:dc:54:1c:cb:00:bc:0d:df:f9:32:32:5e:63:a9:
         ac:19:b9:d7:0e:f9:8e:94:07:67:88:da:ee:9e:41:75:21:f9:
         d1:c7:b9:34:d5:ca:74:23:d9:a1:e2:62:25:55:4c:57:18:71:
         b9:5a:73:2b:a9:84:96:36:6d:bc:46:39:5f:55:3e:c9:68:18:
         9b:be:ae:c8:18:27:22:8a:ad:ad:68:ec:52:65:67:b3:c4:3f:
         41:01:15:89:c5:8b:3b:51:61:9e:c8:d9:2c:e3:90:20:67:97:
         ff:5e:f3:90:fd:65:75:bc:d4:c5:a0:19:e1:df:36:3a:5b:e2:
         a4:17:bd:09:87:41:59:79:5c:75:10:f4:05:05:2d:4c:aa:4b:
         f2:6e:cd:09:13:5c:b5:06:bd:f8:83:47:52:fa:28:fd:fa:c2:
         a6:f0:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:47 2026 by rpki-client