Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
File:                     C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json)
Hash identifier:          ozwHP8QarSU6mzU7pglk+H6pNbQDLYKATBaYI8Rki9w=
Subject key identifier:   BF:04:3D:39:1E:A9:B5:55:FD:A5:D6:AC:EF:DC:BC:74:2E:1D:FB:EF
Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40
Certificate issuer:       /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
Manifest number:          0288
Signing time:             Tue 13 Oct 2026 02:18:22 +0000
Manifest this update:     Tue 13 Oct 2026 02:18:22 +0000
Manifest next update:     Tue 20 Oct 2026 02:18:22 +0000
Files and hashes:         1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: n/j4GW9bKSAxuiZfZbvpyH33A/VRy2DGpbcaE7YKA3U=)
                          2: 7BD32D1678F211F1985843FB5DA30FBC.roa (hash: y5JcZuVUbyUkHrroNxYLyYNDHkcGqagm4UKRx6C9gY0=)
                          3: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=)
                          4: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl
                          rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 02:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040
        Validity
            Not Before: Oct 13 02:18:22 2026 GMT
            Not After : Oct 20 02:18:22 2026 GMT
        Subject: CN=6acd94ee-cee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:e7:eb:cd:40:c3:08:90:52:a0:09:e5:55:
                    23:cf:a2:a8:a3:e0:f3:eb:9f:90:60:bb:ec:82:46:
                    c2:5c:a9:d3:5e:96:10:f3:6e:f0:a9:d1:fb:09:4b:
                    63:65:63:6a:cd:bf:e8:3d:9f:dc:16:7b:ee:1e:e2:
                    27:03:f0:80:de:ad:55:dc:3b:3a:b2:a0:e8:2b:6c:
                    0f:60:9d:23:00:45:69:0c:31:b2:56:2e:22:44:24:
                    65:2e:85:20:4b:3d:6b:44:ef:2f:6f:2c:e5:ed:0f:
                    4f:13:2d:d5:ff:28:39:03:e9:d8:1c:6a:c0:86:e7:
                    74:d9:fd:16:58:79:fc:a1:24:64:34:14:84:d8:72:
                    49:28:ba:34:84:63:9f:46:75:6a:4d:26:fc:29:22:
                    7f:51:d8:0c:42:d8:bd:f6:af:6c:d0:62:49:b9:94:
                    23:b7:84:25:a1:1f:e6:07:06:e2:90:6c:0b:12:f5:
                    8e:4b:77:c6:6a:3b:cc:48:ff:a5:e9:d3:24:82:e0:
                    33:eb:5b:fa:67:bd:27:74:2e:40:1d:c1:4c:89:d8:
                    9d:44:5f:b2:04:43:a9:58:01:3e:51:93:75:84:90:
                    49:44:3c:47:de:bf:fc:cb:94:4a:a8:05:d1:dc:c2:
                    a0:8e:9a:5c:3b:54:6e:bd:12:8b:6e:88:2f:f6:11:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:3D:39:1E:A9:B5:55:FD:A5:D6:AC:EF:DC:BC:74:2E:1D:FB:EF
            X509v3 Authority Key Identifier:
                keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:35:f3:e3:5b:20:39:fd:50:45:4d:d7:76:82:2e:e4:67:58:
         3f:58:9c:4f:c2:e8:1e:61:72:2e:0e:92:28:38:22:d8:c4:fa:
         c4:7d:98:89:94:9f:cc:88:f7:6c:cd:37:16:3d:2c:fa:33:eb:
         6a:0d:ad:04:5f:01:ea:30:ca:45:03:35:53:8c:27:1a:f8:48:
         81:75:4d:05:68:e7:52:94:85:f5:f6:2c:bc:9a:08:bd:6e:71:
         1b:ae:12:a3:52:f1:07:7e:20:40:e7:75:75:22:2e:b8:6e:7b:
         55:3e:26:b8:18:d9:76:9c:cf:22:65:6f:d9:72:6c:17:61:09:
         52:25:83:25:00:4a:40:55:8a:73:b7:a7:c9:c6:a7:f9:b2:67:
         8e:65:b2:0c:07:4b:1a:bb:a7:05:94:9f:18:d7:81:fa:22:5c:
         44:46:6b:6a:bf:cb:94:4f:8d:50:c0:ee:88:3e:33:95:97:7a:
         a4:e2:f4:40:2e:c1:1a:11:c1:fd:a6:4b:cf:76:58:52:ca:b6:
         c3:e9:cf:77:3d:f2:6b:4e:05:99:11:d0:70:12:8c:a3:fb:cf:
         ab:41:36:5b:41:77:66:09:c7:ba:09:64:cb:aa:a6:69:22:fa:
         92:79:fc:fd:3d:fc:9f:16:ee:c2:03:d1:25:11:4a:0c:67:b5:
         81:30:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:53:01 2026 by rpki-client