Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
File:                     yDkkRRVKIRRXRo3JJnXGsrycRIs.mft (raw, json)
Hash identifier:          0Oz0e0pSlt4tUnQ0gIo5UzrKO99rdyW59onuITq4Kw4=
Subject key identifier:   35:E5:1A:70:DF:C8:9F:5B:D8:F8:9D:92:58:31:B0:EF:A1:2F:3D:51
Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B
Certificate issuer:       /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
Certificate serial:       0280
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
Manifest number:          0278
Signing time:             Wed 19 Aug 2026 02:33:10 +0000
Manifest this update:     Wed 19 Aug 2026 02:33:09 +0000
Manifest next update:     Wed 26 Aug 2026 02:33:09 +0000
Files and hashes:         1: yDkkRRVKIRRXRo3JJnXGsrycRIs.crl (hash: tMjM6tG7SFZTtBTZMnSIlbtPuDgG6O+XOmdPvjhYJMM=)
                          2: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (hash: 4Ttg6a+Izn8a70sY4W6bAM3oSgGKBOsCI9uHmrpaOfc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl
                          rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B
        Validity
            Not Before: Aug 19 02:33:09 2026 GMT
            Not After : Aug 26 02:33:09 2026 GMT
        Subject: CN=6a8515e6-3758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:15:6b:41:64:e6:63:35:9e:b8:0e:a7:35:
                    9e:39:40:86:dd:dd:4e:43:6f:ce:15:47:cc:83:15:
                    46:8b:68:00:3e:e0:5a:d8:90:2f:8c:06:81:a4:99:
                    fe:2b:a3:40:41:ad:a8:d9:94:fd:cd:4d:de:fa:10:
                    5a:2b:40:91:13:b6:f1:11:c5:c4:e6:d1:1d:80:c9:
                    d2:3a:02:56:a3:80:31:33:04:3f:73:c6:d0:6a:b6:
                    a3:a1:4d:d6:8c:0e:98:c0:4d:ee:5d:86:18:ae:93:
                    f8:d7:e0:73:e4:38:f5:fe:7b:2d:72:87:0c:02:a8:
                    69:29:6e:82:d0:1b:9a:1f:43:7a:fc:90:70:5e:d3:
                    07:92:38:e6:18:16:77:02:10:94:11:63:8d:27:ba:
                    bf:9c:88:8f:02:1b:23:99:a5:92:e2:65:5e:1c:db:
                    7f:7f:02:ab:4d:b4:71:75:f2:3d:7a:22:23:b9:23:
                    57:ed:cb:1f:82:44:2f:82:3b:03:e6:4e:1e:22:5a:
                    64:3d:68:8e:39:4c:50:b2:7e:18:d4:c3:45:1e:99:
                    60:d5:08:98:98:c9:10:54:c8:89:e1:09:5a:bb:2a:
                    5b:f6:7d:81:8c:fe:3e:ca:1e:70:98:9a:64:8c:05:
                    d3:ae:ab:4c:19:c4:40:02:52:0b:34:93:d7:ea:35:
                    71:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:1A:70:DF:C8:9F:5B:D8:F8:9D:92:58:31:B0:EF:A1:2F:3D:51
            X509v3 Authority Key Identifier:
                keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:cb:09:07:ef:80:f4:16:89:59:71:fb:6d:26:48:e6:3e:
         cc:81:e0:98:d1:32:15:b1:6f:db:16:89:9f:ba:3b:59:3d:5e:
         d2:85:6a:47:e2:fa:39:0b:39:b0:01:40:b2:41:df:51:94:39:
         a9:eb:f4:04:17:ee:97:48:47:96:13:d8:58:0b:f9:cc:69:29:
         01:f2:c9:4b:7f:d5:32:ea:91:84:3b:e6:d8:84:15:71:ba:53:
         d2:22:67:8d:4d:a5:0a:ac:7c:da:18:0c:6b:f6:a6:1c:70:92:
         7b:dd:9b:ae:c0:8c:ed:04:80:10:90:d3:5e:11:2a:91:a6:44:
         99:ac:16:30:a7:6a:b4:1f:2e:1c:e4:c9:69:9f:71:c5:29:a7:
         ec:a9:00:27:f5:75:d1:d2:81:e1:5b:7b:b8:67:f0:f2:76:47:
         42:70:f3:93:af:12:a2:1d:1a:f8:e5:22:a6:d6:3f:19:07:11:
         45:57:1c:bd:6c:0b:8e:e7:c1:c1:7a:27:22:19:3c:84:ed:23:
         4d:a2:4d:21:c4:2c:e2:4e:39:6a:11:82:3a:26:59:11:8c:df:
         6b:29:ba:d4:d5:46:7c:c3:95:d8:62:a9:f1:28:46:c4:2b:2e:
         8d:00:93:8f:8e:ee:82:8b:0a:95:97:9d:e7:21:69:00:a9:2f:
         a6:b4:ba:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:52 2026 by rpki-client