Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File:                     YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier:          H1YL7tM1tLOXRFGoDnFzVxgGSZpq8xaoG75kcQuVFPg=
Subject key identifier:   75:04:55:58:67:B5:01:83:83:34:21:82:87:CE:74:4C:57:95:15:BD
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       05A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number:          059A
Signing time:             Thu 22 Oct 2026 23:17:37 +0000
Manifest this update:     Thu 22 Oct 2026 23:17:37 +0000
Manifest next update:     Thu 29 Oct 2026 23:17:37 +0000
Files and hashes:         1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: wKTNwykCyH7qAjIR20eaTdR6Pr/nyWNqmBNJj0xyO1k=)
                          2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: vvKSiQ66wXvY3WzNK+cK0pREki3cFgjqVXN6bM5jjHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 23:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Oct 22 23:17:37 2026 GMT
            Not After : Oct 29 23:17:37 2026 GMT
        Subject: CN=6ada9991-8a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:77:f2:63:5e:30:7e:e0:31:64:15:2a:c7:
                    f9:0b:ef:6f:50:53:1c:cd:a1:0b:57:c7:66:c6:c6:
                    23:b0:25:30:d8:01:ae:97:4f:84:ef:85:9a:33:6d:
                    43:7c:be:95:9a:72:9f:97:62:f1:59:bb:5f:d1:85:
                    d9:91:1f:a8:d3:07:95:3b:56:05:c9:c5:0f:51:28:
                    69:cd:01:b8:56:a9:70:5f:bf:cf:b4:0e:02:a8:28:
                    4c:8d:7f:6c:13:4d:5c:d6:09:55:ec:fe:83:da:f9:
                    6e:b6:1a:d8:3c:f0:e6:ff:e4:c7:94:cf:b5:ce:f9:
                    92:dd:69:8f:34:d6:67:1e:fb:d4:4e:c5:b7:45:c8:
                    e2:69:ef:22:2d:b6:a8:6e:4b:f2:cc:ab:8e:ac:82:
                    94:08:3c:90:79:1a:49:df:00:ce:4e:15:d8:a4:cc:
                    12:a7:d3:3d:2b:45:4d:77:05:f9:ed:20:dc:c3:00:
                    ce:d3:33:92:4b:7b:90:a9:2f:0a:35:1a:0e:0d:da:
                    f6:7b:85:f5:70:78:03:a1:9c:06:88:a2:bc:3c:51:
                    c7:81:12:ed:71:25:40:91:7d:91:8f:a6:4b:70:13:
                    3b:9e:bc:aa:d6:a8:53:37:58:ba:d1:1b:d9:e2:d5:
                    85:8e:c4:92:77:7c:56:00:51:31:69:fb:77:17:48:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:04:55:58:67:B5:01:83:83:34:21:82:87:CE:74:4C:57:95:15:BD
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:4e:a0:8b:2f:5e:a9:8f:c8:06:9c:49:1e:ab:ab:ba:43:
         7a:37:8c:53:7c:dd:61:c8:83:e3:64:0e:11:1e:42:8d:e6:4f:
         38:03:14:3b:68:61:82:ad:4b:a9:66:72:59:76:76:84:ec:17:
         ad:6e:91:9d:6c:9f:03:14:99:66:9a:30:c3:fe:0a:76:98:42:
         ab:ad:36:3d:af:f1:79:82:57:48:b4:8e:11:15:c6:1e:0f:d4:
         c8:63:2b:18:22:6f:07:df:dd:45:b9:96:30:0d:29:dd:57:a9:
         74:16:22:00:2b:da:27:2f:0e:92:86:dd:81:24:d8:fe:eb:3b:
         d8:c1:1a:26:62:07:94:57:2f:b3:bd:e8:ab:25:ea:48:db:b1:
         5b:c8:b2:13:07:80:c3:f4:0e:55:70:54:dc:e7:bb:c0:cf:e2:
         a7:a9:c9:c5:3b:d5:65:13:96:12:5d:7e:9b:e7:22:09:e3:90:
         86:2b:4d:73:c4:9f:95:29:1f:1b:f0:a7:ce:15:0f:c8:4c:29:
         40:8c:2b:66:42:5d:a3:35:c5:20:41:b3:65:33:51:cc:fa:06:
         cd:84:d3:4f:d0:09:d8:da:36:c5:99:51:6e:fe:f6:0d:8e:dc:
         c4:b3:d1:72:30:7e:13:b2:2f:4d:10:c1:cf:9c:ea:61:62:a5:
         8e:ab:c4:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdDNzcxMTAvBgNVBAUTKDYxQjAyMjMzNUY0RDg1RTE2RDQ3N0EwMDZBREM4RTNG
MkZEQTk0NjAwHhcNMjYxMDIyMjMxNzM3WhcNMjYxMDI5MjMxNzM3WjAYMRYwFAYD
VQQDEw02YWRhOTk5MS04YTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAin138mNeMH7gMWQVKsf5C+9vUFMczaELV8dmxsYjsCUw2AGul0+E74WaM21D
fL6VmnKfl2LxWbtf0YXZkR+o0weVO1YFycUPUShpzQG4VqlwX7/PtA4CqChMjX9s
E01c1glV7P6D2vluthrYPPDm/+THlM+1zvmS3WmPNNZnHvvUTsW3Rcjiae8iLbao
bkvyzKuOrIKUCDyQeRpJ3wDOThXYpMwSp9M9K0VNdwX57SDcwwDO0zOSS3uQqS8K
NRoODdr2e4X1cHgDoZwGiKK8PFHHgRLtcSVAkX2Rj6ZLcBM7nryq1qhTN1i60RvZ
4tWFjsSSd3xWAFExaft3F0gxZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUEVVhn
tQGDgzQhgofOdExXlRW9MB8GA1UdIwQYMBaAFGGwIjNfTYXhbUd6AGrcjj8v2pRg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M3Ny9EQzIwMUFGRTM5
NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5TmhlRnRSM29BYXR5T1B5X2Fs
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQWlNMTlOaGVGdFIzb0FhdHlPUHlfYWxHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0M3Ny9EQzIwMUFGRTM5NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5Tmhl
RnRSM29BYXR5T1B5X2FsR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe3VOoIsvXqmPyAacSR6rq7pDejeMU3zdYciD42QOER5CjeZPOAMUO2hhgq1L
qWZyWXZ2hOwXrW6RnWyfAxSZZpoww/4KdphCq602Pa/xeYJXSLSOERXGHg/UyGMr
GCJvB9/dRbmWMA0p3VepdBYiACvaJy8OkobdgSTY/us72MEaJmIHlFcvs73oqyXq
SNuxW8iyEweAw/QOVXBU3Oe7wM/ip6nJxTvVZROWEl1+m+ciCeOQhitNc8SflSkf
G/CnzhUPyEwpQIwrZkJdozXFIEGzZTNRzPoGzYTTT9AJ2No2xZlRbv72DY7cxLPR
cjB+E7IvTRDBz5zqYWKljqvEnA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:16 2026 by rpki-client