Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File:                     yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier:          TuuSHv+K1M3IE7QVSb3x5rjURroXa6YzwXWtUf4acRg=
Subject key identifier:   5F:1E:4E:CF:5A:A8:7F:64:EE:05:05:73:5A:65:35:8D:34:88:5E:BA
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number:          01AA
Signing time:             Fri 16 Oct 2026 21:20:05 +0000
Manifest this update:     Fri 16 Oct 2026 21:20:04 +0000
Manifest next update:     Fri 23 Oct 2026 21:20:04 +0000
Files and hashes:         1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: 1h+i5eddElyROZP0mIuFNvHA5Vc8nt+AzNsNTJfRqSM=)
                          2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 21:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: Oct 16 21:20:04 2026 GMT
            Not After : Oct 23 21:20:04 2026 GMT
        Subject: CN=6ad29505-5590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:e7:4d:0f:d0:84:ac:0c:19:1f:4e:e2:97:
                    cc:74:89:43:a6:3c:4a:a1:c7:0c:d2:b5:99:7c:09:
                    37:b2:e6:4a:55:db:cb:fd:72:e7:67:a5:d6:e2:5e:
                    bb:86:d5:41:09:27:e8:d7:1f:f2:eb:e9:9e:15:9b:
                    8c:55:03:06:64:91:d3:ba:24:14:8b:28:91:8a:98:
                    6f:4a:a7:9c:fb:6d:ea:ee:89:02:35:c3:a1:8d:32:
                    12:92:50:ae:eb:01:15:d1:b5:c2:a7:3f:2c:72:8b:
                    70:20:8a:a7:3a:6b:77:a7:fc:8e:65:2a:6f:95:fa:
                    dd:46:21:05:2b:17:74:84:9a:c5:ac:d1:c4:29:26:
                    85:80:6b:10:1d:b5:71:17:e9:b0:c3:63:ca:8d:fa:
                    5b:7a:dd:ea:70:ee:e7:99:c2:3b:7b:4a:f2:e1:06:
                    1b:3d:48:75:14:89:6e:ec:19:12:36:f4:27:67:cf:
                    46:7d:d9:9e:26:b7:95:97:b2:6d:01:db:65:9e:1b:
                    ef:90:ce:37:fb:ca:2e:df:a1:0d:de:62:8d:36:83:
                    51:b1:0c:8a:05:9d:35:fd:6c:4b:56:74:05:0e:c2:
                    e4:d6:41:8d:9d:8d:7b:7f:a9:95:b0:a1:42:07:99:
                    8f:70:e3:b4:ac:e2:ee:f3:5b:97:20:83:0b:d7:1b:
                    e5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:4E:CF:5A:A8:7F:64:EE:05:05:73:5A:65:35:8D:34:88:5E:BA
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ab:ea:d7:ea:af:b6:49:29:32:7a:f1:a8:af:5d:5d:2d:78:
         5b:ca:4a:42:f0:91:e7:6a:5a:88:2a:eb:7d:7a:61:74:f4:63:
         46:0a:54:03:8a:a5:16:5f:f4:d2:78:f5:05:5d:d4:fe:76:ac:
         82:86:10:4c:45:6f:ae:1b:e9:45:ae:c8:f3:d1:a6:fa:fc:c3:
         ac:d1:a4:04:f8:89:56:c5:17:d3:f3:b3:ff:14:bf:7c:93:f6:
         63:d2:5e:38:23:55:d1:be:72:99:a6:42:ed:62:fa:09:38:0f:
         1e:88:b9:06:26:50:4b:43:67:e3:94:3c:1f:49:90:3c:84:5c:
         a9:18:70:6f:5e:72:6b:c0:44:7c:03:84:61:bc:94:e1:3c:42:
         68:c9:6c:3c:ae:07:20:d1:c1:12:a5:a4:d4:bf:b9:c5:24:97:
         36:c8:2a:8e:9d:f4:28:a6:b7:de:06:2c:6b:25:dc:2c:fd:31:
         8b:32:8c:44:3f:a9:9d:5f:04:07:a2:88:9d:75:19:c0:61:53:
         37:1e:57:ed:8d:b2:57:3c:64:7b:9e:f1:d8:1a:9f:44:ec:d5:
         83:8a:b8:8d:d1:b4:e5:de:f5:86:42:33:a6:56:81:16:85:ee:
         0f:ae:1b:fe:45:fb:f1:5c:18:81:bc:42:7e:71:d8:bc:4e:13:
         1d:b3:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:16:28 2026 by rpki-client