Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File:                     yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier:          qFUEVj7ELiKxM1B2vluYrcyOSGpk2koffvnDeXpgr4c=
Subject key identifier:   82:0A:37:AB:22:B3:23:E9:69:8D:A8:E6:78:19:F2:8D:F5:49:8E:15
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer:       /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number:          02B5
Signing time:             Wed 07 Oct 2026 01:49:29 +0000
Manifest this update:     Wed 07 Oct 2026 01:49:28 +0000
Manifest next update:     Wed 14 Oct 2026 01:49:28 +0000
Files and hashes:         1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: /1/dJcmG1nktafGFlKYKKgveQHHhnveFjwmT3SrAWDQ=)
                          2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:49:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
        Validity
            Not Before: Oct  7 01:49:28 2026 GMT
            Not After : Oct 14 01:49:28 2026 GMT
        Subject: CN=6ac5a528-605c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:b4:31:33:f7:80:af:a5:1f:e9:2c:ee:62:
                    1e:b6:b2:77:91:56:97:11:e8:16:84:88:3b:c9:48:
                    c7:c4:bb:f4:89:c8:4f:4d:a8:f0:c7:d0:cb:b6:31:
                    0c:00:f9:d6:19:98:d5:eb:44:b9:ba:57:b2:32:a3:
                    ad:88:34:51:0f:83:8e:48:21:48:f6:f3:44:3b:8a:
                    56:9a:41:ba:13:b3:07:d6:2f:e4:c2:aa:31:22:18:
                    98:59:9c:19:8d:6f:48:3c:0e:8e:28:ff:fa:b6:16:
                    40:55:2a:cd:06:66:f8:09:b2:01:dc:c5:d4:b8:38:
                    34:d6:26:cc:e5:62:41:af:ad:bd:2f:ec:d3:10:df:
                    4b:89:f1:64:49:65:9d:06:19:87:9f:31:7a:b2:3a:
                    1d:18:32:b2:7d:88:22:ea:cf:30:5b:16:2f:18:a8:
                    d9:1c:d8:a5:02:d0:f6:96:cc:5f:7a:fd:7e:87:f2:
                    43:fe:dd:75:8e:2f:f9:95:c5:95:ea:2c:d9:b5:36:
                    1d:49:64:c7:76:ea:69:34:6a:88:01:58:38:11:23:
                    24:2c:55:9c:d1:87:98:54:c7:4f:41:f9:cf:f3:5b:
                    56:8d:bd:91:6d:72:bd:c2:08:dd:87:ff:99:dd:d0:
                    d8:13:c4:11:19:28:b6:32:da:0f:b7:83:0e:0d:5f:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0A:37:AB:22:B3:23:E9:69:8D:A8:E6:78:19:F2:8D:F5:49:8E:15
            X509v3 Authority Key Identifier:
                keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:81:01:c3:28:ef:6a:9d:74:f4:d0:63:72:34:0b:e1:28:
         fb:b5:d3:65:9d:68:74:34:6f:d9:ed:39:c4:52:85:36:d5:87:
         90:a0:8a:c7:51:e2:fa:5d:94:4d:28:fe:f8:78:3a:21:94:37:
         57:d8:06:a9:8f:86:70:75:e2:72:b7:e5:b9:4b:fa:00:9d:90:
         6e:9a:02:42:84:6b:58:aa:83:fa:e5:b5:6d:88:2e:a2:64:32:
         86:ca:01:fd:11:18:59:05:38:6b:3b:67:0b:ff:26:f9:e9:ca:
         e0:56:72:4c:4a:7c:5f:1f:e0:db:7f:97:05:87:2d:eb:ab:78:
         d9:68:9b:e5:9a:17:66:95:09:c5:52:fa:a9:16:64:69:68:28:
         67:56:57:6a:45:06:79:26:f9:69:24:16:30:f3:cf:b9:6f:bd:
         61:0c:46:5a:a9:c8:11:f4:35:9a:20:3a:3a:92:45:77:07:14:
         da:a8:94:d5:9c:e4:d9:a9:03:0f:fa:bd:75:a8:c0:d7:bb:01:
         7d:65:0f:08:e7:bb:38:ce:ef:92:8b:f1:4c:e4:e1:45:eb:76:
         f2:76:31:51:b7:b6:b4:36:f8:c1:78:d9:b4:95:48:51:6a:b9:
         2c:aa:25:20:88:84:fa:b2:3f:d5:6a:48:46:dc:e8:8a:c5:0d:
         ca:61:ef:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:18 2026 by rpki-client