Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
File:                     yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft (raw, json)
Hash identifier:          3nfb9+uztuROB8b3bn+yZ7W/47fZlceaUhYnmr7AYjA=
Subject key identifier:   7F:20:44:78:81:0F:82:30:DF:24:E9:F7:96:19:9C:9D:C5:FB:8A:EF
Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B
Certificate issuer:       /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
Certificate serial:       0D16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
Manifest number:          0D0C
Signing time:             Tue 18 Aug 2026 18:33:24 +0000
Manifest this update:     Tue 18 Aug 2026 18:33:24 +0000
Manifest next update:     Tue 25 Aug 2026 18:33:24 +0000
Files and hashes:         1: yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl (hash: Zs93TZu0xIXfw6O3V7FACyBD3FMZDZm7cxstDscpWZ8=)
                          2: 69308C200A9611EABF034172C4F9AE02.roa (hash: Og8kggLWLgVMfPp3OlQnblKMTWi+r7xJXzXK2YD03aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl
                          rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3350 (0xd16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B
        Validity
            Not Before: Aug 18 18:33:24 2026 GMT
            Not After : Aug 25 18:33:24 2026 GMT
        Subject: CN=6a84a574-d37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:99:f6:32:b1:82:4e:90:ee:60:09:9c:70:
                    e9:db:e5:2e:1f:a3:d0:24:f6:35:a8:05:5e:40:bd:
                    fb:53:69:79:23:3d:ce:22:d7:99:e8:24:4d:ee:81:
                    88:86:20:ae:9c:be:5b:77:44:0f:82:f6:a6:48:18:
                    ed:ca:65:af:e0:da:c7:58:92:4d:cb:52:05:47:51:
                    89:ce:dd:da:39:98:91:17:fe:68:f5:6a:41:84:60:
                    91:65:87:30:47:f2:e0:6c:a2:ec:c4:6f:c5:a2:48:
                    9f:c2:c4:02:cc:fb:86:4e:72:e9:dd:4f:d3:96:41:
                    48:01:f7:62:c0:06:62:7d:60:4b:d2:8e:1d:b9:e9:
                    33:3b:26:e2:60:ad:4c:bf:7e:20:be:53:22:73:4b:
                    9f:9a:d0:93:2b:57:43:5b:88:18:13:ec:7a:72:2d:
                    b2:bb:30:1a:69:bf:e8:1a:b1:bf:41:36:d7:bd:fb:
                    30:54:0d:28:69:54:06:44:9e:56:f0:b4:62:bb:98:
                    75:22:e8:5c:1a:2b:1a:f2:0e:a1:19:b1:6b:9f:0c:
                    86:1e:f7:de:62:b8:08:0f:ec:32:cd:73:09:9c:80:
                    39:e9:1e:95:9c:4b:8d:3b:36:cf:d8:c3:d1:3b:e1:
                    69:d6:1b:9e:94:af:af:07:f4:00:ca:60:94:1d:1d:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:44:78:81:0F:82:30:DF:24:E9:F7:96:19:9C:9D:C5:FB:8A:EF
            X509v3 Authority Key Identifier:
                keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:59:69:c9:58:47:73:82:a6:f3:13:33:25:67:4c:25:d0:ba:
         1a:02:c0:65:d8:07:97:30:d8:9c:25:de:6b:5e:c2:bd:a6:37:
         67:8e:a5:c6:2b:e8:f0:1d:3a:02:9a:c9:1b:76:b7:9a:66:14:
         05:89:71:e4:1f:1d:ac:1f:01:02:db:dc:a1:26:8f:38:8e:36:
         f8:47:71:0a:12:f8:3b:04:dd:be:4d:89:3c:a5:86:89:e0:44:
         28:0e:d8:66:00:42:2c:95:59:57:5a:0d:67:7e:e8:66:a3:5c:
         55:39:70:2c:a9:8a:e1:23:4c:ea:10:a0:fa:d8:e0:a6:f3:ed:
         eb:a2:46:02:8b:a1:c7:07:06:c3:8b:fd:a0:1c:0e:e0:05:c1:
         17:a0:71:35:b0:36:cb:7f:ee:4f:a0:17:d8:7e:93:4c:b8:09:
         ac:2c:37:dd:a4:23:9b:89:a6:de:57:0f:08:73:7c:a7:58:5f:
         b0:97:0f:9b:4e:51:03:9f:3d:38:d1:03:d2:26:cb:da:a3:5a:
         04:05:9b:dc:a4:27:f2:78:27:da:42:c6:1e:ca:fd:bd:86:f7:
         50:46:af:5e:9b:0a:8c:b6:2a:ad:59:29:e2:49:4d:ad:17:f3:
         1c:9c:3b:07:90:00:11:bf:44:9b:20:a8:0e:39:53:ad:17:21:
         56:dd:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:17 2026 by rpki-client