Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
File:                     Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft (raw, json)
Hash identifier:          TWrBTs5d+t0U43MPsjdKXasWFBhGsluaJ8N/KYFz0pw=
Subject key identifier:   F0:C2:84:44:5B:5E:E6:08:97:5D:7F:40:02:DA:80:0F:15:3A:BF:C2
Authority key identifier: 63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75
Certificate issuer:       /CN=A91D69B9/serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
Manifest number:          71
Signing time:             Sun 25 Oct 2026 08:16:24 +0000
Manifest this update:     Sun 25 Oct 2026 08:16:23 +0000
Manifest next update:     Sun 01 Nov 2026 08:16:23 +0000
Files and hashes:         1: Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl (hash: Sbogpc3rL8fKiPe/X8hV0NU2ra09Qy+CBxpDMGPD3Hs=)
                          2: 743D4A1A245F11F1B445E15AC5833773.roa (hash: I1pnbFkaRNRmC3NYqt0+dVRJnrgUwzqm0Vjq3Hx70aI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl
                          rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 08:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D69B9, serialNumber=63F78D502055B6CBF07CECA1437B5602A8F24C75
        Validity
            Not Before: Oct 25 08:16:23 2026 GMT
            Not After : Nov  1 08:16:23 2026 GMT
        Subject: CN=6addbad8-37a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:11:c2:39:c2:b0:da:77:60:5e:e0:3d:ce:1b:
                    ab:41:30:e4:e3:43:60:fb:dd:d4:b2:58:a7:5a:8d:
                    8e:54:3f:26:ed:48:72:23:95:ce:8a:b0:e9:f1:ae:
                    fd:4f:58:de:74:d4:c0:b1:e6:77:a5:b6:21:f7:24:
                    66:2f:53:94:27:fc:64:a5:e9:3f:8a:c6:d0:60:ea:
                    44:5c:14:d6:e8:b3:6b:75:f2:27:0a:5c:4f:34:63:
                    e8:c3:5f:2d:55:ec:89:bc:f4:14:ac:ed:e7:52:8e:
                    25:5f:18:22:7c:bd:10:45:c4:e4:2d:54:c0:60:fd:
                    16:33:f8:6d:4f:3d:9d:39:4d:ef:4f:bf:24:20:ac:
                    d6:eb:04:f0:8b:55:82:6a:a5:a5:bc:41:35:79:a2:
                    e3:dd:9f:52:70:e1:db:c1:d1:ad:d8:74:d0:35:de:
                    23:a3:0d:91:dc:d9:5b:69:5a:5c:cf:e6:4f:9f:76:
                    b1:64:49:67:26:bb:86:6e:88:9e:eb:c3:42:91:0f:
                    20:60:4b:a4:cd:48:3d:53:d4:ef:dc:68:3d:92:df:
                    d7:da:fe:15:bf:12:f4:16:3a:22:3f:7c:60:0f:79:
                    27:46:62:9b:4f:43:4c:9b:05:8d:ee:0b:65:bd:5e:
                    7c:b2:fa:d7:81:b6:8f:d1:79:3d:2c:d7:45:8d:1e:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:84:44:5B:5E:E6:08:97:5D:7F:40:02:DA:80:0F:15:3A:BF:C2
            X509v3 Authority Key Identifier:
                keyid:63:F7:8D:50:20:55:B6:CB:F0:7C:EC:A1:43:7B:56:02:A8:F2:4C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D69B9/2BA19414245F11F19B1FFD44C5833773/Y_eNUCBVtsvwfOyhQ3tWAqjyTHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7d:ce:7d:28:3e:a5:49:02:39:35:a0:4c:76:00:c6:12:74:
         46:e1:d4:04:f6:46:28:24:f6:6d:f8:fc:aa:7c:a8:be:54:8e:
         dc:b6:b5:37:74:cc:16:69:06:ca:b9:2d:f0:c7:c3:f1:a2:96:
         98:c0:5a:fd:0c:0f:d7:d5:49:5b:fe:5e:7d:df:a2:2f:52:d1:
         16:ea:29:d1:bd:ed:34:9b:90:87:4e:eb:5b:01:ba:fb:fd:53:
         c4:38:a6:f6:92:b3:eb:41:7c:f8:4f:c8:69:3c:8c:f5:22:ea:
         61:89:4c:7c:ac:05:ed:e1:8f:2c:70:b7:5c:0a:38:50:e7:49:
         36:52:8c:9a:66:6b:6c:7f:e6:59:da:71:c6:da:22:af:60:9b:
         9e:c9:40:eb:c6:71:8a:52:6c:da:13:87:a8:0a:21:6b:6a:a3:
         b4:ae:00:54:47:d0:d2:ee:20:0b:1d:39:a4:29:97:d9:52:f2:
         f0:95:89:e0:13:09:db:f9:81:92:4a:b2:7f:ad:13:02:e9:86:
         39:19:d1:01:15:4e:85:3e:7b:0c:24:46:fb:bc:15:3c:cb:74:
         55:1f:39:cf:3f:52:d5:0a:80:eb:32:c2:08:dd:3b:fa:f4:70:
         c5:9e:af:07:74:ff:47:78:03:d5:43:eb:d2:df:f4:b3:9e:be:
         b2:9a:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:07:04 2026 by rpki-client