Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
File:                     YykwQRnxpH9dBkCy33Xe8fZMe68.mft (raw, json)
Hash identifier:          FuyzM5PSkHmu8WBNu2tZneN8CcKbM3IupKEd0Rex1l8=
Subject key identifier:   7B:12:DE:12:86:8C:AA:0D:EA:72:BE:8E:28:4F:06:21:0A:01:F7:D7
Authority key identifier: 63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF
Certificate issuer:       /CN=A91DBAF1/serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
Certificate serial:       0867
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
Manifest number:          0853
Signing time:             Mon 28 Sep 2026 21:08:41 +0000
Manifest this update:     Mon 28 Sep 2026 21:08:41 +0000
Manifest next update:     Mon 05 Oct 2026 21:08:41 +0000
Files and hashes:         1: YykwQRnxpH9dBkCy33Xe8fZMe68.crl (hash: yGEu6xUIiGR+gTeSb+UgDIwjsvn1ZMNTIRKCxglbqr4=)
                          2: 4AE7A8EAFE2311EEB71BBB76C4F9AE02.roa (hash: zGjBv3KjTdJ9K8ezQZ4lGTuieMHEGvxttP2L5olrWPo=)
                          3: 261A4C3432B611EBBB18F11EC4F9AE02.roa (hash: Bjs5lfBqpZzgmWDJV0Xu1gn8UB3T2IWjUyjfP7AxZYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 21:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAF1, serialNumber=6329304119F1A47F5D0640B2DF75DEF1F64C7BAF
        Validity
            Not Before: Sep 28 21:08:41 2026 GMT
            Not After : Oct  5 21:08:41 2026 GMT
        Subject: CN=6abad759-fb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:73:99:35:c1:95:f8:44:52:21:4d:3c:07:
                    d4:f0:6f:56:c6:f2:7c:00:5c:b9:fe:be:6c:09:51:
                    46:cc:52:28:66:d6:62:5e:32:8b:ae:49:62:78:ab:
                    29:0b:79:30:5f:b6:3b:96:de:b5:a3:ae:4a:31:4f:
                    b7:38:a8:0b:de:bb:dc:9a:10:c8:c7:48:d6:db:a4:
                    45:2d:e9:23:1a:03:b6:87:22:d4:6c:01:bf:60:fd:
                    f3:12:01:f8:83:22:f7:a6:74:77:2a:9a:e1:31:d2:
                    4a:78:17:f1:ec:33:38:52:7b:92:00:6e:81:0c:cc:
                    5a:c6:f2:20:08:2a:5f:cb:a7:18:10:31:f2:32:48:
                    07:56:5e:93:17:e7:a0:c6:f1:05:5e:f5:96:d9:14:
                    ec:75:c0:29:31:f2:71:cb:11:9a:92:ff:da:8b:7c:
                    20:c6:2b:03:77:af:2c:dc:5f:f2:0d:6f:c8:b3:90:
                    b6:cd:86:7a:2e:5b:70:d9:54:ca:ff:eb:a1:d9:9f:
                    1b:51:56:4a:0f:d7:0e:01:ab:7c:fc:33:8a:30:a4:
                    d3:4c:8c:cb:05:01:3f:58:2d:65:88:57:a1:42:64:
                    89:78:bc:aa:79:55:92:22:88:7d:2d:62:3b:c6:d2:
                    26:17:1b:ad:b1:44:df:96:f3:c8:ae:44:80:b5:0c:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:12:DE:12:86:8C:AA:0D:EA:72:BE:8E:28:4F:06:21:0A:01:F7:D7
            X509v3 Authority Key Identifier:
                keyid:63:29:30:41:19:F1:A4:7F:5D:06:40:B2:DF:75:DE:F1:F6:4C:7B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YykwQRnxpH9dBkCy33Xe8fZMe68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/8FE7A8B8248E11EBABEF2B2FC4F9AE02/YykwQRnxpH9dBkCy33Xe8fZMe68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:75:3c:2b:7c:9e:e9:22:4e:fd:19:d0:40:2e:1c:3c:37:9d:
         45:ba:f3:a8:a6:e8:54:fd:f3:41:1e:50:f5:44:9d:60:b5:dc:
         8b:30:4f:96:e2:95:2e:ef:5a:52:66:e1:59:68:51:bb:51:4a:
         dc:30:86:b8:06:e5:c6:d1:d2:73:56:a5:98:d1:13:2a:9e:a5:
         71:19:c8:24:da:20:9c:1e:51:b2:78:c3:59:1c:e8:6e:26:2b:
         c0:74:e8:b7:97:76:e5:05:a0:3a:4a:2b:df:e1:e5:db:e7:b5:
         d8:61:17:14:47:66:6d:a9:92:6a:07:31:d6:92:c6:2f:d5:2f:
         3f:3a:9e:b2:27:a7:68:0e:68:8f:57:dc:55:35:53:c8:cb:16:
         07:78:22:30:66:c9:f5:a7:84:ab:e1:3b:e5:21:c6:e2:5f:4e:
         f6:c4:d6:cb:f8:19:a4:22:26:1b:01:d5:47:a2:c3:43:fa:65:
         1a:65:8d:3e:fe:19:15:14:86:f3:5e:bb:53:43:08:b6:4e:07:
         5f:01:c4:2f:ac:1c:2a:b6:67:37:b8:53:e0:40:84:8a:6e:0c:
         98:88:74:35:43:74:98:b2:b5:60:03:8d:58:a1:e8:ef:b0:9b:
         c5:e1:99:ca:65:39:e7:7f:1f:29:bf:d9:12:3f:c2:56:a2:d1:
         de:d7:93:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:29:45 2026 by rpki-client