Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File:                     YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier:          gfLkxbbCIPTiUBRAV9loELcb9ak8X2YXT7FVo+JEsiA=
Subject key identifier:   9A:49:AC:D6:8A:BD:5E:92:C5:21:9C:73:7A:19:29:1D:F9:3D:CD:AA
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer:       /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number:          0148
Signing time:             Sun 11 Oct 2026 05:56:38 +0000
Manifest this update:     Sun 11 Oct 2026 05:56:38 +0000
Manifest next update:     Sun 18 Oct 2026 05:56:38 +0000
Files and hashes:         1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: Nmbpc4AfUaTegU1PxbK65vdgAlLYrJmsJt4vPMefOg4=)
                          2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
        Validity
            Not Before: Oct 11 05:56:38 2026 GMT
            Not After : Oct 18 05:56:38 2026 GMT
        Subject: CN=6acb2516-f75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:42:8e:64:8a:5c:a8:79:57:12:83:43:e8:
                    61:22:ad:8e:f7:e6:ae:6a:4b:7d:53:ee:50:34:56:
                    6c:8f:2a:20:42:68:ef:e5:c2:79:c6:3f:db:23:d1:
                    7d:e1:fd:fa:7b:14:cc:73:90:49:9f:1d:74:83:e8:
                    33:80:fb:b0:95:ab:4e:fc:9e:64:f3:b2:64:cb:a1:
                    a7:0e:05:d9:0d:6d:59:a0:a3:3c:45:0e:e0:8f:dd:
                    08:b2:ed:e3:a9:9d:4e:23:fa:6e:e7:ea:23:c7:5e:
                    5c:06:1b:ea:63:90:f7:47:6b:ea:32:2e:b3:9b:29:
                    46:d6:05:e7:0c:cb:34:3b:d5:45:2f:ce:b5:d8:06:
                    15:de:16:51:a8:2f:00:63:15:ed:79:1a:06:9c:2f:
                    7e:36:7d:63:54:7f:46:9f:b0:50:a5:77:b4:f9:91:
                    e7:03:91:31:cf:61:8f:54:6f:b3:81:96:05:37:14:
                    0d:37:99:4a:0d:25:5d:a5:d6:23:b9:ee:f3:ae:8e:
                    44:6b:bf:b5:e9:b6:76:2d:8e:1a:1f:78:b1:4f:75:
                    6a:e1:f3:1c:2f:13:fa:66:a3:1d:fe:e8:6a:cf:71:
                    a2:51:70:3a:f1:04:5c:72:1e:ca:ce:0d:20:2c:cf:
                    73:48:ff:e8:e0:c7:4a:6f:f1:d2:bb:e3:9c:e5:8f:
                    1b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:49:AC:D6:8A:BD:5E:92:C5:21:9C:73:7A:19:29:1D:F9:3D:CD:AA
            X509v3 Authority Key Identifier:
                keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:86:06:06:5f:4e:22:33:12:73:1a:5b:72:7d:7a:75:ba:c8:
         8b:c2:d7:c4:aa:55:a2:2b:3c:14:94:67:87:ab:5b:9f:15:4b:
         16:b8:a5:c2:55:e9:6f:e6:71:04:f1:86:1a:a6:e4:52:3d:fa:
         33:f1:00:bd:d1:ad:15:58:9f:1b:62:ee:12:a6:0b:d8:37:d7:
         ac:ef:83:9c:fc:76:eb:d2:fc:29:73:f6:c6:9e:36:04:26:f2:
         0b:0a:c2:b7:53:aa:fb:b2:56:6b:77:c3:e1:bc:c4:6a:a1:e9:
         39:b0:2c:61:4b:81:aa:58:c5:23:75:6d:0a:3a:35:de:a8:5d:
         a5:59:9d:99:79:15:0e:92:f6:5f:36:67:35:8c:e5:5e:56:5e:
         58:be:3c:b7:85:25:a3:b5:b2:aa:61:ce:9f:8f:58:7e:28:e7:
         34:58:ff:f1:fb:e6:d9:e9:31:ae:b8:1d:b2:4c:e2:be:6c:ec:
         e7:c0:5e:69:7b:70:c2:f8:83:ca:b2:f3:64:15:0e:c2:9d:dc:
         b5:77:70:1d:f4:84:b4:5e:f9:55:09:ef:ae:e3:04:4a:52:da:
         ce:18:89:91:c6:ad:63:ab:59:bf:24:cc:8f:b4:07:d6:66:97:
         d4:4c:89:3a:e1:d9:77:20:d8:04:96:90:83:41:13:0e:1a:84:
         9d:69:22:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:32:14 2026 by rpki-client