Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
File:                     YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft (raw, json)
Hash identifier:          PVshupxGja1lR+38DU/zUXOLskQSAFW0lf6wOxKKDvQ=
Subject key identifier:   53:C1:7C:7C:9B:C9:B5:7B:A9:18:28:27:A7:3C:91:05:7C:83:0A:85
Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
Certificate issuer:       /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
Manifest number:          0288
Signing time:             Wed 07 Oct 2026 02:14:27 +0000
Manifest this update:     Wed 07 Oct 2026 02:14:27 +0000
Manifest next update:     Wed 14 Oct 2026 02:14:27 +0000
Files and hashes:         1: YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl (hash: Np3SMm2BYnuKQ36+2BRGotPkB7cOebMu1JFEj8nsVT4=)
                          2: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (hash: kXMMTzpfUp5tzsj3ErSeWyi6kiUv6/A6nv/Z2vTJWmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
        Validity
            Not Before: Oct  7 02:14:27 2026 GMT
            Not After : Oct 14 02:14:27 2026 GMT
        Subject: CN=6ac5ab03-2309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:5f:fe:1b:3f:9e:26:14:3f:27:e8:90:01:
                    08:6d:86:38:12:c9:85:06:45:16:b7:37:ba:95:ee:
                    c2:b1:5c:3f:cd:5a:a5:65:02:11:94:51:d5:b0:14:
                    b4:4f:05:05:1c:73:d2:27:a8:76:46:f6:8e:74:bb:
                    e7:1c:db:db:88:9b:cb:46:10:5a:07:cf:a9:e0:27:
                    77:1c:9f:85:07:b0:b5:40:de:1a:2e:8d:9b:e8:1e:
                    07:1e:b6:74:f7:97:14:ec:6d:ea:fb:fb:fd:c7:2e:
                    ae:6e:07:1a:5a:e9:3a:f9:b0:e6:92:a5:f7:0f:0a:
                    c0:e4:39:80:3e:e0:c4:c2:ac:00:db:11:19:bb:80:
                    d1:58:34:17:61:fc:cd:cb:2c:fa:00:db:6f:41:fe:
                    8c:e5:cb:3c:ec:65:09:c6:72:86:1a:4d:b8:ba:c6:
                    e8:65:38:e7:61:ba:a8:43:0b:48:9d:35:28:51:dd:
                    68:bf:a0:cc:5b:40:3a:bc:2b:eb:5b:8d:55:2f:4d:
                    e5:9b:9d:81:be:02:39:88:25:b6:bf:ce:8d:54:6f:
                    c2:54:08:a4:31:f2:4e:90:ce:31:94:05:6a:01:ce:
                    d5:77:fb:0c:04:97:70:ff:ed:4e:1b:04:9a:79:d5:
                    46:a9:19:e6:da:b0:1f:28:bf:62:bc:30:47:8d:0c:
                    26:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C1:7C:7C:9B:C9:B5:7B:A9:18:28:27:A7:3C:91:05:7C:83:0A:85
            X509v3 Authority Key Identifier:
                keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:72:11:3f:2a:08:46:37:26:2b:11:c1:19:f3:5e:88:d9:0b:
         4f:55:3c:6b:80:93:bc:f9:b7:51:6b:56:2a:49:88:e1:92:0e:
         52:b9:47:3f:d2:5e:aa:78:3c:dc:ce:c1:8d:7c:5c:6c:e0:4d:
         45:0d:de:8b:f1:17:54:de:ae:ba:20:96:8e:20:19:13:0f:ad:
         37:f9:62:6c:34:a3:61:19:5c:72:e9:81:5a:7a:57:a1:4b:00:
         29:87:d0:ce:77:c6:35:b1:b9:e1:b6:61:14:2c:df:ae:6c:9d:
         14:14:f3:e6:9f:d5:5d:51:48:8b:70:8e:de:fc:85:b4:9f:7b:
         44:eb:1b:ab:0d:dd:8c:77:e7:66:3e:6b:a8:73:6f:4d:b3:8a:
         7c:b9:2b:c9:20:65:f4:8d:b3:68:40:67:58:86:a2:98:f5:59:
         53:38:92:ce:30:3c:44:d6:c5:a2:cb:b1:61:e1:4c:4c:e6:28:
         e3:f8:54:0b:c4:98:f3:a0:88:fe:19:85:99:79:82:b4:19:f5:
         43:ae:6f:a5:e0:bb:c3:92:c9:81:67:3e:e1:94:b3:ee:97:50:
         0c:f3:cd:b3:4b:bf:1c:e3:b4:57:34:50:9c:86:33:93:d7:67:
         9c:e0:b4:7b:af:33:92:2b:c7:f6:96:51:6b:a5:6c:9d:79:47:
         50:aa:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:02:20 2026 by rpki-client