Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File:                     YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier:          colnFfhtEK0X6flJLrPJ0V4j4qcH/2aD9nvS2ECA/PE=
Subject key identifier:   99:18:52:53:A3:6D:92:2B:D4:70:3E:70:6C:F7:A7:A1:CD:EA:9B:A0
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer:       /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial:       3591
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number:          3589
Signing time:             Sun 04 Oct 2026 15:02:50 +0000
Manifest this update:     Sun 04 Oct 2026 15:02:49 +0000
Manifest next update:     Sun 11 Oct 2026 15:02:49 +0000
Files and hashes:         1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: S9P/mcmnsagQ+rajWNfjiOu1NaSTQT5/eVcvweO+pKQ=)
                          2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: uxOVHBgcJguEoL3TbnbwZLffly9+xXD6OQ2b9DYKdcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13713 (0x3591)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
        Validity
            Not Before: Oct  4 15:02:49 2026 GMT
            Not After : Oct 11 15:02:49 2026 GMT
        Subject: CN=6ac26a9a-8e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:19:2c:8b:ab:3e:6b:13:ce:36:a1:6d:31:
                    da:3b:94:ca:6c:4f:b7:79:70:38:19:1d:0a:cf:c1:
                    96:5b:08:a5:0c:82:9a:83:b4:b3:85:47:82:19:f3:
                    33:a9:ce:07:78:5f:1d:8e:fb:0c:ef:3b:10:27:d2:
                    97:54:e1:13:2b:dc:84:4c:bb:8a:2e:7a:6a:6c:cd:
                    0c:51:e2:44:6e:83:5e:ac:8e:60:17:32:1b:d1:92:
                    b6:2a:4f:5e:2b:60:7e:69:bf:72:51:48:d5:f2:42:
                    9a:a1:07:83:29:fa:77:30:45:81:90:2a:db:b6:42:
                    08:89:96:8a:21:ad:dc:ea:9d:f3:71:b1:fe:10:ef:
                    ac:8f:b2:32:68:6c:23:65:02:01:aa:8c:db:8f:74:
                    8d:85:30:1c:82:85:53:1f:92:a4:3e:fb:a0:65:6c:
                    5d:c9:3d:ed:65:15:df:1d:82:3a:84:76:5a:33:ee:
                    a2:a8:b8:1e:21:63:72:4e:f9:4a:43:7d:a6:fc:04:
                    8f:89:da:a7:74:63:64:95:80:99:08:22:1d:82:d6:
                    cc:a2:4d:64:f8:cd:f8:2d:79:8e:28:8e:90:40:18:
                    ab:e4:6e:a4:f7:f1:c1:6b:d7:1f:9e:37:ae:b7:fc:
                    1e:2e:30:f4:b4:ef:d2:19:d3:5a:0a:d8:04:67:a1:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:18:52:53:A3:6D:92:2B:D4:70:3E:70:6C:F7:A7:A1:CD:EA:9B:A0
            X509v3 Authority Key Identifier:
                keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:d4:36:8d:cd:67:38:05:01:bd:40:cd:1b:98:7a:43:0f:
         c8:14:e2:1a:28:55:f9:ee:aa:19:c6:d9:7b:58:c9:0a:41:b6:
         fb:79:8a:43:2f:90:49:41:79:74:5a:cc:d0:3a:88:91:ab:b5:
         61:5e:b0:21:e8:5d:a6:e6:e7:2a:50:dc:c5:47:4c:2e:b1:ce:
         d7:df:67:b5:0b:27:fa:dd:ab:0d:a8:3c:d1:da:e3:ed:e1:f3:
         e4:90:01:62:0d:61:f8:99:d5:f3:c1:0a:ea:fa:95:73:eb:9d:
         5a:28:84:8e:15:6b:eb:21:db:04:e6:03:95:f2:a1:0f:35:d6:
         60:35:d1:a0:53:8b:d1:3f:d6:3b:30:0a:d2:e4:aa:ef:5f:15:
         a1:c4:33:71:41:47:04:61:05:f7:c9:ed:32:9e:b0:8d:83:14:
         b3:a1:5b:81:2b:dd:47:4a:19:77:45:c8:c4:40:f3:cf:49:8d:
         16:d7:8d:c1:d3:99:6f:1c:c9:40:a2:12:da:19:ec:37:a8:d8:
         fc:e5:bb:59:87:b2:b8:ed:b5:34:a7:02:02:f5:25:02:25:80:
         6f:41:37:97:62:d8:eb:b3:8f:2e:4a:d4:fb:12:41:5a:48:21:
         a3:25:c3:0e:b0:30:1a:39:64:28:28:c4:06:d0:fa:e5:57:3f:
         f1:78:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:50:28 2026 by rpki-client