Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
File:                     hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json)
Hash identifier:          tJYq5uAK0ByZbCkpsyeCQNJpEEW2yIZX7pRPgotZx6k=
Subject key identifier:   E3:F3:EE:A7:20:4E:7C:6E:63:64:95:BA:41:6D:3B:DA:90:AA:2E:23
Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E
Certificate issuer:       /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
Manifest number:          01F3
Signing time:             Mon 05 Oct 2026 03:38:21 +0000
Manifest this update:     Mon 05 Oct 2026 03:38:20 +0000
Manifest next update:     Mon 12 Oct 2026 03:38:20 +0000
Files and hashes:         1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: Z+bLUTmsxfIdSB9ltPodGDUCsjYzs8cRboCQzUMfQt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl
                          rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E
        Validity
            Not Before: Oct  5 03:38:20 2026 GMT
            Not After : Oct 12 03:38:20 2026 GMT
        Subject: CN=6ac31bac-b865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:a0:24:bd:62:38:1c:60:7c:27:29:2d:04:
                    b3:14:1a:28:ab:00:a5:54:2b:5b:8c:d8:ec:fa:e8:
                    cf:b5:a5:a6:29:db:68:8a:e1:f1:28:9c:2b:1f:82:
                    b4:2d:f5:3c:48:6a:04:d5:bc:1b:56:d4:31:aa:10:
                    81:5f:59:28:9b:b3:cc:35:c4:dc:ad:02:e1:78:51:
                    bc:f5:81:7b:c8:24:d6:53:43:a7:37:10:b5:3f:67:
                    8a:45:f7:63:a6:aa:24:b9:e6:9c:5a:2e:02:53:07:
                    a7:d8:4e:4b:cb:4d:8c:51:0b:9f:1a:14:fd:f0:07:
                    e7:94:f2:2a:98:0a:f0:84:7c:78:12:7e:de:8a:5a:
                    cb:1f:24:33:54:85:16:5e:b7:54:a5:58:bd:4b:fd:
                    b0:46:65:b6:c8:bd:e3:45:95:0c:14:2d:a7:5b:ef:
                    b7:f0:02:fb:32:d7:25:78:b4:d6:b5:0a:6b:4a:ad:
                    e3:20:c5:10:ed:de:f5:f4:65:ac:3a:ab:6d:d1:69:
                    4d:83:63:f4:3a:d1:47:fb:91:c8:e7:40:8c:97:5e:
                    67:f2:76:fc:1a:42:b0:72:f1:a0:e6:41:d9:45:f9:
                    92:50:7c:a1:9f:32:8e:01:2e:a1:ad:73:18:50:0a:
                    f2:9d:87:d1:41:9b:53:0f:3b:5a:79:54:5a:6a:33:
                    ad:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F3:EE:A7:20:4E:7C:6E:63:64:95:BA:41:6D:3B:DA:90:AA:2E:23
            X509v3 Authority Key Identifier:
                keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:8a:6c:a0:36:e3:b1:23:70:2c:d3:1c:a7:4a:e1:e7:59:
         44:b6:04:41:05:c0:50:dc:df:59:df:92:bc:29:c2:83:7c:f4:
         cb:fb:50:11:97:90:7d:ec:3d:ab:74:2c:87:67:a9:8f:b4:7e:
         28:d4:43:79:b7:16:bb:71:04:09:8f:f9:69:12:9c:99:1f:1b:
         36:10:ca:ae:72:97:24:3e:b4:f8:8b:82:6f:36:c9:09:4f:3e:
         74:3b:cc:cd:40:f6:77:85:aa:30:65:f5:8f:55:d6:0f:14:5e:
         66:ba:f1:e2:e0:94:14:a7:e2:bf:7c:10:4a:9b:c2:a3:7c:a8:
         4e:87:a3:c0:46:af:13:88:04:a1:2f:7e:e3:78:4b:bc:63:8a:
         93:60:3b:c2:8b:8f:77:f1:f9:25:af:b3:31:9c:65:e9:de:b3:
         9d:bc:fa:f1:e9:59:c5:70:55:91:50:18:e2:d9:35:16:c8:df:
         9b:ca:72:30:01:b0:80:0d:e9:6a:77:92:ef:fb:b0:bf:87:ea:
         d7:ec:59:b5:3f:8a:de:ce:5d:8b:74:92:b7:fe:fb:1b:4e:6e:
         59:9a:87:11:08:97:d9:cf:55:15:4a:1d:fa:82:79:c4:39:1d:
         41:fd:e4:7a:91:4f:36:10:4a:37:a1:44:b9:c9:15:c0:bb:91:
         d8:20:3d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:21:29 2026 by rpki-client