Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
File:                     yQAUCbkkczpO3wFaUtzUE8xJuFA.mft (raw, json)
Hash identifier:          6TmAqXnAYRSYVsGESOz8nWYjYBMB6hdcPyRKggD3WvM=
Subject key identifier:   90:22:72:D4:2F:49:71:19:7A:7E:D5:9C:6A:41:89:46:B6:94:79:7D
Authority key identifier: C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50
Certificate issuer:       /CN=A9110DC8/serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
Manifest number:          17
Signing time:             Fri 25 Sep 2026 09:13:37 +0000
Manifest this update:     Fri 25 Sep 2026 09:13:36 +0000
Manifest next update:     Fri 02 Oct 2026 09:13:36 +0000
Files and hashes:         1: yQAUCbkkczpO3wFaUtzUE8xJuFA.crl (hash: ZQn7MV/zEc8C7+qMVNE2IWCsNIHsdPATsiMiITNnFe0=)
                          2: 3EF53D4AAC4A11F199EB65634211F970.roa (hash: FSEebEPFVWkVjoqVliVL4Vc0nC/1o7SgkRxMZgCnPtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl
                          rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110DC8, serialNumber=C9001409B924733A4EDF015A52DCD413CC49B850
        Validity
            Not Before: Sep 25 09:13:36 2026 GMT
            Not After : Oct  2 09:13:36 2026 GMT
        Subject: CN=6ab63b40-c589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ba:71:69:a1:8b:37:4b:b0:03:32:88:b7:e6:
                    69:cc:d0:48:99:80:62:c1:5c:2b:5e:cc:40:57:4b:
                    94:a9:a8:72:dc:5f:1f:bd:db:0e:d3:ea:fe:ba:4d:
                    dc:f3:b6:fe:4a:ac:77:cb:59:1c:09:f4:e7:82:43:
                    d3:2a:27:5f:98:b2:83:74:eb:3c:53:35:60:fb:07:
                    77:25:c0:4d:cf:53:ab:44:7f:04:91:48:b6:5c:9a:
                    2e:42:7b:3d:1f:f7:74:d6:62:4a:4b:37:e9:ef:7d:
                    be:b3:84:ba:27:ab:9d:f7:7b:f2:43:e8:d6:dc:3d:
                    01:c5:c4:0f:f3:d6:0c:a6:6e:95:87:d8:83:aa:8a:
                    36:fc:33:1a:a5:27:86:6c:5c:ee:d2:86:fe:8e:a2:
                    5c:86:93:38:1b:c5:57:63:db:b9:a2:3a:c7:72:38:
                    5a:4e:8f:06:f0:24:94:76:ec:21:8e:c0:ba:3e:63:
                    e1:52:e1:79:86:ba:5c:da:d4:8e:c1:4b:59:ec:5f:
                    a7:3f:f4:1d:55:1b:3d:c7:6c:7e:6b:e4:36:86:85:
                    f0:37:40:1f:47:c4:b8:ec:ff:8f:d0:79:a7:89:5f:
                    86:fb:ee:ab:30:74:29:a6:f3:30:3a:70:b5:4b:f0:
                    8d:23:ee:ce:c5:0d:52:32:2e:0e:63:6c:a4:4d:78:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:72:D4:2F:49:71:19:7A:7E:D5:9C:6A:41:89:46:B6:94:79:7D
            X509v3 Authority Key Identifier:
                keyid:C9:00:14:09:B9:24:73:3A:4E:DF:01:5A:52:DC:D4:13:CC:49:B8:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQAUCbkkczpO3wFaUtzUE8xJuFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110DC8/47A94BA89C0411F18BC4D3006B11F970/yQAUCbkkczpO3wFaUtzUE8xJuFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:3b:7a:81:03:6b:ac:dc:66:26:e1:e6:ea:89:f3:f1:5f:44:
         b2:e6:7f:52:49:98:4f:6c:2a:69:ff:53:0e:c7:57:67:e9:83:
         4e:9c:a9:65:33:19:3e:bf:a0:a1:61:d5:1b:99:d4:55:2c:aa:
         ee:97:bb:5b:cd:61:38:db:8a:86:ad:48:3f:f9:ac:b5:50:da:
         f2:f0:c5:7a:34:d9:b9:91:bb:96:0f:77:00:ae:81:7d:f9:8a:
         3b:3e:0c:34:0d:66:fc:f6:2c:ba:eb:50:fa:62:f7:12:a3:ea:
         7f:72:1e:db:e5:eb:64:d0:e5:57:2c:e2:3f:6b:d7:fb:d6:33:
         01:f8:fd:67:65:c0:d6:d9:52:9d:52:40:45:18:a8:9e:f0:75:
         53:31:76:38:f4:de:6c:2b:9c:18:fa:00:6b:76:83:f3:90:96:
         03:65:0d:a9:36:04:08:f1:82:ee:32:0e:89:30:43:cd:9b:07:
         6c:91:37:61:4d:33:40:ef:2d:08:71:f0:81:c1:1b:25:63:40:
         94:34:b0:51:83:b2:cc:f0:83:69:50:83:a7:05:7a:52:44:9e:
         67:a7:f8:eb:7a:75:e8:34:c7:06:61:59:db:f8:14:f9:a8:71:
         8e:b0:19:be:18:97:ad:48:ca:2a:ef:c8:fc:17:c4:79:38:7d:
         b1:b5:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:39:25 2026 by rpki-client