Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File:                     ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier:          u2/VEDbvuUYc3ITK0SaiSVXW9drsK4rhto1I0C1pOmo=
Subject key identifier:   1D:15:60:84:6F:22:BB:F3:C0:0A:09:A3:B3:BA:99:36:80:0C:08:38
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer:       /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number:          02CE
Signing time:             Mon 21 Sep 2026 01:19:15 +0000
Manifest this update:     Mon 21 Sep 2026 01:19:14 +0000
Manifest next update:     Mon 28 Sep 2026 01:19:14 +0000
Files and hashes:         1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: uMSDatZxkRuU4CMCeDKylHaLT0SnPS2uRh2GKdbLdY0=)
                          2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: Q1RfYknRnpFb4jNQ61WjgyCjXaW4u7sCYH8KXBu1k40=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
                          rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
        Validity
            Not Before: Sep 21 01:19:14 2026 GMT
            Not After : Sep 28 01:19:14 2026 GMT
        Subject: CN=6ab08612-64c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:6b:f6:62:9e:bb:b3:7a:40:5c:21:43:9e:
                    12:2c:0b:ec:e0:b9:36:af:32:9e:11:99:60:45:60:
                    ca:da:e3:c3:9f:7a:39:32:f7:80:66:a0:63:e4:98:
                    49:c0:2e:66:f2:82:3b:60:f9:a3:05:28:ce:ef:fd:
                    d9:2c:d5:83:93:69:01:84:d4:51:07:60:df:e9:05:
                    54:b9:e7:d0:ea:bd:f0:3c:cd:3a:90:2d:e2:af:b4:
                    c1:68:7e:9b:e9:f7:c1:49:3b:d8:fe:1e:1b:aa:29:
                    9a:32:25:b5:6c:02:e3:28:9e:97:96:94:22:e7:c6:
                    e3:3f:bc:1d:de:29:04:31:c4:4c:db:7b:be:14:d2:
                    e4:66:c0:ce:c0:92:4e:f5:73:28:10:71:77:4c:28:
                    89:c6:16:df:41:8d:98:8d:6f:51:79:31:b8:01:08:
                    d0:ad:7f:36:62:1a:db:ff:ec:88:c4:aa:93:da:5f:
                    45:66:97:87:15:ca:40:8e:1f:fb:7a:86:df:69:c7:
                    f7:ec:e7:00:ba:66:3a:57:08:bd:47:ef:bf:f4:e3:
                    cd:de:79:43:89:22:51:de:bc:8f:10:34:52:9b:1c:
                    51:ae:6a:47:13:4c:de:f9:b6:f8:47:26:b5:09:a9:
                    f1:df:3a:5c:e5:94:e3:81:48:d4:08:47:ac:2a:c7:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:15:60:84:6F:22:BB:F3:C0:0A:09:A3:B3:BA:99:36:80:0C:08:38
            X509v3 Authority Key Identifier:
                keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:f2:48:d3:f2:9f:cd:3f:1a:c9:92:af:eb:7a:86:0b:a8:
         6d:48:3a:3b:d8:29:50:c5:ce:9b:02:85:2d:b2:4e:8c:ed:63:
         b0:ba:f2:7c:a8:84:19:24:e6:8a:c9:57:92:49:ea:4e:b5:23:
         7d:16:62:8c:30:85:1d:3d:a8:e3:a9:df:7d:7a:f5:00:da:a2:
         7c:20:61:e3:9b:de:70:71:cf:0b:ac:41:ea:7c:35:ec:0d:3f:
         6d:9a:1d:b6:6b:94:d1:fd:20:9a:f4:af:e8:35:fa:a1:2b:ce:
         57:88:6d:14:77:7d:f7:70:78:76:94:70:e4:59:1f:5e:0e:59:
         a3:08:bd:b8:48:61:2e:fd:66:2f:18:3b:2c:c6:f8:b5:e9:8e:
         b6:f5:3c:16:2b:ae:04:d7:76:97:2c:79:56:06:ed:b7:93:d1:
         44:62:03:5e:d1:84:02:10:7b:5d:d5:28:24:8f:ee:e9:13:df:
         72:89:e6:3b:d5:df:57:b3:cb:3d:ce:23:29:a0:1d:39:82:1d:
         60:a5:4f:86:0c:aa:5e:63:6c:bc:42:af:f1:88:64:5f:76:16:
         f9:da:97:26:7c:60:3d:c2:4d:e7:ac:27:95:84:53:3a:a1:01:
         73:0d:26:ec:a9:9a:b6:22:3f:ce:6f:1d:a3:a2:25:fd:67:69:
         51:b3:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:37:27 2026 by rpki-client