Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
File:                     YeHcZf1qxNvqavowAYEqsc6h248.mft (raw, json)
Hash identifier:          BZ38rmiTUC1xI3dmt8s5TjgZGr4HrmY8+DrQ2fnE760=
Subject key identifier:   41:75:DB:71:7A:46:28:51:6D:D3:9E:BE:79:98:2D:58:B5:A3:F0:1B
Authority key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Certificate issuer:       /CN=A9119D72/serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
Manifest number:          44
Signing time:             Sun 11 Oct 2026 09:04:47 +0000
Manifest this update:     Sun 11 Oct 2026 09:04:46 +0000
Manifest next update:     Sun 18 Oct 2026 09:04:46 +0000
Files and hashes:         1: YeHcZf1qxNvqavowAYEqsc6h248.crl (hash: NuReDRSaHw3ILlPGqAJIjVCY9JMFUUxFSfEE+dcRr+s=)
                          2: 26787AF65D6D11F1AC5A3C58BE833773.roa (hash: aAazDlvlst4QJf10A0nu+4NUqP8Vp7PTtF9Qpr/s7GM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
                          rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
        Validity
            Not Before: Oct 11 09:04:46 2026 GMT
            Not After : Oct 18 09:04:46 2026 GMT
        Subject: CN=6acb512e-1e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:a6:11:f8:e9:f0:1e:db:12:c1:bc:72:9e:
                    47:e2:8f:c4:82:6c:8b:fc:2c:d9:49:9b:db:ad:22:
                    2e:5d:31:43:8d:5c:d1:05:e5:41:d6:b4:7b:a4:34:
                    20:ad:a4:a7:89:38:62:04:d2:29:39:f6:19:1a:73:
                    75:b3:67:a3:52:32:46:b1:b1:bd:27:fa:f5:b5:10:
                    f0:74:d5:8b:ed:75:4f:65:b3:7e:66:6c:ce:92:73:
                    4c:fe:1e:45:dd:17:98:a2:e4:bc:61:13:8d:fb:76:
                    35:71:2a:d6:a5:e7:32:07:5f:aa:21:b9:4f:1c:5c:
                    39:71:e1:e6:42:36:2e:8f:3b:74:e3:b5:d9:ed:e5:
                    21:64:1e:6a:0f:a9:58:fa:96:10:11:cb:de:7b:1c:
                    b8:4f:f5:8f:5f:66:c1:cb:a4:d0:9a:b0:10:40:73:
                    df:1d:27:df:4a:e9:56:e2:5a:de:7a:a5:a2:19:3f:
                    df:c3:86:0f:26:80:4f:d9:79:6d:55:32:37:2c:b1:
                    cb:a7:ca:ab:e7:81:97:67:7a:e7:12:4d:09:fb:fa:
                    a3:09:85:3c:ea:35:ac:dd:f4:a7:cc:67:a9:8c:c6:
                    11:87:10:50:7e:41:f0:41:d9:38:36:be:89:7b:b4:
                    e7:98:92:9f:91:a9:0b:65:d0:6b:94:f4:bd:86:8e:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:75:DB:71:7A:46:28:51:6D:D3:9E:BE:79:98:2D:58:B5:A3:F0:1B
            X509v3 Authority Key Identifier:
                keyid:61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:ef:69:08:d6:c2:69:8f:da:3d:e3:d9:b3:29:ed:f3:b4:
         ba:55:75:bd:87:ab:33:59:a2:cd:4b:82:dd:35:95:81:6f:9e:
         b5:57:43:47:5f:47:56:97:0a:37:6a:02:5f:6d:25:d1:04:ee:
         d0:ff:f3:a4:58:e2:e0:b5:19:0e:a6:a7:65:ac:10:ff:6e:e5:
         fb:f9:01:fc:54:47:71:5b:67:a1:92:0b:e1:c3:5a:e9:00:be:
         7d:ec:7f:b6:ba:bd:2c:24:3c:c5:c4:84:a9:3b:60:3b:9d:75:
         9b:c2:ff:75:94:d8:51:90:a6:3e:23:a1:e5:59:59:0a:5e:1b:
         81:66:6a:a2:d3:0e:cc:3a:8c:bd:f2:39:83:8c:e4:9e:54:57:
         18:29:32:69:00:9e:16:10:b4:c8:a3:b1:aa:e5:e3:f3:8a:2c:
         4b:68:d9:9e:b6:87:dc:47:41:c8:08:33:f9:dd:37:78:2f:fe:
         09:33:05:f2:09:09:af:d3:5d:45:46:f2:8f:d5:cf:70:cf:91:
         36:a9:b3:5b:da:51:9c:79:5d:a6:6c:b6:50:58:94:3a:3c:71:
         a8:38:09:f9:2d:66:77:e5:ce:aa:f0:9b:96:f4:3f:69:4b:cf:
         5f:79:b1:1b:71:d6:29:c8:b3:46:ac:aa:6b:1b:58:ee:ab:cb:
         e5:cf:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:34:34 2026 by rpki-client