Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
File:                     _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json)
Hash identifier:          LIevJdIySRJl5UXaxJGUuZmlXzEFzOsc9d0Qt3A2EJY=
Subject key identifier:   AB:E7:AB:93:A5:3C:D4:08:97:B4:E7:AB:1E:BF:6B:E0:69:B2:CB:05
Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2
Certificate issuer:       /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
Manifest number:          021A
Signing time:             Wed 23 Sep 2026 02:50:53 +0000
Manifest this update:     Wed 23 Sep 2026 02:50:52 +0000
Manifest next update:     Wed 30 Sep 2026 02:50:52 +0000
Files and hashes:         1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: xVA8mP9qhiBKYtxNVyiuo4LRgy0EdN+f0lUhze1M22c=)
                          2: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: UCp6rrqiqQr0+NrkScEIOxBhtPkUO8ePaR/RWaljIG4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl
                          rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 02:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2
        Validity
            Not Before: Sep 23 02:50:52 2026 GMT
            Not After : Sep 30 02:50:52 2026 GMT
        Subject: CN=6ab33e8c-09a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:57:3b:24:4a:4a:ba:3e:78:c5:99:b6:c7:
                    95:51:48:5b:37:32:62:21:fd:6d:d1:0f:37:be:e7:
                    2f:23:06:bd:7d:82:fb:53:63:ac:0c:24:96:85:b2:
                    ac:fc:e6:da:1c:56:1b:7c:dc:fe:7b:42:15:29:31:
                    08:91:6f:78:db:ea:eb:1b:0c:50:e8:86:57:62:61:
                    f6:f1:8f:29:8f:eb:a8:84:27:09:05:d2:2e:6f:06:
                    b2:74:58:43:9d:23:04:d2:d0:cf:35:41:a3:f0:b6:
                    03:a5:2b:7c:44:64:2a:75:79:50:1a:9b:42:a1:bb:
                    74:fc:f4:35:e6:ae:d6:cf:f5:0f:43:ac:4f:a0:1d:
                    23:09:58:3c:c5:50:ac:5e:f2:bb:9f:f2:55:3d:b0:
                    ba:b8:79:f5:ca:3d:67:f9:fe:64:c2:2f:80:15:49:
                    61:7b:1a:54:61:56:b4:19:df:4b:3b:eb:61:e4:74:
                    65:88:b1:d5:58:ec:ff:4a:7d:7f:22:f5:af:e4:82:
                    89:df:9b:3b:b0:e0:3a:50:a6:49:15:d1:71:5b:37:
                    41:3c:34:84:70:4b:82:9b:51:8e:a5:48:2d:de:99:
                    39:39:91:ff:00:c3:fa:e3:d5:ee:aa:bf:73:e8:21:
                    18:28:36:20:ee:e9:10:db:5a:94:9e:3c:97:53:5f:
                    08:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:AB:93:A5:3C:D4:08:97:B4:E7:AB:1E:BF:6B:E0:69:B2:CB:05
            X509v3 Authority Key Identifier:
                keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:8a:ba:74:52:77:cf:08:6a:4e:71:d0:3e:3d:6b:87:c5:
         6b:0b:a5:af:0f:95:c4:e7:57:b1:e3:23:1e:65:c8:44:b3:33:
         b2:1d:0c:38:0a:72:6b:e7:e6:37:91:00:8c:a7:10:32:71:cc:
         df:7f:23:18:66:19:32:b7:d4:37:77:39:6c:e1:42:3a:0f:1a:
         b1:17:36:78:f8:5c:8d:98:5d:70:72:09:9e:e7:18:56:4e:5d:
         6e:f8:97:28:d7:10:48:95:a0:c6:fc:98:11:6e:eb:cc:b0:73:
         c3:45:2f:72:91:f7:81:b5:e7:c9:42:94:ae:9f:dd:bd:2e:e5:
         d5:d4:fd:93:a3:7b:d8:83:da:ea:09:31:f9:a4:fb:64:67:43:
         d6:11:d3:f5:6b:a8:81:03:5f:0a:d4:d8:2b:d5:94:5a:39:d6:
         15:49:c8:f5:d1:a6:6d:5b:39:c0:66:3c:dd:62:ac:2b:80:ad:
         e8:69:10:65:82:bf:d1:f4:79:7c:e6:d8:c7:92:27:1d:a4:35:
         52:61:fd:8e:b4:cb:80:60:7f:9f:06:a6:4a:9d:81:2a:ef:75:
         30:72:a1:9c:8c:f1:bc:ff:49:dd:27:01:e3:20:15:35:4b:3e:
         f8:18:f3:38:72:58:9f:e4:75:1b:3e:06:dd:d6:53:16:4a:a6:
         25:f0:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:28:39 2026 by rpki-client