Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File:                     yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier:          sZ4eFdw2MKjcR0ZF+ZyDXF+hxbEc/obeK0ZS0/y1rTk=
Subject key identifier:   0E:3F:FF:18:50:67:DF:24:6C:94:15:44:9F:29:50:BC:C4:2A:B9:C9
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer:       /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial:       0C25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number:          0C1B
Signing time:             Thu 24 Sep 2026 18:45:50 +0000
Manifest this update:     Thu 24 Sep 2026 18:45:50 +0000
Manifest next update:     Thu 01 Oct 2026 18:45:50 +0000
Files and hashes:         1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: 39ARq7yrJEYi5aibNP8PtvYH8CkES6c7nXTb8O+GIDc=)
                          2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: zYt9aMZ+O8CRpxULcPzMchvE4WlyLPK1U5WVZqzWIF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3109 (0xc25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
        Validity
            Not Before: Sep 24 18:45:50 2026 GMT
            Not After : Oct  1 18:45:50 2026 GMT
        Subject: CN=6ab56fde-7803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:e5:aa:46:e7:a2:24:39:89:b8:95:16:aa:
                    4d:23:16:b0:0d:ed:68:8a:89:2b:c0:80:d5:7c:14:
                    b1:f4:98:04:b0:4b:27:59:42:a4:3c:2a:e1:5a:73:
                    86:33:78:74:50:57:54:ec:2d:4c:74:18:ee:0a:ba:
                    f6:3e:12:7b:8b:dd:92:24:e7:10:78:5a:10:30:34:
                    71:dc:69:20:0e:85:7a:92:d6:f0:27:d2:48:4d:95:
                    73:b6:b3:a8:6c:3f:8a:47:2f:8d:bd:00:36:1e:9b:
                    72:db:6b:39:6b:26:e7:ae:a2:3b:20:ad:34:8b:d7:
                    1a:82:4d:67:b0:61:42:84:7f:d2:1e:6a:ed:92:b7:
                    2a:bf:9d:ae:09:a6:89:d7:91:cf:0f:e9:03:1e:11:
                    78:b9:7f:32:9e:52:9c:38:5b:9e:ab:88:fa:49:9d:
                    40:6b:c7:b8:ac:d2:6e:92:13:34:d0:42:c1:3f:ad:
                    80:23:46:5f:58:a4:f9:e5:30:af:20:e4:1c:fa:1a:
                    ed:32:a2:f7:9a:2a:68:84:94:de:ac:c9:c3:be:5b:
                    b5:44:0c:fa:80:94:86:a5:fd:6f:0f:f8:90:97:f2:
                    68:4a:9b:4e:11:c0:e8:d7:6f:0c:30:e2:64:cc:7f:
                    7d:c4:94:45:81:e1:f3:c7:22:0d:55:2a:d2:03:77:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3F:FF:18:50:67:DF:24:6C:94:15:44:9F:29:50:BC:C4:2A:B9:C9
            X509v3 Authority Key Identifier:
                keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:c5:6f:b2:56:9c:ec:1a:14:7e:2a:1b:0a:8d:35:c3:38:
         97:bc:d7:d7:d4:fe:0a:1d:08:92:e4:04:60:c7:f6:eb:15:de:
         15:14:c1:ef:6d:43:25:41:8a:6d:9f:f5:67:3d:2a:dd:eb:d1:
         57:d2:64:9e:6c:24:6d:f1:fa:24:d4:7f:7e:2c:07:4f:4e:16:
         07:74:99:62:d7:7d:f0:bd:19:18:c0:3f:26:11:02:0d:cd:c9:
         78:ae:fd:50:7f:34:b3:b5:fb:57:bb:4c:e8:ce:cf:3b:e9:a9:
         9c:0a:b3:a6:5f:ad:62:4b:3b:c0:d4:fd:ae:42:03:68:a7:7d:
         2a:0b:ac:09:3e:a1:3f:f9:fe:0d:3b:82:fa:a5:47:64:37:73:
         46:03:1a:61:1e:fa:48:f9:c1:4f:73:dd:8c:a5:70:00:27:2f:
         c3:a5:96:16:23:4a:b2:ec:78:27:5a:96:6e:28:21:60:35:28:
         f0:c2:5b:43:34:57:e0:17:8f:4a:e4:6e:76:3c:78:3c:3b:2b:
         ad:3c:ba:eb:94:b8:43:e6:b8:da:61:50:aa:86:52:ae:f8:c5:
         2e:d4:2c:c7:f1:a4:ca:59:b9:b0:27:f2:52:ef:76:28:da:c5:
         96:5b:31:ec:0b:c2:d3:fc:ad:a3:a1:b0:42:a3:33:bb:94:fa:
         18:96:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:33:48 2026 by rpki-client