Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
File:                     yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft (raw, json)
Hash identifier:          ujVkoGolFZ8S0tpiK+vfj80FJfoNJmucsPxdmX7fBGQ=
Subject key identifier:   A6:AB:85:21:15:7D:44:9F:4F:30:A4:16:42:96:3A:B5:91:AA:EA:41
Authority key identifier: C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82
Certificate issuer:       /CN=A912B2EE/serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
Certificate serial:       107A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
Manifest number:          1063
Signing time:             Fri 02 Oct 2026 17:34:45 +0000
Manifest this update:     Fri 02 Oct 2026 17:34:45 +0000
Manifest next update:     Fri 09 Oct 2026 17:34:45 +0000
Files and hashes:         1: yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl (hash: RMJlOl7UHzvSBclyApUBrM2ng4J8hvUjm1suCIk0mMk=)
                          2: 05449490E17B11EC93AB7473C4F9AE02.roa (hash: 8Pao0AT8dxW6T4CwAgWpHWpXxG/CEjpNqpmyQLKWTcA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl
                          rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4218 (0x107a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B2EE, serialNumber=C824347425BAC8AF59B4E1966BC10DBFA8BDAB82
        Validity
            Not Before: Oct  2 17:34:45 2026 GMT
            Not After : Oct  9 17:34:45 2026 GMT
        Subject: CN=6abfeb35-a38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:a7:61:f3:93:49:4d:8f:ac:c0:5f:43:79:
                    a0:40:51:07:d9:e2:53:a7:e7:c0:48:1f:6a:92:43:
                    ca:52:a7:9d:40:2e:25:2e:0c:17:f6:ed:4f:39:de:
                    73:ec:03:0b:20:88:eb:d2:c0:0e:e8:f5:e4:28:9a:
                    3f:61:30:b6:c1:c4:1e:82:65:15:b1:4a:f6:67:53:
                    47:df:d3:a9:55:90:19:02:7a:8e:ae:0a:95:04:c2:
                    6a:a4:5d:a0:58:a1:ca:1e:87:09:05:61:c1:b4:0f:
                    4c:37:90:a2:94:5e:79:af:a0:18:7b:e5:e0:0c:dc:
                    64:f2:2b:dd:43:3a:56:e1:74:33:a2:90:44:74:87:
                    f4:dd:5b:f9:53:7b:f3:a4:0c:71:4a:29:b0:67:d1:
                    b8:ef:f4:52:3f:4b:bb:a0:2d:24:da:15:f1:9b:91:
                    64:eb:37:2a:99:c7:f3:a5:e6:9f:08:74:aa:7a:c1:
                    75:3d:f4:ca:ff:f4:54:81:84:1c:ce:f9:71:1c:58:
                    9f:30:9d:ea:93:62:f9:6e:a4:94:98:8b:77:35:fc:
                    2f:d0:51:9b:5f:a2:c5:5e:72:91:aa:6e:09:a3:11:
                    50:b5:a7:1e:4f:0f:99:0e:b1:28:a4:43:87:d9:35:
                    89:53:39:e0:b2:99:ba:ed:f4:3d:18:a8:3b:31:f5:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AB:85:21:15:7D:44:9F:4F:30:A4:16:42:96:3A:B5:91:AA:EA:41
            X509v3 Authority Key Identifier:
                keyid:C8:24:34:74:25:BA:C8:AF:59:B4:E1:96:6B:C1:0D:BF:A8:BD:AB:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B2EE/1F411F586C2111E9B76FA909C4F9AE02/yCQ0dCW6yK9ZtOGWa8ENv6i9q4I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:de:a2:20:c6:f3:75:53:75:2d:c5:f6:8f:bf:d1:b8:da:ed:
         0e:04:5d:fb:66:47:de:e6:87:1a:2a:22:3b:fb:7e:dd:1b:59:
         50:87:fc:0b:49:d6:f2:c6:02:fc:6b:7b:23:91:41:c1:e7:96:
         f8:73:88:29:49:fa:a5:48:2b:81:fa:16:a5:86:25:05:0a:7f:
         77:a9:46:f9:25:16:89:24:ed:9a:09:c1:87:e1:37:0c:1c:02:
         17:3d:2f:e9:4b:0a:f9:c9:b5:d6:da:e9:c3:4b:7c:8a:0a:3f:
         b1:4a:da:54:a7:e3:26:cb:f6:ca:33:80:15:38:13:e1:2b:52:
         2a:bf:b9:86:60:a7:94:8a:2a:3f:e2:67:7b:84:85:1b:62:79:
         9f:2a:91:81:16:d8:19:be:53:96:65:8d:8d:18:27:e2:c6:02:
         c9:b4:2d:de:70:0a:bf:21:ed:f3:ee:18:66:db:54:d3:3e:ee:
         49:ce:13:8e:7f:bb:cd:58:cd:6c:c4:58:97:a4:45:63:8e:7e:
         89:7d:8d:a0:c5:3e:8c:e0:1e:00:23:4e:2c:a0:f3:1c:c7:96:
         7c:c5:f6:ae:63:25:32:be:aa:07:e8:22:92:11:72:43:09:93:
         ae:5f:4e:13:99:18:cc:ee:71:0c:d5:7a:4c:22:ea:97:27:37:
         8c:26:70:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 22:34:36 2026 by rpki-client