Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
File:                     ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json)
Hash identifier:          jKLazucADoNTAITW1YyZ3TtZSiz7oTLm8qj+EvoNmqs=
Subject key identifier:   A2:A8:D7:71:8A:72:21:B1:87:66:CA:70:23:E4:5F:1C:F2:12:C1:9C
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Certificate issuer:       /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial:       0148
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
Manifest number:          0144
Signing time:             Sun 27 Sep 2026 05:52:50 +0000
Manifest this update:     Sun 27 Sep 2026 05:52:50 +0000
Manifest next update:     Sun 04 Oct 2026 05:52:50 +0000
Files and hashes:         1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: iHVegHcwgFYaAAIQYZCEjaHieUWIxDvgc3L7UXkT6xA=)
                          2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: D7h1gktg5+5yyaBrNhzNSFMs7boyS9O5+bm+qSSzUdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
        Validity
            Not Before: Sep 27 05:52:50 2026 GMT
            Not After : Oct  4 05:52:50 2026 GMT
        Subject: CN=6ab8af32-ca32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:c9:db:8a:6f:a2:17:bb:93:64:30:35:a9:
                    09:dc:ce:fd:c4:30:2b:54:60:6a:dc:08:66:bd:5d:
                    96:9c:ee:f3:76:86:04:82:1a:46:9c:4c:d2:58:c1:
                    55:ab:0f:e0:03:b4:c3:e5:5e:f5:ef:d0:f1:6e:1d:
                    c2:51:29:b9:c5:5b:5d:7f:ad:be:61:0a:0a:ee:c3:
                    a4:0c:84:d5:88:f0:c5:f7:ef:62:3d:81:9c:dd:5b:
                    4c:36:0c:9f:7f:71:08:05:c1:94:5b:fc:51:30:21:
                    78:06:bd:1a:40:2c:48:02:c2:fe:a6:0a:f1:b9:46:
                    20:2a:4f:c1:fb:f8:85:a9:82:36:92:a2:a5:f2:e2:
                    51:25:81:c9:51:2c:67:a6:9b:4b:26:36:75:e1:a4:
                    69:f4:27:57:cd:4d:48:97:c5:2a:2d:33:0b:26:e7:
                    71:8f:c8:8e:3f:14:d2:45:e6:6a:ed:d6:4a:b6:f4:
                    5a:69:94:fd:e2:23:4a:38:c4:86:09:65:09:37:3f:
                    84:aa:0d:6e:a5:4d:f8:e1:2f:b7:5b:3f:60:50:87:
                    fb:ec:0f:38:53:67:ce:0b:3e:aa:b5:2c:55:ad:d2:
                    a2:d3:3f:a5:bf:d7:1f:1e:e7:e6:8f:11:27:59:ff:
                    c9:82:3a:92:e7:1b:88:ee:08:ed:ad:a6:0e:a7:8e:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:D7:71:8A:72:21:B1:87:66:CA:70:23:E4:5F:1C:F2:12:C1:9C
            X509v3 Authority Key Identifier:
                keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4e:41:07:29:74:48:47:2e:e7:c0:5e:21:79:d7:4e:99:ea:
         6f:23:81:b0:f9:e9:d3:5a:14:6b:22:52:84:a3:ff:0a:da:2b:
         a7:cc:6f:d4:9e:b1:48:22:2e:8b:3e:f5:38:08:b5:0b:b5:db:
         3f:fd:62:66:7c:2a:9b:b1:0b:a5:af:af:8e:fe:5d:1c:34:30:
         a8:85:62:c8:4a:c6:93:ba:6f:47:5b:9b:f6:b1:53:50:c4:e7:
         53:0c:2a:e4:85:90:8e:b8:64:66:fb:72:19:f0:c4:29:08:0a:
         3b:c7:89:c4:84:b0:f0:be:95:15:86:eb:73:e5:2d:92:d7:42:
         34:a7:30:26:48:52:4f:6b:7f:95:5a:a1:d0:f3:2a:bc:ab:5a:
         cd:06:78:32:a8:ba:f5:46:fd:f9:03:8a:2f:d3:bd:a5:f0:94:
         f5:8e:73:32:29:6e:a5:5c:36:73:eb:43:b2:2d:bc:87:e8:44:
         82:af:40:f6:7d:1a:a9:87:fe:18:96:c7:bf:e0:ea:32:4b:8f:
         58:35:8a:01:c2:fa:05:c1:0d:db:01:61:01:95:02:ab:d1:99:
         e4:51:f5:1f:62:19:02:37:b7:d2:21:35:59:19:a1:22:56:18:
         79:a2:6d:b6:3e:02:b1:58:e7:10:e2:a1:d5:71:66:4a:e0:80:
         89:6c:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:31 2026 by rpki-client