Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File:                     y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier:          k+7CAwEja60myZep8AZrjb9AgZ1AGR5wWDj1GaWZItc=
Subject key identifier:   DD:68:36:55:F0:5F:C2:2A:3C:01:AD:7B:3E:3E:87:34:9D:E0:FD:56
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer:       /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial:       1C3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number:          1C03
Signing time:             Sat 26 Sep 2026 16:16:58 +0000
Manifest this update:     Sat 26 Sep 2026 16:16:57 +0000
Manifest next update:     Sat 03 Oct 2026 16:16:57 +0000
Files and hashes:         1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: AziW513iwO119/iuXE6FD4PSH4+BN9BcX9zTodzUZKc=)
                          2: A7EF5240597511F185BDC55FA6833773.roa (hash: kOodqdgbINY1XZl6qbmR66hRW2266VFweYrtDnY9Xa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 16:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7231 (0x1c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
        Validity
            Not Before: Sep 26 16:16:57 2026 GMT
            Not After : Oct  3 16:16:57 2026 GMT
        Subject: CN=6ab7effa-6c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:a4:92:d1:49:47:61:f4:cb:df:b4:34:93:
                    26:87:f5:b4:86:b4:ea:df:d4:60:c3:df:fc:09:50:
                    13:fb:c3:48:06:16:71:93:0b:8b:49:95:e9:a1:af:
                    df:9f:c2:4f:de:f7:46:18:02:7f:ea:41:d5:2a:0d:
                    8d:44:2e:f7:2b:3d:10:b0:7a:44:39:f8:03:2f:eb:
                    8d:37:cf:c4:b5:62:be:44:b1:87:8b:bc:59:66:dc:
                    eb:f9:c6:0c:1d:82:3d:eb:7c:11:3a:4f:ad:b3:3e:
                    f8:56:98:9b:a2:a1:25:da:3b:2e:e8:9b:9e:77:1d:
                    f4:74:76:4a:d5:45:9a:3b:3b:e1:a2:7e:84:ef:bb:
                    4a:71:05:43:0b:38:e9:ca:b8:c9:4b:4e:6e:6b:84:
                    2d:8b:fa:39:66:a9:ff:c2:fb:3b:d8:0e:82:f4:b4:
                    e8:0d:88:83:2c:f8:8d:a8:92:36:e3:04:3a:dc:4d:
                    fc:83:4b:d6:54:7e:dc:e6:32:e1:83:8a:9b:87:02:
                    84:2f:78:6b:a6:0d:7f:5d:28:d3:cb:5e:c5:ae:65:
                    69:ef:0b:4d:ed:6a:40:6a:5d:19:52:33:f5:ac:0e:
                    9b:04:fe:7a:68:03:89:a0:d0:a0:b3:0f:51:d5:b2:
                    b8:ec:39:e0:b4:7c:4d:f0:1a:56:68:5c:bb:b3:4e:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:68:36:55:F0:5F:C2:2A:3C:01:AD:7B:3E:3E:87:34:9D:E0:FD:56
            X509v3 Authority Key Identifier:
                keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:fa:df:57:91:89:65:c9:0e:df:f2:62:bd:d8:98:f8:e5:
         f1:6f:d0:bc:a5:cd:43:e6:e5:0f:8f:39:a3:f7:70:38:af:fd:
         45:85:bb:44:48:41:60:b7:70:03:d0:e0:e5:ab:cc:53:dc:41:
         ed:cb:6c:18:af:b7:89:a5:86:06:78:66:f6:da:0b:c6:c8:6d:
         b9:9f:2f:6f:5a:44:35:a0:d4:5a:c2:34:3a:0e:1f:2f:9b:98:
         99:6a:c8:62:68:08:79:62:8c:94:9c:40:e2:1b:8e:43:b7:76:
         4c:24:4c:73:6e:61:5a:75:39:63:5c:8f:c9:a2:ac:76:5c:a6:
         25:db:29:85:3e:82:77:00:30:23:4e:e9:7c:b3:cb:2f:e9:66:
         f3:3e:fc:28:79:f0:71:32:1f:84:1a:71:70:1c:f5:43:0e:59:
         24:81:1c:24:a1:16:d6:4a:b1:0f:b5:80:94:0f:31:87:eb:8e:
         1d:43:6c:3e:58:85:0a:2d:30:ca:16:2d:f0:92:9e:3e:c2:1b:
         f2:eb:2a:27:ae:9d:ab:87:b0:c0:a9:36:a4:8a:69:f2:7e:92:
         d5:63:c3:a5:01:b1:92:1e:f0:14:e7:5d:6e:7f:49:72:5d:06:
         c3:58:89:62:1c:e3:22:74:0d:42:a5:fa:1c:d9:d8:97:1e:dd:
         db:98:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:23:13 2026 by rpki-client