Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
File:                     YpYWXDbflgVmse01DqfefzOLOpk.mft (raw, json)
Hash identifier:          YXWKS0IFzknHDFBc1qdCeMuDUBd9Q4ZavJXsVXTzorg=
Subject key identifier:   F9:07:ED:2D:2B:58:CC:9A:F1:0F:17:0C:B5:7E:A7:8C:C6:BC:18:A1
Authority key identifier: 62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99
Certificate issuer:       /CN=A91456CD/serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
Manifest number:          5C
Signing time:             Fri 09 Oct 2026 08:56:34 +0000
Manifest this update:     Fri 09 Oct 2026 08:56:33 +0000
Manifest next update:     Fri 16 Oct 2026 08:56:33 +0000
Files and hashes:         1: YpYWXDbflgVmse01DqfefzOLOpk.crl (hash: ZJ8yLQWpXhMAxTeqt3fjZxVQyXm6UiQVvPEfKnwSq6I=)
                          2: E70D393E3E1211F1B8544D87AE833773.roa (hash: Z710cYgmQWNlK2XY5ROXVcJ51fvGqWY2ndR1PnZkmtQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl
                          rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91456CD, serialNumber=6296165C36DF960566B1ED350EA7DE7F338B3A99
        Validity
            Not Before: Oct  9 08:56:33 2026 GMT
            Not After : Oct 16 08:56:33 2026 GMT
        Subject: CN=6ac8ac42-734a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:a1:8d:5e:83:6a:b2:05:3b:af:b3:a3:37:
                    7b:43:20:ac:6f:8f:58:21:d7:de:4d:ba:77:af:67:
                    2c:f7:44:3e:43:c7:c5:97:d7:a5:1d:63:88:1e:4b:
                    41:74:45:90:b3:d5:53:fc:26:c1:0f:72:5e:4d:ce:
                    fe:47:02:ba:05:09:00:95:f9:26:ad:fb:aa:b9:b2:
                    b1:8c:ce:c2:63:18:6d:e1:eb:67:6f:5a:cb:fd:26:
                    eb:98:69:4a:5f:34:49:e9:7b:3d:7e:3a:d0:af:f2:
                    7d:b4:41:1e:0f:b2:76:46:5b:35:09:4b:b0:b4:2b:
                    2f:59:0e:0f:dc:fe:64:fc:bb:32:1f:33:91:95:51:
                    d8:c8:0a:c9:6d:2b:5e:5d:8b:0c:4d:b0:a1:c8:1c:
                    4a:2c:dd:5e:73:ae:05:df:82:d7:1f:fb:61:c4:1a:
                    63:05:04:4e:c7:0f:7f:72:1a:65:00:b8:46:4f:26:
                    dc:28:a0:6b:5f:d7:93:aa:12:f6:36:29:8b:83:60:
                    69:38:2a:9d:6f:f6:d0:ec:4b:ad:18:b7:6e:81:89:
                    16:cf:6a:19:eb:71:d9:c1:4b:af:6b:11:56:29:34:
                    67:d5:d9:3f:26:cd:6c:6c:47:43:3a:7f:ac:46:51:
                    cf:01:7f:f8:1e:13:bf:0f:8c:6e:df:58:a8:73:68:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:07:ED:2D:2B:58:CC:9A:F1:0F:17:0C:B5:7E:A7:8C:C6:BC:18:A1
            X509v3 Authority Key Identifier:
                keyid:62:96:16:5C:36:DF:96:05:66:B1:ED:35:0E:A7:DE:7F:33:8B:3A:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YpYWXDbflgVmse01DqfefzOLOpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CD/AC4A88403E0F11F1AA158D56AA833773/YpYWXDbflgVmse01DqfefzOLOpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:e5:df:a7:da:a5:03:8e:c6:2d:39:5f:db:08:41:21:b8:
         31:57:43:8d:15:e5:45:26:83:47:fc:8f:c3:da:8c:db:f3:4e:
         be:7b:bd:01:82:c7:7f:f0:9d:d6:d9:b8:00:48:07:f9:1a:69:
         69:67:01:cd:dc:b2:7c:b1:26:15:21:03:77:2c:6c:37:21:6c:
         a7:ff:ea:0a:5a:0c:ab:aa:a7:5c:74:da:f6:9d:4d:a7:60:db:
         17:7f:df:45:03:9c:57:1c:3a:76:64:ea:70:e2:51:28:3a:e4:
         ea:04:68:bc:cd:64:40:cf:c3:e7:6c:85:79:fb:63:aa:92:6f:
         06:77:ec:49:e1:c5:a4:2c:45:83:c1:7f:d4:fb:9c:7f:94:06:
         7f:22:89:34:20:c7:f5:e3:27:11:e3:5d:a8:8e:fa:36:c0:1f:
         9e:5b:7a:74:52:11:2f:79:23:85:b7:c9:5b:df:85:43:44:db:
         1f:34:e9:a2:17:fa:dd:f6:14:cf:a1:8d:11:b3:78:b0:92:13:
         6a:06:62:41:de:dd:c0:f9:fb:3f:37:18:b0:62:d4:a0:a7:75:
         23:74:10:b0:cb:fc:fc:b4:f5:6e:d3:f3:1d:ac:09:a6:a0:4d:
         e7:09:ca:ed:44:8d:88:bc:4b:24:54:12:36:49:85:24:92:d1:
         fc:be:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:11:30 2026 by rpki-client