Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File:                     ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier:          V4gQrBVagCFPF88DFdvfURTqy456k8lsES9GZAEWdcg=
Subject key identifier:   49:FE:5E:01:B7:2B:8E:43:34:53:D1:9F:A0:4E:54:D9:7F:C0:2A:24
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer:       /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial:       2612
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number:          25E9
Signing time:             Mon 12 Oct 2026 15:45:18 +0000
Manifest this update:     Mon 12 Oct 2026 15:45:18 +0000
Manifest next update:     Mon 19 Oct 2026 15:45:18 +0000
Files and hashes:         1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: +XJbMWCd7hk+Wx0P3A76sXSS+N6ho8Wzv2uQuRDgtW4=)
                          2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: Oip4/ft1E//qtYhxFVUiNdrRQdmZE92k2cuDNa4P3q0=)
                          3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: QOiY3hFrvBYW4moWHSGhx5zs4RYPw59BvTEOl9hZ6yg=)
                          4: DD1070A286EE11F19E006003A7EE528E.roa (hash: QPNTaIBBW5Pm+ub/7yqeRjvgU5bEwV0xP9GlYoD4++M=)
                          5: 6690D57486FE11F194514C90ABEE528E.roa (hash: fV1SDM79oTlS83IQQaXNvbxSE2n0EcvqopvRbECAJVY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
                          rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9746 (0x2612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
        Validity
            Not Before: Oct 12 15:45:18 2026 GMT
            Not After : Oct 19 15:45:18 2026 GMT
        Subject: CN=6acd008e-1fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:da:9e:34:fd:c9:a0:bf:db:74:b0:98:8b:
                    10:6a:92:b9:c1:fc:aa:1a:a9:79:10:81:6d:b3:35:
                    22:a8:59:c4:0a:d1:a2:18:b5:85:33:0c:aa:e8:7f:
                    40:40:11:4c:43:01:45:e8:d6:b6:78:f0:28:94:1e:
                    ef:a1:65:07:36:b7:ea:79:7e:5e:88:17:5d:b6:20:
                    c8:48:c6:bb:71:fe:03:2b:38:0a:c0:f0:e5:ac:9d:
                    cd:e4:d4:95:2d:a2:2d:21:b8:d9:16:22:1e:38:9e:
                    8d:f7:fd:90:7b:b8:a5:25:0b:69:0f:23:85:84:e9:
                    ab:57:62:50:6f:fc:ed:c5:ce:b5:76:1a:90:ba:58:
                    a7:95:fb:b4:dd:68:2f:6a:c4:0a:c3:69:64:49:50:
                    df:41:a1:ea:09:e6:5c:c9:36:a3:a2:d8:e2:5f:c8:
                    e3:ea:7a:0b:22:a3:23:2e:b9:02:c4:a8:d8:a5:cb:
                    1b:c9:0a:6d:75:3c:09:06:ff:5f:a5:ff:21:50:de:
                    85:1f:58:a1:62:65:82:c0:35:c1:77:a4:b4:15:d1:
                    83:12:b5:5b:b2:0a:94:fc:c2:57:f2:85:9d:6e:82:
                    71:d8:27:ea:db:81:10:79:ed:0e:59:70:8b:55:ba:
                    13:e0:2c:4d:68:ec:6b:31:14:36:7f:57:53:6c:ae:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FE:5E:01:B7:2B:8E:43:34:53:D1:9F:A0:4E:54:D9:7F:C0:2A:24
            X509v3 Authority Key Identifier:
                keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:90:50:be:a5:a9:96:cd:a1:78:75:17:86:cf:dd:a1:18:0f:
         8d:10:7d:d3:a1:d3:17:d3:15:09:5e:3c:91:ff:a4:09:3e:da:
         6b:f6:8a:28:e2:06:84:cf:60:79:86:9d:93:fb:6c:f2:08:6a:
         39:9b:82:48:1f:43:2c:9c:84:b4:1e:71:54:9a:37:15:f7:20:
         83:70:42:4e:4b:fa:d5:64:85:29:35:84:04:0e:34:45:4f:cd:
         36:34:fc:9f:b8:a8:4e:6b:01:86:97:9c:83:c6:33:dd:7c:19:
         c7:9a:7c:19:5d:e5:07:00:63:a8:b5:fe:14:c6:1a:5d:60:b7:
         63:29:9f:db:43:87:e4:9d:d0:e9:56:56:e6:62:02:a8:df:c6:
         de:7b:ef:40:19:68:76:fa:d1:0c:06:e7:fa:7f:24:33:cd:bb:
         e9:fb:8f:09:36:59:c8:89:3e:f1:d5:2a:82:2b:ec:d2:db:b6:
         dd:eb:06:b4:77:85:20:32:e5:d7:98:c2:1e:0f:fe:88:47:10:
         4b:fd:a0:a6:dd:10:33:a1:ce:2a:dd:36:17:72:b6:28:9a:ed:
         9f:4d:a1:90:2a:1a:76:46:96:46:46:53:45:74:9d:36:d2:41:
         29:53:60:4d:9f:d7:af:43:9a:de:8c:e7:96:c8:66:32:58:98:
         fd:5b:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:48:55 2026 by rpki-client