Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
File:                     P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft (raw, json)
Hash identifier:          z3AXtksVZIF4ff+/H/fSMbWa6ocbw0bgoLWqVg8WCjA=
Subject key identifier:   50:17:51:46:D2:A6:04:B0:25:A5:6D:B8:BE:DD:EC:18:FF:5A:35:56
Authority key identifier: 3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94
Certificate issuer:       /CN=A914988F/serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
Certificate serial:       08C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
Manifest number:          08B6
Signing time:             Tue 22 Sep 2026 20:22:22 +0000
Manifest this update:     Tue 22 Sep 2026 20:22:22 +0000
Manifest next update:     Tue 29 Sep 2026 20:22:22 +0000
Files and hashes:         1: P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl (hash: sEAzBEF0AzcBUiyKyzXJKDo9LlPWHQTvbgU8Q8nI21M=)
                          2: 4ED5A00CFE2611EAA4F3424DC4F9AE02.roa (hash: jge7X+MNv7ydTsqhAul87mOGnW+YO1JzoDIYM4IKKXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl
                          rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914988F, serialNumber=3FE6031F25567A4547CDE1731A2D814DB86E2094
        Validity
            Not Before: Sep 22 20:22:22 2026 GMT
            Not After : Sep 29 20:22:22 2026 GMT
        Subject: CN=6ab2e37e-c50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:e5:16:6e:04:19:c9:c1:fc:89:b5:83:47:
                    01:4c:84:64:78:7a:6f:0d:ef:77:bf:e4:9c:87:8a:
                    18:86:5b:5c:c0:d3:e5:8d:c2:42:c0:4d:c6:8f:9b:
                    fd:59:85:a8:51:23:be:d7:94:16:e7:af:c8:6e:a3:
                    e8:1e:86:98:53:52:18:04:ee:66:9f:a3:87:46:58:
                    64:ee:8e:3a:2a:05:9e:90:49:fb:df:8c:f9:69:6f:
                    37:0c:00:90:21:21:2d:ec:dd:36:e8:e9:be:0e:ae:
                    b7:25:c5:61:4c:43:dd:b3:e4:b1:2f:1c:eb:48:36:
                    e3:c5:77:0a:da:fd:97:0e:26:cd:2b:79:d2:a1:1c:
                    1b:36:58:88:58:3c:3b:10:e7:2a:2b:b4:4a:11:f6:
                    6c:3d:44:7b:d7:3e:4b:9d:b3:ec:5c:40:13:59:47:
                    d3:7c:99:0f:80:93:95:8f:70:17:af:a5:a1:2e:71:
                    29:db:ae:cc:3c:e5:d5:53:7e:86:c0:c8:83:c5:17:
                    56:8c:4a:1c:f3:dc:7b:ee:38:88:87:5e:ad:d5:fe:
                    00:11:03:95:3b:a3:f1:c1:a0:f5:89:e8:0b:c0:2c:
                    13:4d:df:62:e2:ed:54:01:2b:6b:93:6e:15:4a:8c:
                    a8:5c:08:28:c4:0d:86:10:ff:e4:cf:b3:60:75:f4:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:51:46:D2:A6:04:B0:25:A5:6D:B8:BE:DD:EC:18:FF:5A:35:56
            X509v3 Authority Key Identifier:
                keyid:3F:E6:03:1F:25:56:7A:45:47:CD:E1:73:1A:2D:81:4D:B8:6E:20:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-YDHyVWekVHzeFzGi2BTbhuIJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914988F/19247FBAFE2511EA9CC10C4CC4F9AE02/P-YDHyVWekVHzeFzGi2BTbhuIJQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:69:07:3e:cf:a2:e0:b4:34:41:07:71:a4:44:ef:62:be:c7:
         21:e8:24:89:61:0b:e9:26:dd:98:89:e2:de:fc:83:72:81:94:
         3b:4b:db:3b:2c:f1:28:6b:7f:22:13:cb:0d:b3:f9:ee:b8:bc:
         a1:ae:4f:fd:60:8f:00:b2:16:0f:f1:cb:c3:94:52:9b:6a:83:
         b8:2f:fb:ea:aa:16:18:93:42:fb:d9:02:48:12:da:83:f4:96:
         f7:2b:1d:f1:be:dc:14:42:4b:f1:cc:73:22:72:dc:57:d0:13:
         c5:4b:27:d1:4e:cb:ed:ea:61:5e:7e:8a:77:8c:5a:2e:bb:22:
         69:c7:dc:99:c0:a4:ee:74:3e:ec:7c:b2:b1:45:26:67:59:21:
         99:fb:1c:d5:97:f1:2d:49:f4:6a:e3:22:2a:c6:e3:af:f0:87:
         df:59:26:16:12:7d:cc:65:7a:be:ee:38:50:9e:4d:aa:7f:90:
         6c:a5:a1:66:7a:73:d2:5c:22:60:09:7d:b2:c9:2e:f0:97:7c:
         d3:c8:34:0f:09:e6:b9:63:61:3f:0a:d1:6b:90:fe:24:3a:c5:
         cd:18:7b:6f:0f:c1:1b:2e:02:9d:a4:60:72:1e:34:fa:d1:4c:
         45:e2:9b:ea:e2:7b:2c:2a:58:be:7c:48:d0:4f:55:36:e9:bd:
         c5:db:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:45 2026 by rpki-client