Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File:                     YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier:          XeYLZ/CjhIgVxfq81DXBmAcUdUGqsCo24oUBIIfzD30=
Subject key identifier:   56:29:C8:E7:43:5A:2C:EE:F8:90:0F:B4:46:AB:9A:9F:AC:CA:F5:2D
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number:          05A5
Signing time:             Thu 24 Sep 2026 23:05:04 +0000
Manifest this update:     Thu 24 Sep 2026 23:05:04 +0000
Manifest next update:     Thu 01 Oct 2026 23:05:04 +0000
Files and hashes:         1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: oyv+0bDoFYZQt0nENzEuGZsGElWegMrxXUXGd+J7An4=)
                          2: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
                          3: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Sep 24 23:05:04 2026 GMT
            Not After : Oct  1 23:05:04 2026 GMT
        Subject: CN=6ab5aca0-c5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:47:c8:69:10:c7:e3:28:81:ba:b2:79:22:
                    69:0e:70:56:5d:e7:fe:57:f2:b4:68:c1:88:1c:a5:
                    db:19:91:84:a4:c3:a7:89:c2:81:dc:e2:9a:38:dd:
                    1d:7a:83:4f:61:30:44:e9:f9:54:d1:48:aa:3d:90:
                    5d:c9:e0:e4:db:27:95:47:bd:2a:6a:a1:72:e9:c1:
                    0a:8e:88:fa:37:32:4e:3f:db:94:1d:e3:a5:51:50:
                    bd:3c:13:7c:68:24:68:44:ab:01:07:0a:e0:bc:fa:
                    67:bd:9f:49:11:76:9b:8e:9f:c8:b2:d3:15:a8:03:
                    b2:65:1c:99:ee:fa:6a:fa:a0:2e:4b:5c:6a:37:d3:
                    b1:6d:97:46:4d:91:07:25:2b:38:52:92:cf:6c:90:
                    60:70:9c:b4:a9:1a:fa:e9:a3:af:ed:a6:ac:49:7a:
                    1f:f9:47:7a:4f:e8:a6:e4:2e:6c:b7:f7:86:da:9a:
                    29:3b:74:aa:6e:5a:76:98:8e:f5:63:a8:cb:0b:92:
                    2a:1f:34:df:63:94:e3:82:e6:a7:39:5b:ea:7d:5f:
                    d5:cf:00:77:28:3b:86:db:50:ab:da:2e:c9:a4:33:
                    48:f2:c7:e9:06:6a:af:1f:6f:39:47:be:f6:1c:74:
                    87:a9:7a:4d:b9:da:93:76:3a:04:ba:11:c2:e3:e4:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:29:C8:E7:43:5A:2C:EE:F8:90:0F:B4:46:AB:9A:9F:AC:CA:F5:2D
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:31:0f:d4:9f:00:b7:5c:f1:ce:6e:11:c6:2b:9f:b9:e9:ac:
         9a:a0:10:d4:90:57:6b:82:e4:4a:09:56:5b:a2:84:37:68:07:
         4c:34:7d:02:4b:1d:f8:44:e2:e8:34:3f:92:53:22:a5:a5:ea:
         4e:6f:24:cc:1b:f9:2c:e8:79:21:3b:cc:fa:0a:a1:63:6b:fc:
         5b:4f:25:0e:a3:f4:17:00:ae:5a:2d:5a:a0:c3:88:f6:db:51:
         1a:38:e8:af:52:7c:4b:bd:ed:0c:bb:ce:81:ce:73:81:06:19:
         f5:3b:de:17:11:42:ed:a1:70:e4:ee:7a:c7:de:1d:f7:d7:79:
         4c:70:41:b4:1a:a3:e9:0d:4a:82:a8:64:e2:d5:eb:35:2a:8f:
         6d:d0:44:3a:70:9e:37:54:8d:2e:8b:43:7e:2c:d8:48:32:0c:
         7b:e9:69:58:53:43:80:e4:a8:c1:ae:cb:1f:5c:53:9f:50:b8:
         5e:a6:13:a1:f1:bb:e7:72:9a:87:0c:29:3a:36:8b:e3:34:96:
         9d:1e:2f:5e:3b:24:c4:ec:41:1e:8d:9a:d8:b4:96:5d:3f:b8:
         4f:f3:72:79:86:51:c6:ad:96:83:21:6f:f9:7e:9b:9e:e1:de:
         ed:53:19:fd:71:d9:19:be:d3:89:0b:34:dc:8f:ea:25:6b:e2:
         f5:d2:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:44:21 2026 by rpki-client