Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
File:                     YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft (raw, json)
Hash identifier:          d19mDiJ7reaL+Sx/E713Y5tvy4H1KtanPhlp8Pwriy0=
Subject key identifier:   80:8B:34:0D:E7:67:03:59:56:9B:EA:47:31:52:8C:C8:A5:62:93:A0
Authority key identifier: 60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB
Certificate issuer:       /CN=A915307C/serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
Manifest number:          38
Signing time:             Fri 25 Sep 2026 08:43:14 +0000
Manifest this update:     Fri 25 Sep 2026 08:43:13 +0000
Manifest next update:     Fri 02 Oct 2026 08:43:13 +0000
Files and hashes:         1: YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl (hash: Lu6rXD9Yghv7eZmx5rgcW6HkuXzqwCtzL/FMIcsjxK0=)
                          2: 4A5161F463DA11F18803A8B98447A888.roa (hash: s+ETcjgKMznsV0hPLHChNZ83FbOj0Ckmfwu/mAyqAVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl
                          rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915307C, serialNumber=609D9CD5E8D5F097F700EC1322DEDD44308197EB
        Validity
            Not Before: Sep 25 08:43:13 2026 GMT
            Not After : Oct  2 08:43:13 2026 GMT
        Subject: CN=6ab63422-8f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:7d:c2:b4:8a:c8:84:08:76:12:dd:e9:05:
                    d1:f1:86:da:bf:83:3a:09:c8:ba:f5:7e:6c:db:4e:
                    b6:47:b0:43:2c:24:85:4b:ef:45:7b:11:f8:2d:45:
                    b0:6c:df:37:a3:ff:43:45:51:92:51:31:e6:62:04:
                    08:26:5a:bf:a4:60:fd:16:ce:08:87:27:f2:72:37:
                    a8:c2:80:fa:aa:df:53:39:9b:46:ec:f6:1d:b5:6a:
                    fe:28:8b:55:21:9f:0d:1e:da:fb:6e:1f:ef:ce:9f:
                    8f:e2:65:03:39:83:0e:6a:ea:51:f2:1e:ba:cd:5b:
                    93:86:76:1e:98:9a:3e:eb:2b:19:41:57:8c:5a:61:
                    aa:fe:11:f2:bb:fa:3f:53:0b:4f:2a:6e:9b:1d:aa:
                    84:41:59:5b:37:7e:a0:c1:67:8e:1a:ba:9f:26:ee:
                    fd:e4:5e:57:f9:dd:e9:26:a1:1c:f2:ae:84:b4:60:
                    c3:32:91:bd:29:eb:95:f7:f8:d6:9c:d6:39:8b:bb:
                    98:5e:66:a7:9d:e8:b8:85:d6:fa:3c:62:5b:24:4d:
                    31:d1:6d:1e:5f:e3:cd:7d:1b:fd:05:49:60:9a:d1:
                    6e:f0:84:2d:16:ee:3f:5d:9e:12:70:b5:f3:0e:66:
                    f8:ab:50:20:ff:c2:d5:76:d8:b1:c5:21:93:44:0a:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8B:34:0D:E7:67:03:59:56:9B:EA:47:31:52:8C:C8:A5:62:93:A0
            X509v3 Authority Key Identifier:
                keyid:60:9D:9C:D5:E8:D5:F0:97:F7:00:EC:13:22:DE:DD:44:30:81:97:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915307C/BA8C8A9E63D911F189816C108447A888/YJ2c1ejV8Jf3AOwTIt7dRDCBl-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f0:a9:bd:b9:20:87:95:f4:b7:64:02:50:ae:b4:91:f2:6d:
         35:f4:11:11:65:9c:29:b8:f3:b9:6a:8a:ca:13:ed:91:31:0c:
         85:91:0a:74:48:6f:43:1a:d3:57:a4:2b:33:61:06:a6:a9:b8:
         ff:a3:b0:e9:e6:94:ea:45:cb:df:45:83:3c:e4:82:9e:76:f0:
         92:ef:35:d4:09:77:e6:91:fa:91:da:67:45:43:9e:ec:2d:0e:
         0e:57:96:e2:f6:24:18:88:1c:f0:ea:cc:3c:ab:c5:11:13:9e:
         ec:90:a7:68:c4:ec:55:f6:4c:24:a5:86:9f:a4:1e:e8:51:4d:
         13:e3:16:6c:48:2a:89:96:7f:57:d7:7d:8a:35:9a:f0:1b:68:
         4a:4c:fe:6f:bd:6b:55:e0:14:34:9d:3a:39:d6:4b:98:66:77:
         f4:76:a0:f3:81:36:ec:49:16:24:b7:d9:ba:96:e4:e2:c4:2b:
         ed:05:57:03:6c:8c:c9:19:ca:a1:a2:cf:ad:f6:f2:79:8d:c5:
         59:6f:1b:de:fa:27:0d:66:44:c1:98:c7:97:f3:3a:5a:a1:7b:
         b0:a3:8f:f9:60:00:c5:42:63:b0:3d:60:a9:f4:96:b3:34:50:
         72:48:c4:86:8e:22:21:b3:9d:8a:3f:e0:1a:e8:43:59:be:d3:
         e5:18:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:29 2026 by rpki-client