Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
File:                     yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json)
Hash identifier:          mLdGR6rCkBgrsf//6qRfADEbPQWJrjok/l2zzC2cPUs=
Subject key identifier:   A8:1A:FC:6F:CD:51:41:BD:51:E1:BE:CB:A7:40:FC:BB:2E:6A:8D:DA
Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
Certificate issuer:       /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
Manifest number:          025E
Signing time:             Fri 25 Sep 2026 02:13:12 +0000
Manifest this update:     Fri 25 Sep 2026 02:13:12 +0000
Manifest next update:     Fri 02 Oct 2026 02:13:12 +0000
Files and hashes:         1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: vvV8Mp13mdMgdy0FWW+6n2Y6ZLnFhjQ5sLFpFqGhmnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
                          rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
        Validity
            Not Before: Sep 25 02:13:12 2026 GMT
            Not After : Oct  2 02:13:12 2026 GMT
        Subject: CN=6ab5d8b8-70b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:14:9d:dd:fb:5b:64:82:e9:d4:ff:9c:76:
                    00:2c:53:77:bb:e2:aa:a3:f5:71:e4:11:ab:54:d2:
                    94:c3:df:3d:0f:5f:83:66:5e:9a:89:a1:10:43:ab:
                    47:7b:a5:fc:e9:28:67:aa:62:f9:2c:a3:e8:52:01:
                    55:dd:7e:4f:85:bd:12:b8:a8:55:c1:e8:66:c7:b7:
                    db:19:ec:d0:e4:27:68:af:12:e1:d1:25:2b:65:b6:
                    00:41:36:93:fa:54:bb:fe:29:21:59:b9:7d:0b:dc:
                    42:0d:cd:80:4c:dc:28:fa:a3:64:e1:12:7f:da:3e:
                    ca:57:09:ac:4c:d4:7b:bc:8a:ec:23:39:6d:cf:9e:
                    e0:8d:60:7d:6e:f5:7d:72:62:8a:84:54:59:8b:25:
                    94:24:01:d3:cb:3e:f3:13:06:f5:e7:79:de:8d:7c:
                    cb:3f:b6:d4:12:9b:4a:9f:08:2e:98:86:69:8b:c5:
                    18:e4:26:e0:30:f5:6f:b0:35:33:0c:a6:e9:a4:aa:
                    6d:e7:6c:07:46:e5:b3:6b:17:23:d0:33:8e:2e:90:
                    50:12:2d:eb:fd:37:c4:a4:97:06:3b:d3:dd:0b:00:
                    0b:e6:8d:4c:56:36:8f:cc:c4:68:61:b9:f1:ee:f8:
                    c0:ec:59:f0:98:3f:b4:99:d3:73:54:dd:b0:4a:d0:
                    4b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1A:FC:6F:CD:51:41:BD:51:E1:BE:CB:A7:40:FC:BB:2E:6A:8D:DA
            X509v3 Authority Key Identifier:
                keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:59:a4:82:b0:96:ad:80:ea:2b:fa:41:a6:9d:cd:cc:bc:84:
         a7:7e:00:43:97:5c:1b:cb:83:9a:94:c8:ea:3f:f1:e8:c8:cd:
         dd:c2:78:0a:d6:8e:a2:1d:a9:86:05:db:db:a2:a1:46:3e:00:
         d4:bd:30:f7:e2:11:64:43:5a:1d:07:f6:25:59:71:b4:d4:f9:
         a2:be:a8:52:c5:7d:7f:46:06:2a:87:10:23:4e:aa:42:90:9d:
         5c:6f:c4:5f:c4:ef:42:73:01:cf:21:9a:9e:82:1e:20:4c:d0:
         0f:cd:f4:c5:ce:b6:53:d1:f6:51:f8:18:4e:8f:3e:54:5a:07:
         76:05:05:e6:72:9a:89:60:3a:5b:57:4a:66:a5:ce:e7:c2:ba:
         cc:7f:a1:6e:c3:df:0e:36:54:08:5c:b0:77:36:c7:00:c0:d6:
         39:61:eb:06:26:d9:f3:28:ac:01:24:c3:c6:1f:14:e2:3f:1b:
         17:47:30:08:6a:0d:1f:02:d1:e1:1b:7b:ea:bc:a3:20:d1:31:
         b3:31:c1:b5:3e:7e:94:0b:81:31:a2:6c:1a:73:e9:5d:9c:7a:
         8f:46:5a:06:bd:85:41:41:c0:78:dc:06:30:62:f3:91:bf:ae:
         e5:d2:49:cb:e1:2a:47:a5:71:1d:62:ff:79:8b:7c:6e:6f:e4:
         37:b9:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:27:53 2026 by rpki-client