Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
File:                     yZhQyMiGp__kXfG6HWUCy1pl63A.mft (raw, json)
Hash identifier:          px8BzQ667nO9CMCV06dZ6pEvXvvmv0U2lDz5KP7yAa4=
Subject key identifier:   4D:5A:42:63:AE:1C:7E:17:15:5A:24:36:BE:0F:D9:DC:66:2B:F3:ED
Authority key identifier: C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70
Certificate issuer:       /CN=A917049A/serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
Certificate serial:       7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
Manifest number:          7B
Signing time:             Fri 25 Sep 2026 07:56:06 +0000
Manifest this update:     Fri 25 Sep 2026 07:56:06 +0000
Manifest next update:     Fri 02 Oct 2026 07:56:06 +0000
Files and hashes:         1: yZhQyMiGp__kXfG6HWUCy1pl63A.crl (hash: br6krP4KDaOcCrn8dZjT9a04DGsStrWQ0HK+/nWIHfI=)
                          2: F8509F6A885911F1B22A50DC5811F970.roa (hash: 0ZJc6HpJQj8dHT3b0KkTTBviPLM36CJSUhPWP4NZyPg=)
                          3: IPkMDs2eoGQhKXDCHa4kNgAmmi8.asa (hash: fSNzwzAfik/2NjZ2IYNMHkWvsbpoc4n7mp89BMe4QZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl
                          rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917049A, serialNumber=C99850C8C886A7FFE45DF1BA1D6502CB5A65EB70
        Validity
            Not Before: Sep 25 07:56:06 2026 GMT
            Not After : Oct  2 07:56:06 2026 GMT
        Subject: CN=6ab62916-9568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:15:1a:aa:78:0a:f5:4c:63:0e:38:29:19:
                    a5:71:23:ae:ae:de:5f:6f:bb:28:b5:c3:f7:77:2a:
                    97:4a:6d:2f:5d:75:86:e0:8f:a4:1f:8a:9f:a8:db:
                    1a:5a:24:48:88:7f:01:81:73:d8:5b:87:f9:15:94:
                    ec:9c:fa:2d:2d:58:ba:f2:51:ea:49:c5:96:88:b5:
                    08:cd:d6:77:9b:ac:51:e5:67:f4:07:79:93:67:ef:
                    cb:f3:9e:b5:a0:4d:89:0c:e2:72:fa:24:6e:49:0f:
                    b4:ce:f1:21:58:62:f4:44:56:81:53:eb:25:30:85:
                    c5:3e:51:80:b2:b0:b5:58:a4:7e:8a:d0:c4:80:f4:
                    ed:a8:8d:c0:e1:9f:2c:d2:c9:e7:aa:43:da:d5:10:
                    a6:21:4f:be:b1:c8:f8:6c:69:40:74:26:fb:d4:a2:
                    95:bc:ef:0c:8c:79:ac:df:c2:25:0e:c6:c2:de:ac:
                    ca:9c:d7:be:e6:c7:58:8d:16:cf:81:7b:b2:ef:b6:
                    3c:66:5d:78:89:7c:01:bb:f6:0d:50:49:5f:d3:fb:
                    aa:00:f6:66:55:da:bd:80:09:8a:9e:26:02:50:94:
                    92:b2:86:02:7f:95:a9:c5:4a:49:fe:35:e9:9b:a4:
                    f1:34:ca:f2:8b:21:36:40:cb:07:f1:90:25:26:4f:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:42:63:AE:1C:7E:17:15:5A:24:36:BE:0F:D9:DC:66:2B:F3:ED
            X509v3 Authority Key Identifier:
                keyid:C9:98:50:C8:C8:86:A7:FF:E4:5D:F1:BA:1D:65:02:CB:5A:65:EB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZhQyMiGp__kXfG6HWUCy1pl63A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917049A/2361A02A02CA11F1AD2D2749043D8C67/yZhQyMiGp__kXfG6HWUCy1pl63A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:f9:31:65:67:f3:44:07:52:2b:da:47:0a:2b:bf:68:02:
         3b:35:74:e2:b3:da:a8:41:68:a1:fe:67:34:60:22:10:65:57:
         15:fa:80:14:7f:38:80:a3:e5:11:e9:5a:88:92:7a:77:70:fd:
         27:d8:c0:26:09:c5:37:6b:40:dc:97:04:2b:b0:4a:c6:00:18:
         b2:bc:c4:28:66:0d:31:7b:aa:74:a7:9b:d3:96:cc:e4:de:f3:
         b9:1e:53:6b:c1:ed:d1:24:33:ba:1b:2e:5f:9e:63:45:d8:11:
         9b:66:c4:5f:6e:b0:7f:16:37:06:90:7f:59:ff:a8:49:81:62:
         b2:7c:91:2a:86:6e:a8:0d:8c:50:23:2a:d7:c9:fd:2c:33:2a:
         fa:51:a6:da:90:a2:7d:57:c6:7d:04:bb:91:98:4b:46:a4:aa:
         04:4c:12:e4:e4:5b:96:e4:55:96:19:db:b3:ac:fb:e2:93:d3:
         6c:03:b5:fd:bb:b3:ae:ce:8b:55:5c:46:3b:72:51:bd:2f:3a:
         50:a9:e0:1b:ac:b3:95:21:76:f0:6d:aa:c5:d3:89:0b:88:fa:
         f4:63:c6:f2:87:a3:79:f5:0e:ff:59:6e:f4:2f:94:68:d2:ec:
         42:84:a2:c4:33:15:8a:88:29:a2:81:c6:b1:78:fc:ea:3f:2d:
         94:13:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:42:01 2026 by rpki-client