Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
File:                     _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json)
Hash identifier:          /CuM5ePSUlQMPd02ANm3wfTjinY9d9aCB/M35dwVtwo=
Subject key identifier:   92:55:19:A9:9A:E0:74:40:82:38:AE:6C:EC:02:C5:B7:91:04:91:E8
Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30
Certificate issuer:       /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
Certificate serial:       0D47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
Manifest number:          0D3D
Signing time:             Thu 24 Sep 2026 18:06:37 +0000
Manifest this update:     Thu 24 Sep 2026 18:06:37 +0000
Manifest next update:     Thu 01 Oct 2026 18:06:37 +0000
Files and hashes:         1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: nJ5P+CFGaQbNpi+EunleFCkBE0Cxew0wYWeTb6lPYMg=)
                          2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: yH3p3lPH8xU3vzOSWPcb+rrTrhSn1jzm2Bc4yCfrO7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl
                          rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430
        Validity
            Not Before: Sep 24 18:06:37 2026 GMT
            Not After : Oct  1 18:06:37 2026 GMT
        Subject: CN=6ab566ad-5c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:91:a1:35:d8:d9:dc:50:a6:cc:6f:89:22:
                    b1:0e:c7:1d:38:95:07:d2:d1:86:a9:42:4b:3b:a2:
                    62:62:0a:b8:e4:ad:9a:d8:a2:bc:51:84:5d:d3:9a:
                    b8:2f:c3:a0:7d:ef:42:b8:93:ce:fd:b1:f6:79:cc:
                    6b:e3:1f:07:da:94:cb:98:50:0d:ed:95:61:6f:6e:
                    3c:5e:cb:d5:2e:74:65:7c:59:42:ba:e7:ac:7a:73:
                    5f:61:ba:3a:82:f0:99:ba:48:5c:e6:70:26:ec:98:
                    77:53:06:45:63:50:8f:b9:ae:02:e8:89:a8:3d:70:
                    d5:5e:20:34:4b:75:88:52:8b:3a:78:05:90:e1:c1:
                    82:e9:22:30:eb:2c:74:36:cd:f4:ab:c7:58:56:f0:
                    9e:af:10:a8:7a:83:21:49:df:c6:79:08:3f:1b:64:
                    72:1f:c0:59:59:20:3a:e0:43:2e:09:ae:79:a9:3b:
                    f2:2e:82:e6:6b:85:48:82:40:75:49:da:e2:1f:20:
                    57:c3:fa:45:ad:d0:10:45:c9:7a:b0:2e:cb:f4:18:
                    06:74:28:6c:32:d1:c3:8f:cb:9a:48:2e:f6:4a:77:
                    2c:ef:1d:1b:42:c9:49:ac:76:30:22:f4:f3:59:c0:
                    5e:17:a3:d6:dd:56:4b:34:77:1e:b4:2d:cb:d2:d8:
                    2f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:55:19:A9:9A:E0:74:40:82:38:AE:6C:EC:02:C5:B7:91:04:91:E8
            X509v3 Authority Key Identifier:
                keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b9:ac:72:d3:c9:a2:fb:38:76:f8:66:d4:15:d8:e8:e1:d3:
         4d:65:69:84:1e:78:02:26:63:73:17:66:f5:73:c4:32:6e:cc:
         06:fb:6c:c9:21:a3:d3:23:c2:13:fc:e3:11:bd:7e:99:a4:04:
         59:d8:5d:4d:28:c1:49:b3:92:38:3a:7e:14:19:0f:1c:95:9a:
         8a:ed:3c:ab:a1:e2:84:20:47:79:4d:e4:36:3a:d6:60:9f:77:
         c6:df:5e:73:d9:1a:45:15:68:bf:67:40:0c:76:1c:64:12:be:
         04:cc:0a:32:43:2b:06:f3:03:0d:86:1c:76:21:1d:05:30:9a:
         4e:0a:0b:88:90:94:d9:bd:dc:5d:a1:8b:c4:ab:31:96:34:b0:
         39:9e:6b:d7:f4:58:80:4a:72:5b:66:91:e4:94:8c:b1:85:95:
         18:5e:07:33:a7:b1:57:b3:b4:7a:ef:51:b4:6b:61:13:12:f7:
         1b:a8:9c:f1:65:3c:1f:b6:dd:15:b6:f7:3d:a7:dc:f5:bc:62:
         5a:79:e4:82:4d:aa:e2:9c:57:9e:a2:9c:67:96:01:e1:ab:c5:
         4e:d7:a5:74:a4:0a:e4:bf:25:1f:e6:06:e8:da:bf:e4:7a:dd:
         b6:b2:a9:82:91:ad:74:23:0b:bd:c6:ec:20:8f:04:9e:8a:19:
         87:76:42:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:43 2026 by rpki-client