Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
File:                     yzfWw1ER6SWyUY8r7WTyMlRT92w.mft (raw, json)
Hash identifier:          8eLOY+Iw1FmU5tMaKbinspucwH/UA8/gyr0+RMquMiI=
Subject key identifier:   27:D9:3D:2B:C7:20:E8:1B:31:80:9C:76:A0:5D:50:FD:25:A3:F1:F3
Authority key identifier: CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C
Certificate issuer:       /CN=A9177353/serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
Certificate serial:       37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
Manifest number:          33
Signing time:             Thu 01 Oct 2026 10:09:33 +0000
Manifest this update:     Thu 01 Oct 2026 10:09:33 +0000
Manifest next update:     Thu 08 Oct 2026 10:09:33 +0000
Files and hashes:         1: yzfWw1ER6SWyUY8r7WTyMlRT92w.crl (hash: v+59wOIc4aB8MTxoBj8QRDiak7EZsHG3dn00E6qei6Q=)
                          2: ABC9FB4A7BC611F1B6642EA77EA30FBC.roa (hash: HmRmDqDfESdS7SMfsTcGBDDFSJ09EIOGuoNBkZg/+iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl
                          rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 10:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177353, serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
        Validity
            Not Before: Oct  1 10:09:33 2026 GMT
            Not After : Oct  8 10:09:33 2026 GMT
        Subject: CN=6abe315d-65e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b9:c6:14:b0:21:d8:00:5f:6d:72:1d:f0:15:
                    e0:47:bb:39:54:43:94:f0:c8:5c:ab:4c:73:cf:17:
                    a6:4a:48:9e:37:db:4e:9e:e0:1f:7d:09:eb:91:13:
                    fc:dd:52:e5:ba:9b:13:ef:57:4c:90:aa:4f:b5:67:
                    8c:15:65:80:bd:10:bf:1c:31:57:05:0b:09:4b:e0:
                    cf:bb:53:8e:25:e0:1f:fb:cc:d0:eb:df:ff:42:34:
                    13:04:ae:24:dc:f9:04:0b:46:49:51:02:29:3a:6a:
                    0a:95:72:b7:20:d4:f9:bc:08:c3:68:1a:a0:9a:a3:
                    d2:a4:3f:4d:3a:92:37:92:7a:f2:08:11:2d:fc:c6:
                    08:09:1c:7e:53:03:d5:a6:c9:f1:d6:ba:f4:6e:d6:
                    bf:46:5b:50:8a:d2:2d:b9:ee:79:fe:16:d6:27:0f:
                    28:4d:51:35:19:f8:5d:e1:eb:1a:0e:65:ab:11:16:
                    29:1b:ec:6e:73:cd:e2:c8:3b:1d:a1:d6:3b:0e:2b:
                    5d:89:46:48:aa:81:43:7f:21:e9:df:57:3f:29:f1:
                    e5:c8:54:65:92:6c:ac:52:58:28:7d:13:a6:c1:cb:
                    a1:1f:bc:48:7c:b3:81:a8:1e:34:00:7f:c6:4c:f0:
                    51:cb:f5:14:25:30:2d:ae:67:05:37:2b:86:01:74:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D9:3D:2B:C7:20:E8:1B:31:80:9C:76:A0:5D:50:FD:25:A3:F1:F3
            X509v3 Authority Key Identifier:
                keyid:CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ed:f1:d8:57:13:f8:3c:14:48:0f:6d:9d:02:a8:d6:41:ae:
         ad:1f:09:fa:54:94:ff:5f:e9:84:ac:af:94:31:c7:ee:c0:ae:
         19:18:32:4b:e5:77:84:de:0c:00:34:5a:f9:d7:59:58:b5:da:
         ff:ea:90:c9:d2:35:c8:4f:3f:fd:04:3c:78:cf:2f:a9:47:eb:
         f9:b1:d1:60:9f:17:df:ed:ed:1c:e6:ee:d8:56:83:06:67:33:
         5f:23:37:72:07:70:cb:43:fd:a0:6d:55:bc:52:48:5f:54:28:
         2b:51:0c:5f:fb:ac:2d:0f:15:d3:fa:2f:95:72:7f:38:bd:eb:
         52:fc:04:52:30:e3:c9:ab:32:39:fa:cf:6b:e1:b5:a2:82:6c:
         ab:7a:00:89:43:56:cb:70:1b:48:b7:3a:12:b0:9b:f7:b8:48:
         2a:1a:cd:8a:39:84:33:43:63:08:12:02:fc:76:0a:c8:6b:f5:
         75:7b:19:90:39:5b:f2:aa:5f:f1:3c:d3:ba:77:dd:41:e7:ca:
         ce:2a:aa:fd:62:75:87:b6:31:4b:ee:5e:9b:77:22:e7:80:93:
         7c:3b:91:4e:55:6d:15:a1:0d:23:f3:83:d8:73:f9:35:f5:23:
         53:72:33:b0:c2:99:13:f3:07:3f:b6:94:52:8a:8e:fb:46:6c:
         33:1f:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 09:00:06 2026 by rpki-client