Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
File:                     y3TVYT1zQs-5t_ed7wyfrYhceCI.mft (raw, json)
Hash identifier:          C7v7cXtPMUXOL5Bong+kQNdywh2ekDBEx7WMIe50apM=
Subject key identifier:   FE:15:79:5C:C0:0A:FA:7D:C0:28:D2:8E:07:CD:B6:4D:0D:F2:CE:C9
Authority key identifier: CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22
Certificate issuer:       /CN=A917845B/serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
Certificate serial:       0263
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
Manifest number:          025D
Signing time:             Sat 03 Oct 2026 02:49:45 +0000
Manifest this update:     Sat 03 Oct 2026 02:49:45 +0000
Manifest next update:     Sat 10 Oct 2026 02:49:45 +0000
Files and hashes:         1: y3TVYT1zQs-5t_ed7wyfrYhceCI.crl (hash: +DuU83Kvo2ranN+jXV6EpBhi8zhywL/1/+qhXqqXnvk=)
                          2: D5981734217611EE9EBE2F70C4F9AE02.roa (hash: 4D3L2HVQh9/CoYMqSW86iigkVTttSKmbPRkmZFzgEf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl
                          rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917845B, serialNumber=CB74D5613D7342CFB9B7F79DEF0C9FAD885C7822
        Validity
            Not Before: Oct  3 02:49:45 2026 GMT
            Not After : Oct 10 02:49:45 2026 GMT
        Subject: CN=6ac06d49-4ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:86:ed:24:62:89:9d:a0:86:77:c2:36:28:
                    29:6d:fc:27:2b:1b:f5:8d:b5:0a:43:eb:27:01:b4:
                    5a:d6:f0:ab:b2:b2:94:53:b3:14:b3:f8:ec:d9:c1:
                    43:3b:2a:28:e3:10:d1:95:d8:b7:41:a7:fb:66:a6:
                    3e:e2:19:36:48:aa:12:98:fa:f7:2b:f6:83:b5:bc:
                    5f:66:15:a0:f8:1e:c8:13:8e:31:3e:dd:aa:f1:6c:
                    82:97:fd:2e:6a:5a:02:78:5f:c9:89:0f:02:62:b6:
                    f0:ec:75:d8:52:2d:4a:9b:9a:f9:1c:96:7c:cb:5a:
                    08:dc:5e:28:84:d1:97:47:fc:2c:fb:48:8a:ee:26:
                    af:7c:dd:8f:83:4b:a9:ad:16:a9:6d:b4:b4:c4:8f:
                    e1:5b:36:f7:1e:ce:e8:f3:f1:c1:2c:38:c5:29:ad:
                    19:d3:83:95:6c:fb:e3:5d:12:86:40:17:f2:2e:b3:
                    c2:6b:06:e3:6a:c2:24:d1:48:b9:34:99:80:ce:b7:
                    87:f2:f6:cb:11:61:8e:8b:c7:ae:55:7a:1c:73:29:
                    d0:7c:e7:dd:6b:2b:18:a4:bd:16:80:76:27:d5:34:
                    60:f1:28:f1:cf:b4:43:fd:22:fa:d6:7b:55:ba:b3:
                    0d:d3:cf:98:d1:ef:5c:5d:c0:c7:d7:d4:29:8a:80:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:15:79:5C:C0:0A:FA:7D:C0:28:D2:8E:07:CD:B6:4D:0D:F2:CE:C9
            X509v3 Authority Key Identifier:
                keyid:CB:74:D5:61:3D:73:42:CF:B9:B7:F7:9D:EF:0C:9F:AD:88:5C:78:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3TVYT1zQs-5t_ed7wyfrYhceCI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917845B/97369B46217611EEB4F3AD6FC4F9AE02/y3TVYT1zQs-5t_ed7wyfrYhceCI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:74:ca:02:ee:2c:11:fb:1a:8e:4a:b7:1f:1c:c2:7f:ad:82:
         bd:d7:04:36:4d:4c:cb:c1:e6:e9:52:84:7b:a3:a1:bd:a1:8a:
         98:4f:7d:40:f4:0c:d7:9d:39:7c:a1:63:93:54:fe:2f:02:8a:
         1e:4a:40:09:07:17:6a:ff:c8:08:70:be:9c:c0:ad:51:29:5c:
         a2:1b:44:df:b5:3e:18:4b:0e:98:65:14:0e:94:69:a8:4d:2b:
         f4:bc:51:5c:de:47:18:d3:c6:e8:5e:7d:fe:de:e5:cf:e4:b2:
         bb:39:2d:3b:f6:32:12:a8:99:46:49:6a:5d:4d:2e:f1:57:23:
         90:d9:e8:86:ee:34:09:22:ff:4e:62:43:aa:d0:e1:1b:fe:12:
         26:02:30:1b:49:92:58:98:5b:3b:49:f8:44:66:ed:4b:88:73:
         7a:6c:d5:c1:52:bf:4f:b3:9b:f7:87:56:79:0c:77:17:59:ed:
         f2:c1:15:99:1b:63:ba:c2:ad:eb:1c:40:56:75:52:79:6b:d3:
         69:01:1e:cd:5d:5b:1d:76:fa:db:1b:a9:33:95:3b:d3:1c:be:
         8a:b5:44:70:e3:f0:0a:e8:c7:35:ee:43:68:f6:13:30:f7:ec:
         04:7f:3f:0b:15:70:c2:b6:35:58:f4:6f:76:90:e3:33:02:75:
         16:0a:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:20:59 2026 by rpki-client