Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File:                     YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier:          6qoV/LNVfegr3PSN2ydjYE70QHnxhr1BaUKbpP/75xw=
Subject key identifier:   0C:0E:A3:7C:AC:3D:BB:1D:5A:5A:89:32:05:B3:95:7B:DE:89:C0:86
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer:       /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number:          8F
Signing time:             Fri 25 Sep 2026 07:38:35 +0000
Manifest this update:     Fri 25 Sep 2026 07:38:35 +0000
Manifest next update:     Fri 02 Oct 2026 07:38:35 +0000
Files and hashes:         1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: tvXwCb+Otl8QPKgT4jRVZud7CCXOeTEitAS93kcZGOg=)
                          2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:38:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
        Validity
            Not Before: Sep 25 07:38:35 2026 GMT
            Not After : Oct  2 07:38:35 2026 GMT
        Subject: CN=6ab624fb-a499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:25:bd:2b:29:63:2c:32:90:ce:ef:9c:4b:
                    6d:d0:81:75:9e:ad:32:9c:5c:24:ed:33:c1:44:be:
                    8e:bf:5d:29:1e:82:7c:40:de:88:60:1b:71:65:2c:
                    2a:0b:9d:7f:7f:41:b1:fd:2b:9d:c0:7b:78:1d:72:
                    69:0d:b0:b1:bf:98:ce:24:04:aa:c7:92:a1:20:45:
                    a1:00:02:78:3d:a5:c6:5b:06:4b:58:e9:3a:e3:5e:
                    da:cf:49:ab:db:b6:3b:c5:7f:fe:50:2b:bc:fb:03:
                    2c:ca:c8:e2:46:62:a5:0d:06:d9:02:e2:fd:84:26:
                    4d:e5:65:a3:9e:28:71:29:e4:19:83:c4:67:32:e7:
                    23:86:c9:6b:39:60:dc:72:e0:e1:46:1e:f6:ac:fc:
                    60:d9:79:c2:4d:45:79:66:85:82:2a:cd:9c:82:32:
                    88:ad:49:42:79:40:a9:0e:9b:64:53:23:f1:3e:9a:
                    67:88:27:0e:cc:c2:b6:06:87:dc:a4:52:32:32:4d:
                    b2:a0:54:14:bf:a6:9a:e1:62:4c:1d:d0:d0:a1:ec:
                    88:08:10:37:35:c5:99:22:9a:27:b7:1a:10:ee:0e:
                    12:39:70:de:d8:5e:92:49:f0:12:3b:23:49:f8:53:
                    fa:40:64:d6:76:0b:78:06:62:ea:8e:8b:35:82:3c:
                    44:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0E:A3:7C:AC:3D:BB:1D:5A:5A:89:32:05:B3:95:7B:DE:89:C0:86
            X509v3 Authority Key Identifier:
                keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fc:99:c8:90:68:96:8e:ef:c2:51:93:5d:86:11:68:bd:73:
         d4:38:7c:7c:63:b7:92:0a:ef:d7:64:1c:18:49:89:1e:3b:79:
         c3:34:cb:20:ae:1b:9d:0e:b8:9c:63:a2:e8:5c:6e:52:80:10:
         61:cd:3a:63:51:ae:8c:29:45:ad:81:4d:f6:8d:9b:1a:d3:ac:
         5a:46:1a:94:48:d0:36:ce:31:e6:21:f1:a1:52:52:18:38:63:
         59:77:8c:cc:36:05:ee:8d:4b:62:48:b1:db:91:66:b0:8b:6e:
         95:b2:d4:04:cc:41:78:09:31:cd:b3:c6:78:23:19:c1:ab:5d:
         7c:85:a2:80:64:8b:e2:b6:04:e6:8c:af:d4:23:d7:79:9e:b5:
         8f:22:35:48:9a:97:54:0d:c3:05:a2:9a:c6:ab:74:01:48:06:
         13:fc:e8:f2:cc:7e:c6:ea:f3:91:31:29:ed:b3:8a:7a:69:31:
         7e:5c:a4:90:ed:3f:48:fd:ac:a0:f3:03:60:7e:3a:43:c5:5a:
         54:75:01:cf:8d:52:77:0c:ed:b4:ef:4c:99:32:f3:39:d5:97:
         4c:32:fc:f5:17:01:43:b0:d5:b0:11:db:0b:db:82:6c:84:cd:
         a2:bc:2b:e5:53:94:c1:77:f9:6a:93:80:95:e9:93:6a:de:de:
         ad:b8:66:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:51:07 2026 by rpki-client