Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File:                     YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier:          aE4NFinupC62WjByr4WVOSL6XwBjm8cf4sTZEaPLwLk=
Subject key identifier:   7F:F0:A4:93:18:7C:D8:2F:33:E1:4D:C0:6C:DA:5D:F3:AC:AE:67:0B
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       0A8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number:          0A81
Signing time:             Mon 12 Oct 2026 19:43:54 +0000
Manifest this update:     Mon 12 Oct 2026 19:43:53 +0000
Manifest next update:     Mon 19 Oct 2026 19:43:53 +0000
Files and hashes:         1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: zL4lVxyi/onCR1yb879aIEtR43K1IIa2WvCveeQs1co=)
                          2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 19:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: Oct 12 19:43:53 2026 GMT
            Not After : Oct 19 19:43:53 2026 GMT
        Subject: CN=6acd387a-e6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d3:d1:02:32:e5:25:57:2c:69:82:b5:1c:d9:
                    c7:99:d4:14:82:75:b9:80:54:64:43:a7:74:95:b5:
                    3a:7f:75:e5:ac:5a:ba:8b:fa:b8:44:cc:cf:d4:86:
                    f9:65:a1:f0:9f:67:4d:f1:a1:35:04:8d:90:1f:ff:
                    bd:c8:ba:db:a3:69:e5:66:d1:58:35:86:a0:0f:c5:
                    3c:2e:61:5d:d2:5f:e2:dc:9b:e1:a2:ba:98:7b:ad:
                    b0:24:f3:1d:5d:e4:09:f7:86:0d:59:02:91:05:ca:
                    e4:57:40:cd:7c:48:36:fd:b2:80:29:89:cd:5e:b8:
                    be:74:8d:38:85:16:e8:4e:09:f2:ac:d3:5b:2e:fe:
                    8d:b4:a2:7f:25:d7:fe:9e:c1:16:6b:21:91:38:a5:
                    7e:c7:49:87:fd:62:79:f1:06:39:42:27:96:63:5e:
                    9b:f0:2f:6e:b8:9a:f2:fa:27:de:84:f6:4b:ed:3c:
                    cf:e0:49:d4:bf:36:35:ce:7a:c4:1c:9c:96:9a:cb:
                    95:7a:07:f4:81:91:d2:f5:e9:cf:fa:86:2f:80:48:
                    3c:03:46:aa:f9:b7:c3:92:22:3c:47:f5:62:ad:c7:
                    a6:1f:3c:fd:dc:82:b4:3c:93:03:d7:03:56:52:8f:
                    04:01:49:ec:6b:2b:f3:3d:24:e8:db:ec:de:3d:52:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:A4:93:18:7C:D8:2F:33:E1:4D:C0:6C:DA:5D:F3:AC:AE:67:0B
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:39:41:1a:c1:82:eb:17:55:ef:c5:d6:57:08:2d:00:91:42:
         fa:f4:3b:7f:fe:5d:45:67:68:17:71:81:77:d4:10:5c:e1:ff:
         6a:37:10:8f:5f:ce:84:91:69:92:2f:de:ad:28:f4:9e:05:28:
         44:ec:e3:ad:42:83:ea:cc:01:4d:8c:be:9d:16:b4:85:91:25:
         15:55:22:15:57:3a:81:56:6e:30:45:ed:81:de:cb:06:7d:49:
         43:1a:d6:24:21:48:ca:d4:d4:83:98:ec:80:e7:56:df:8c:d3:
         34:1c:e3:ec:66:11:bb:9d:b4:13:c3:4c:17:96:37:9a:58:11:
         0f:17:05:cb:1c:31:47:a9:30:8b:cb:3f:ed:5f:53:81:9e:ba:
         57:4e:82:c2:39:3d:6b:2f:95:7a:21:48:50:14:3c:c6:a1:34:
         b4:bf:3c:2b:e9:b4:dd:91:4d:69:6d:5a:21:79:cb:5d:7d:12:
         84:3e:17:cf:60:a7:97:4d:8f:23:95:ca:53:2e:bd:e8:52:f0:
         94:e6:27:87:e5:82:fb:36:92:5b:cf:ec:b2:27:3e:75:3e:b1:
         58:94:bb:44:39:39:e3:8c:d7:f7:9f:3b:cb:be:df:76:38:39:
         ec:09:26:4a:15:98:1c:29:74:ad:e8:cf:74:a5:68:4a:ab:e4:
         33:70:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:33:52 2026 by rpki-client