Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
File:                     y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json)
Hash identifier:          H8pDLnrUMZnOdjFOT/HTeI6gZqwbYebBHLzkd5EHCGY=
Subject key identifier:   3C:E9:5A:72:7A:7A:18:9E:33:62:83:C7:72:A6:DE:F9:87:B3:B2:79
Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Certificate issuer:       /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
Manifest number:          88
Signing time:             Fri 25 Sep 2026 07:41:11 +0000
Manifest this update:     Fri 25 Sep 2026 07:41:10 +0000
Manifest next update:     Fri 02 Oct 2026 07:41:10 +0000
Files and hashes:         1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: pXdUshT3CCs4AefJ0RYuN7B4Gmq0stUqXpSJ9KghsWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
        Validity
            Not Before: Sep 25 07:41:10 2026 GMT
            Not After : Oct  2 07:41:10 2026 GMT
        Subject: CN=6ab62596-8247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:4a:f5:d3:6c:5c:36:89:6e:d4:96:b9:c5:
                    cd:fc:08:e9:3b:7c:fb:6f:b2:ea:e4:6c:5f:2e:02:
                    2f:69:24:03:bc:57:a6:c7:20:5f:23:24:ea:ee:7c:
                    a9:ef:8e:09:65:42:bd:e5:4b:bf:6d:23:f3:e9:c8:
                    19:d5:7e:b8:1b:02:a6:a3:a5:ed:c5:51:cd:34:67:
                    10:6b:04:98:eb:fb:08:aa:10:41:4f:09:c8:5e:61:
                    04:bc:24:f5:55:c0:96:5e:4b:32:65:a6:89:42:89:
                    26:44:d8:9f:ff:5d:7a:8f:e1:4a:ac:56:07:de:c9:
                    ed:2d:28:91:4c:d1:ac:fa:81:77:9f:bb:56:ed:fd:
                    45:31:f3:14:81:0f:ce:4d:02:95:f5:22:10:af:45:
                    0d:d6:ff:c9:d9:f5:af:ef:0e:02:db:61:ef:4d:c4:
                    78:89:bf:0f:48:32:55:71:9d:33:9c:04:96:93:16:
                    8a:57:c4:eb:eb:d8:d8:e5:d9:14:ec:4e:93:c0:5e:
                    c7:28:22:e9:8b:04:27:2d:9d:97:1d:9c:3c:0e:56:
                    39:d5:c3:cd:b7:3e:7f:5b:b2:10:97:0f:53:f5:00:
                    bd:f6:08:27:8c:3e:fc:9f:e9:e0:fb:60:8a:80:57:
                    c3:bd:6a:87:09:06:c1:64:07:d9:23:6d:ec:4c:f6:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E9:5A:72:7A:7A:18:9E:33:62:83:C7:72:A6:DE:F9:87:B3:B2:79
            X509v3 Authority Key Identifier:
                keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:0c:7f:50:f7:7d:62:e8:6e:ce:ac:dd:4e:e3:63:a9:02:d9:
         cb:40:d2:6e:47:91:a2:85:82:8f:6a:52:9f:c5:81:94:23:f5:
         57:db:6c:ec:a0:58:f3:c2:03:8d:e4:14:d9:17:01:72:c9:4d:
         38:4d:59:fa:93:ea:18:09:9f:23:f2:37:8e:02:bb:18:04:34:
         4a:be:46:5a:52:91:3f:0e:27:5e:bd:09:4a:72:c5:f7:eb:df:
         70:37:54:30:a2:70:48:d5:ae:d5:cb:ba:cb:29:66:7e:5c:e1:
         fe:9e:1f:f3:c1:57:10:5e:a8:5a:16:ec:02:e0:1e:30:9f:a2:
         26:e0:9e:90:16:98:03:4e:cf:b7:37:9a:33:dd:83:d0:f5:f0:
         c0:be:62:5a:09:93:fe:a7:5b:0a:b0:97:07:52:6c:50:52:c7:
         c9:0c:9d:de:2a:d9:2b:f8:9c:53:61:8f:d3:d1:93:d0:c7:8f:
         b5:4f:7c:80:88:4f:bb:92:6c:c6:18:2d:bf:ce:5e:a1:50:9f:
         17:3e:10:50:4b:3f:2b:17:7b:e6:35:8d:08:e7:77:34:82:8c:
         45:49:da:29:5b:9d:cf:2c:cf:3d:e2:93:76:f3:7f:15:a2:20:
         13:62:98:43:1b:70:94:05:2c:c9:8b:2f:fd:4e:a6:6f:a4:50:
         df:b0:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:52:50 2026 by rpki-client