Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier:          SPpQEjuAMtcLQxOz6ExHJf7mKDe8ZkrAZqIQH3iF5zE=
Subject key identifier:   84:63:B6:94:76:90:31:DC:D1:3D:85:E0:2F:39:08:A0:BD:56:7A:7B
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer:       /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial:       06AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number:          06A7
Signing time:             Thu 24 Sep 2026 22:19:47 +0000
Manifest this update:     Thu 24 Sep 2026 22:19:47 +0000
Manifest next update:     Thu 01 Oct 2026 22:19:47 +0000
Files and hashes:         1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: d8S9065pN+FXIrEa/BtQkLYZkIxZbuS+anOOETgcRXY=)
                          2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:19:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Validity
            Not Before: Sep 24 22:19:47 2026 GMT
            Not After : Oct  1 22:19:47 2026 GMT
        Subject: CN=6ab5a203-3373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:a9:f5:fd:cf:ab:7a:64:9b:2f:5e:13:cb:
                    df:05:02:de:14:a0:52:99:98:58:d2:f5:a1:b8:26:
                    e7:4d:45:b0:f1:ec:c7:3f:48:dd:65:4b:f4:12:6e:
                    28:ec:c1:60:ac:1a:9d:fa:88:55:a6:bc:6d:a3:b5:
                    dc:3e:e4:ee:73:8e:da:09:a7:e7:2d:bd:8a:c4:94:
                    be:e3:e6:e2:78:fd:0d:39:41:26:d6:b0:1d:a4:6d:
                    7a:dc:55:2d:87:b4:5d:81:43:02:2e:33:08:9f:4e:
                    f8:d5:05:bc:7d:1a:d0:97:4d:d1:be:48:22:50:44:
                    07:19:79:9d:9e:a9:98:6e:f5:19:97:ed:e1:23:24:
                    07:3c:32:dc:09:ee:e0:5d:fb:07:0a:fc:d5:f1:d7:
                    2a:12:5d:5e:e3:fd:7e:38:25:1a:4d:d7:2e:9a:41:
                    ba:cd:ca:b8:df:b8:c8:6c:12:7d:28:d8:f3:a3:4f:
                    08:9a:7e:09:e4:18:11:f0:fb:5b:e5:28:bc:7c:6c:
                    f9:95:26:7d:be:ff:ee:78:1f:05:41:ea:19:4d:c7:
                    4b:5d:02:25:b6:39:00:3b:26:14:6b:9e:8a:a3:fd:
                    1f:da:d6:a7:4c:fe:b6:38:bd:fc:91:34:54:c4:78:
                    65:04:3c:96:17:04:44:17:52:fa:ba:cb:37:5c:d1:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:B6:94:76:90:31:DC:D1:3D:85:E0:2F:39:08:A0:BD:56:7A:7B
            X509v3 Authority Key Identifier:
                keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:4f:d4:c8:3c:69:ce:2d:e7:49:48:c4:2a:73:9c:b6:ff:
         a6:76:b3:d2:85:c9:ed:cc:6f:06:38:3f:4d:b5:89:a9:a9:aa:
         78:73:23:e2:92:88:0a:23:2b:ac:fd:49:e9:03:b3:52:d7:1a:
         76:94:e1:e1:b3:fa:d9:81:93:8a:3d:d4:aa:9e:26:30:e3:81:
         ef:57:fd:21:6d:c7:98:8f:90:80:b4:91:d7:2c:82:87:56:61:
         37:cb:c2:e4:1f:c0:3b:ee:7c:3f:18:38:90:02:79:a9:95:64:
         81:8e:04:7c:f6:12:7a:7e:80:76:f2:2a:92:df:8e:e5:a6:37:
         6d:e3:da:08:36:0c:07:77:ae:c0:4e:73:24:5a:17:4d:9a:be:
         74:95:6a:dc:79:bd:1c:95:90:fd:43:eb:0b:55:7a:00:28:f4:
         fc:6c:20:76:66:3a:94:7f:ff:bc:40:9f:c4:2a:c9:44:2b:b5:
         ce:c2:0d:ae:69:eb:e1:41:d0:e8:00:e0:ce:33:ba:49:96:6b:
         95:75:31:b4:fc:a4:4c:fb:b6:3c:16:bc:79:2e:8f:16:0e:82:
         76:1e:fa:f4:61:13:00:6f:34:ab:fd:ab:df:11:00:40:83:82:
         7e:50:ec:4a:ee:11:63:29:a6:28:b9:e8:62:20:a4:58:d2:84:
         86:36:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:17:31 2026 by rpki-client