Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
File:                     ycIPtAaIDHHcvabGs_umov85Kks.mft (raw, json)
Hash identifier:          STbpiBHLPDtqvw6ugMSjURU6MMAzeNgi5XOADwvM4v8=
Subject key identifier:   DE:C4:42:42:61:6E:E1:9E:27:53:3A:2F:25:ED:CE:0F:2D:A6:8E:5C
Authority key identifier: C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B
Certificate issuer:       /CN=A91B86F6/serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
Manifest number:          97
Signing time:             Wed 23 Sep 2026 07:14:15 +0000
Manifest this update:     Wed 23 Sep 2026 07:14:14 +0000
Manifest next update:     Wed 30 Sep 2026 07:14:14 +0000
Files and hashes:         1: ycIPtAaIDHHcvabGs_umov85Kks.crl (hash: L87Ur6c7ErEUPj7TsSsXzFyEvv5EGtwOMqGgepZd2h4=)
                          2: 41E03246DA3E11F0A9D9994C8ED3641D.roa (hash: 6vYv1AQo1s918xYyZHGRUxlpF3yCg3Sgy/uyMLVhgjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl
                          rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B86F6, serialNumber=C9C20FB406880C71DCBDA6C6B3FBA6A2FF392A4B
        Validity
            Not Before: Sep 23 07:14:14 2026 GMT
            Not After : Sep 30 07:14:14 2026 GMT
        Subject: CN=6ab37c47-24a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:8f:8f:5c:6c:9e:bb:57:e5:70:b6:99:09:
                    2d:0e:3b:81:2e:23:c2:28:20:a4:d2:44:9c:13:00:
                    27:a8:fb:ef:c0:b4:68:d3:8d:81:d6:61:e3:d9:e6:
                    40:63:2b:df:fa:96:c9:b0:f2:91:1d:03:7b:61:9f:
                    ae:12:fa:6b:78:07:a3:03:04:ef:43:be:69:a7:26:
                    a9:23:c6:17:bd:6f:3b:35:44:75:e4:18:76:03:6d:
                    43:8f:ce:19:02:5d:ac:ef:30:73:35:40:60:24:94:
                    3d:f2:43:17:da:8a:e3:54:f3:29:4c:18:c5:95:1e:
                    90:ab:15:6f:85:38:99:ad:6b:cd:c0:45:b0:4c:d7:
                    a5:b0:85:56:c5:42:ff:52:34:fd:d4:58:a5:17:85:
                    0a:8e:38:6f:27:b5:07:5c:b3:13:4b:a3:2e:d9:81:
                    01:14:1c:32:ae:23:15:e5:5d:71:17:63:a3:a2:94:
                    be:e3:7f:e9:a9:0b:3f:f5:d0:f2:39:3c:37:84:72:
                    b3:29:6a:ef:92:95:7b:a8:85:63:71:15:2b:e6:53:
                    4e:1f:0c:bf:f8:bf:46:74:2f:59:c1:cd:72:2e:b8:
                    b6:d5:5d:bb:67:de:b1:4c:20:1d:f4:67:5c:bf:27:
                    75:76:99:88:d8:c4:5c:66:ab:be:3c:66:d8:02:8b:
                    a5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C4:42:42:61:6E:E1:9E:27:53:3A:2F:25:ED:CE:0F:2D:A6:8E:5C
            X509v3 Authority Key Identifier:
                keyid:C9:C2:0F:B4:06:88:0C:71:DC:BD:A6:C6:B3:FB:A6:A2:FF:39:2A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycIPtAaIDHHcvabGs_umov85Kks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B86F6/B7DA1396DA3D11F0921E5EA28DD3641D/ycIPtAaIDHHcvabGs_umov85Kks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:30:e3:ee:c9:f1:79:bd:fc:b3:f1:bb:2a:5e:26:39:63:
         f5:c8:20:46:fc:bd:c4:c5:d0:8f:bc:02:ca:05:6a:4b:e8:1f:
         aa:d9:62:a9:f9:4f:31:53:04:5e:23:f3:7d:db:a9:b4:f3:2e:
         68:be:bb:44:56:43:8f:22:75:93:f8:9e:d1:82:83:39:56:4d:
         1f:d9:c4:14:e5:84:c0:80:8e:d2:44:0a:68:97:09:46:d9:73:
         d5:6c:fa:91:8d:55:e3:29:cc:69:55:cf:1e:f2:c7:09:1f:1f:
         ff:54:99:d2:30:d8:a2:dd:5b:38:fa:b3:ad:e8:20:9a:92:a1:
         46:da:a7:16:14:29:2f:b5:f0:51:82:8a:39:90:48:f6:09:eb:
         f6:07:00:dd:90:e8:c7:31:b3:58:47:92:65:f7:b8:3e:b4:2e:
         46:a7:5d:b9:57:7e:3c:d8:85:31:a3:ad:23:46:38:6f:80:9c:
         8e:52:99:6e:64:ab:e7:6a:e5:7d:55:95:6b:fd:9c:66:be:54:
         29:92:51:a4:1d:2c:65:2e:62:2b:3b:ec:5f:05:1b:0a:96:b9:
         7e:58:77:9f:fe:b2:79:89:8e:f7:ea:22:ce:91:b3:50:12:4c:
         01:e9:15:b4:e0:6c:98:90:ce:f1:28:66:8e:b6:4f:eb:a4:88:
         d6:9b:91:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:14:05 2026 by rpki-client