Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          CsEapRSN7vJruVeXmn620BDQ/EtQOzs1bU/mhQNFW60=
Subject key identifier:   FF:23:0A:D2:FC:70:C5:50:61:AC:81:40:FF:57:E3:9C:E5:D6:5B:C7
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          A4
Signing time:             Wed 23 Sep 2026 06:58:58 +0000
Manifest this update:     Wed 23 Sep 2026 06:58:58 +0000
Manifest next update:     Wed 30 Sep 2026 06:58:58 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 4Y6Xqcw+uShxBe2wWljPSNsHMARPlKZk81f80R7UsBk=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Sep 23 06:58:58 2026 GMT
            Not After : Sep 30 06:58:58 2026 GMT
        Subject: CN=6ab378b2-3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:77:14:e5:16:06:88:20:96:5c:21:fd:b9:
                    6e:01:eb:6d:a1:1f:9e:64:67:da:13:47:d4:28:57:
                    d8:13:5d:f9:74:0d:c4:87:e3:03:39:17:9e:38:bc:
                    de:cb:c8:0c:0a:58:6b:79:cc:39:28:7c:31:39:e6:
                    98:c1:77:12:81:e7:00:f4:2e:b6:52:6f:16:55:2c:
                    84:7b:e0:4d:18:d7:5b:8a:21:39:b9:02:5e:29:84:
                    57:3a:56:f5:cd:bd:99:77:2f:91:fb:35:03:8f:98:
                    8a:8c:c3:4e:36:89:ef:f6:78:b5:5a:56:39:43:e8:
                    c3:23:fb:01:a2:e3:fd:ab:44:5b:9b:24:92:55:9e:
                    70:f3:f1:87:1c:18:b9:e4:9d:cb:43:10:5e:00:ac:
                    73:bc:1a:db:8a:13:d5:01:fa:f5:27:69:ed:23:88:
                    08:ee:3d:ac:df:46:b1:bc:d8:45:10:8b:12:3d:ad:
                    a8:39:50:05:3e:78:b3:83:bb:96:19:c1:de:9f:eb:
                    08:c9:65:16:3d:12:f6:35:63:de:ec:60:2e:9b:f9:
                    21:66:2c:44:33:36:c0:3f:60:14:11:8e:69:1f:02:
                    7f:47:ac:b2:3d:db:52:8c:00:aa:6d:c1:31:6d:8c:
                    d2:34:f0:80:17:39:af:b1:b3:f8:01:8d:ee:f1:9b:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:23:0A:D2:FC:70:C5:50:61:AC:81:40:FF:57:E3:9C:E5:D6:5B:C7
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:be:b1:6d:91:91:c4:65:79:75:fd:24:7b:0c:68:5f:42:86:
         e6:c6:eb:a2:3e:c8:8a:77:bc:49:4c:25:a0:c9:5d:e5:8b:16:
         5a:d6:d9:46:f8:cf:bf:16:57:0e:c3:ab:95:f1:3b:c8:bd:f5:
         db:29:60:8d:7a:03:91:2a:37:d6:21:3d:f0:37:c8:74:bd:c5:
         93:3e:94:06:de:1f:28:3a:d7:ff:b0:2b:70:84:75:c4:d9:b5:
         c0:cc:0b:27:8a:02:f3:74:d3:b7:fe:c4:e2:6c:a6:13:66:b2:
         aa:63:01:fc:62:80:44:05:c3:7b:b1:02:1b:38:9e:25:89:61:
         07:96:9a:59:60:ed:e9:0c:34:dc:54:85:fd:57:fe:bd:26:c3:
         9f:d0:de:19:1d:ce:9f:09:67:25:c8:ca:73:88:4f:5d:42:73:
         a4:9e:00:58:f3:c2:3d:7b:81:77:ab:77:75:26:b7:c9:81:88:
         9e:65:2f:a5:58:23:22:fa:45:4b:8a:b3:18:92:d0:76:c7:e7:
         37:5b:fe:04:da:87:bf:d8:4c:4b:0a:9d:5c:ed:38:ac:3c:d5:
         0a:8f:c7:0b:b4:7f:99:2d:6e:81:e6:88:fc:c2:b5:0a:3e:8d:
         9c:ef:7e:3f:27:61:c9:66:19:5f:bd:4b:7e:0d:88:bb:54:ad:
         04:d6:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:39:59 2026 by rpki-client