Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
File:                     YwwCddFRnD7kuqftn9t0UvPhDEs.mft (raw, json)
Hash identifier:          kDqG3RQcwXBab81m8uRCvQ+bpew7VdMqVtH3zzGeBkU=
Subject key identifier:   9D:7A:55:B6:4E:14:63:4B:32:C6:42:93:39:FE:07:F2:AF:76:B5:4E
Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Certificate issuer:       /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
Manifest number:          25
Signing time:             Fri 25 Sep 2026 08:57:41 +0000
Manifest this update:     Fri 25 Sep 2026 08:57:41 +0000
Manifest next update:     Fri 02 Oct 2026 08:57:41 +0000
Files and hashes:         1: YwwCddFRnD7kuqftn9t0UvPhDEs.crl (hash: 7YmcrHqKzWcoXPILZ3WdBBSuGnIPqaiYLRrBmlFxVzY=)
                          2: 32701246850511F19B0544DB68A30FBC.roa (hash: lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
                          rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 08:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
        Validity
            Not Before: Sep 25 08:57:41 2026 GMT
            Not After : Oct  2 08:57:41 2026 GMT
        Subject: CN=6ab63785-36ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:82:0a:77:51:9d:4a:07:af:aa:cb:15:ae:
                    46:09:af:93:2e:2f:ac:bd:59:72:5c:dd:a6:ff:5a:
                    0a:b1:39:54:f7:8f:c5:58:19:47:c3:87:81:4e:01:
                    8b:ec:0a:f8:5c:af:b2:5c:87:1d:87:1c:2b:53:57:
                    b6:30:ad:7e:8c:71:7a:33:f1:71:ba:18:f7:88:cb:
                    03:e9:48:e5:1d:6f:82:fa:6c:2e:fb:e2:56:3d:76:
                    a5:be:4f:34:c5:45:ef:02:95:22:60:4f:11:8e:6b:
                    36:84:c5:62:f8:71:f1:7f:b4:af:d5:05:da:41:11:
                    66:8a:96:be:6b:83:ed:60:4f:6d:f9:8f:24:f9:92:
                    9b:f7:7f:af:b9:13:31:03:56:ea:62:70:3f:a5:28:
                    bd:38:d5:a7:8b:de:4f:aa:4b:23:fc:7c:9d:3a:6e:
                    56:33:ba:56:f7:88:b9:41:23:22:94:0e:bd:84:8b:
                    89:06:ad:fc:96:57:75:11:04:35:cb:05:a6:88:84:
                    08:09:27:88:18:f2:0e:db:32:cd:fb:d8:97:20:7f:
                    b1:fe:e0:64:4f:56:cb:9b:7f:b4:ab:34:27:e6:dd:
                    07:e7:57:71:f7:d5:8e:f7:b5:92:d6:f1:4c:60:4e:
                    ce:ea:12:3f:07:e9:0a:47:58:8d:e8:35:be:9b:a4:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:55:B6:4E:14:63:4B:32:C6:42:93:39:FE:07:F2:AF:76:B5:4E
            X509v3 Authority Key Identifier:
                keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:99:96:84:f5:ed:ae:8f:61:4b:ce:86:0d:46:3d:ac:66:88:
         99:b2:ba:c1:e2:38:80:14:2d:ab:f7:e0:0c:9c:0f:f0:04:23:
         c3:41:e9:4d:7b:7c:5b:8f:40:9a:95:d7:9b:e1:50:cc:5c:f9:
         64:3f:f7:e6:66:fb:33:33:28:12:51:dd:cf:b7:39:51:95:c1:
         3e:bd:fe:90:6c:3d:b1:48:4d:93:3a:76:d2:11:0d:9f:39:c6:
         c6:e1:8c:2f:37:cb:ea:71:27:f8:ee:9d:5a:bb:52:bf:78:dc:
         8c:40:3a:f6:87:f1:e7:43:5c:48:da:2b:dc:84:5e:4c:05:8c:
         5b:6b:f7:52:52:3e:fc:3e:5d:ce:89:2e:3e:0e:96:b1:aa:b8:
         a3:52:16:d0:56:7f:28:0c:9f:86:6d:dd:bc:e9:12:d6:5c:a1:
         19:30:9d:11:5e:39:78:26:98:f1:13:44:6a:9f:82:0d:e3:4f:
         09:b8:18:38:3f:61:a1:54:dd:79:08:23:b6:0a:96:dd:c7:32:
         f8:79:79:59:eb:22:eb:35:ce:1a:7b:91:42:6b:48:8e:ff:66:
         e7:63:52:97:bf:da:ea:51:1a:89:8c:d5:47:a6:f3:57:c8:3d:
         dd:61:9a:a7:a5:fa:8e:27:75:43:d9:e9:1b:09:f7:47:60:3e:
         c6:36:7f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:04:06 2026 by rpki-client