Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
File:                     Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft (raw, json)
Hash identifier:          k+ReqMvVcDgQViL+fU/+6zajZG5pAqbtYVXTdItrB90=
Subject key identifier:   09:AE:19:F1:90:FE:AB:6A:99:11:0C:B1:43:FA:E4:A1:26:BC:9E:2B
Authority key identifier: 63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E
Certificate issuer:       /CN=A91F7315/serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
Certificate serial:       0C52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
Manifest number:          15A5
Signing time:             Tue 22 Sep 2026 18:35:28 +0000
Manifest this update:     Tue 22 Sep 2026 18:35:28 +0000
Manifest next update:     Tue 29 Sep 2026 18:35:28 +0000
Files and hashes:         1: Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl (hash: mmEsed0YELyqCPdbSaOGh9VcPX3hAxA7xVLBeNMoHAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3154 (0xc52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=63EBA48502511340B825261D5EC20A9127AF295E
        Validity
            Not Before: Sep 22 18:35:28 2026 GMT
            Not After : Sep 29 18:35:28 2026 GMT
        Subject: CN=6ab2ca70-b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f5:d0:ea:5b:eb:22:f2:4b:2a:bf:62:fc:92:
                    26:47:06:2e:ae:e8:57:b4:fc:ea:72:22:81:42:61:
                    b3:8a:d5:9b:fe:da:38:d2:80:91:5b:29:92:37:be:
                    4a:57:03:5b:35:d7:7b:c4:06:6e:07:e2:e5:bd:69:
                    b1:5d:d8:8d:ea:db:ab:76:15:cd:01:d6:69:9f:04:
                    0b:76:e4:ef:79:09:2e:e5:8e:5e:e0:63:f7:ff:98:
                    f5:81:15:5f:9e:35:fb:2a:c5:dd:e3:8e:75:0a:16:
                    ff:37:86:76:97:44:91:0d:03:37:54:eb:64:9d:12:
                    44:9a:4b:b6:94:c1:c0:d8:09:c1:bd:11:b0:63:ce:
                    b9:3a:94:10:8c:fc:88:3b:7d:c0:95:47:5b:40:5b:
                    c0:49:b1:b8:e1:e3:84:f9:80:e1:d4:65:fc:1f:92:
                    43:87:70:e6:c1:92:51:f8:ed:3c:2f:1d:2e:dc:84:
                    04:bd:7f:0a:75:24:e8:f6:3f:86:c2:bd:9a:47:d6:
                    a6:b0:a0:d9:d3:51:8e:8a:6c:1f:de:ac:66:fb:3e:
                    41:a1:1e:6a:9e:5b:3a:f7:8e:1e:20:0a:6c:a8:bf:
                    e3:eb:82:1a:7f:93:e1:c8:88:d3:15:9b:cd:20:40:
                    ce:08:19:ba:89:66:a8:9e:da:92:34:f8:d8:bf:4c:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AE:19:F1:90:FE:AB:6A:99:11:0C:B1:43:FA:E4:A1:26:BC:9E:2B
            X509v3 Authority Key Identifier:
                keyid:63:EB:A4:85:02:51:13:40:B8:25:26:1D:5E:C2:0A:91:27:AF:29:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-ukhQJRE0C4JSYdXsIKkSevKV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/Y-ukhQJRE0C4JSYdXsIKkSevKV4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9b:c7:23:cc:3e:df:cf:8d:45:39:11:30:bb:78:0f:26:c7:
         18:ef:f2:a4:c7:ed:4a:c7:e0:38:91:d8:9e:9d:eb:cb:83:57:
         38:e5:49:9e:73:44:f0:53:96:5c:08:b5:7a:f2:3e:be:35:4f:
         93:b1:9f:3b:26:6c:d2:6a:2e:1b:ab:b7:3a:cc:cc:dc:ab:b5:
         22:03:13:09:74:60:df:2d:55:5a:92:5c:d6:a5:43:b9:a2:ca:
         4b:12:1a:3d:e5:fe:b9:dc:67:f7:69:ba:5f:9d:cd:e9:30:4b:
         3b:0f:10:fe:7e:98:41:d8:85:b4:86:ba:f9:99:a7:71:54:52:
         25:f9:4d:9d:af:8f:92:82:23:0b:bc:e8:5f:de:27:a1:d7:f1:
         c3:e9:33:eb:fa:16:94:fe:63:84:ef:01:09:b0:44:ed:3d:37:
         16:e9:89:78:f5:d7:a2:10:7a:4f:bc:94:da:91:6e:99:f5:88:
         55:f8:36:b1:11:97:c3:7c:52:69:48:91:9a:e0:7e:18:d7:c7:
         8c:e1:1e:2f:94:a4:65:f0:b2:f7:2a:6f:a1:92:4e:d8:0c:86:
         24:54:30:28:6e:72:f0:a8:46:3c:6b:c9:bf:d8:4b:36:cb:16:
         e0:67:57:5e:b6:9c:3d:cc:20:db:5e:a9:6a:81:91:87:fd:fd:
         1c:db:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:30 2026 by rpki-client