Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
File:                     YmfJfrSg3wHtvW-dQahqh54CeX8.mft (raw, json)
Hash identifier:          9qxi6kwFof9+Unfb6XwGOnfwq1XxPonLvvKDys4Q4nc=
Subject key identifier:   70:07:4B:39:7D:73:33:AF:B2:64:46:E8:EC:94:3E:9A:93:61:2E:2E
Authority key identifier: 62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F
Certificate issuer:       /CN=A91FA66B/serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
Manifest number:          02A0
Signing time:             Tue 29 Sep 2026 02:05:28 +0000
Manifest this update:     Tue 29 Sep 2026 02:05:27 +0000
Manifest next update:     Tue 06 Oct 2026 02:05:27 +0000
Files and hashes:         1: YmfJfrSg3wHtvW-dQahqh54CeX8.crl (hash: c5aYXTvGcib6clg2h/pQetyHo7SV2uKD7d/OaEbFwiI=)
                          2: B2DE2498C4FD11ED909F2770C4F9AE02.roa (hash: 3w67fjihibZok1qWjIP39FszAZUqgmCtMKGJLAm88jM=)
                          3: 8rS_G1x6V5DHl1lJ_G5ZjDwhLpI.asa (hash: AgJfggqP9rlRSIR8acybARAvCDcpBRDNiEDimN569t0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl
                          rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 02:05:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA66B, serialNumber=6267C97EB4A0DF01EDBD6F9D41A86A879E02797F
        Validity
            Not Before: Sep 29 02:05:27 2026 GMT
            Not After : Oct  6 02:05:27 2026 GMT
        Subject: CN=6abb1ce8-5aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:16:56:fd:a8:21:30:b8:fe:96:da:ad:c7:
                    08:1b:03:eb:dd:25:cf:d4:58:7e:75:e1:7d:62:82:
                    40:04:f3:d1:50:84:6a:f7:32:1b:8e:b9:a5:8a:60:
                    48:de:bc:22:ea:65:8e:fd:43:93:8b:33:41:e2:61:
                    8c:5c:d0:5a:77:cf:35:8b:5c:89:78:14:02:65:5b:
                    6e:e3:39:8b:11:6e:8a:b5:9f:6f:c2:f8:aa:58:ba:
                    08:8c:3f:f4:f9:a0:0c:c7:a9:1b:05:d9:0d:87:fc:
                    3e:86:8f:d9:19:76:46:ac:af:52:43:6a:93:99:4e:
                    56:59:78:c2:68:80:4d:be:c3:6b:c3:e4:8f:19:42:
                    4f:22:42:b6:84:b2:3f:82:6d:32:e5:38:0d:3a:24:
                    41:8d:ff:63:2d:0d:b9:f5:6a:7e:44:5d:4c:97:7a:
                    d7:1c:60:da:71:68:cb:c6:ab:f0:08:05:06:93:06:
                    e8:15:b0:d7:9f:e7:77:50:10:a8:05:6d:18:28:55:
                    ea:c6:1f:1b:79:38:ed:5d:22:78:5c:75:0f:6f:f4:
                    89:d6:67:81:6f:df:ad:cb:9a:96:30:3a:25:96:ae:
                    df:32:18:05:8f:cf:c9:5c:8c:cb:4a:76:72:98:16:
                    fe:1d:e8:09:7a:f4:35:58:48:5a:32:a4:2c:63:c1:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:07:4B:39:7D:73:33:AF:B2:64:46:E8:EC:94:3E:9A:93:61:2E:2E
            X509v3 Authority Key Identifier:
                keyid:62:67:C9:7E:B4:A0:DF:01:ED:BD:6F:9D:41:A8:6A:87:9E:02:79:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmfJfrSg3wHtvW-dQahqh54CeX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA66B/142BCB96C4FA11ED9BDF3157C4F9AE02/YmfJfrSg3wHtvW-dQahqh54CeX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:ea:0c:6a:9d:bc:76:df:a8:35:f5:b9:68:16:77:2d:e2:
         8b:98:1f:93:a8:9a:32:64:54:46:8e:0b:9b:d7:31:e2:a4:68:
         a9:b2:b7:c3:5d:d1:88:90:1c:b8:15:e5:49:f3:9b:fc:46:2d:
         ac:31:ea:68:c2:6a:78:10:3e:0b:df:ab:dc:00:0e:84:c4:a3:
         4b:d2:5b:0f:f7:26:2e:d5:9c:a8:f4:aa:fb:cc:90:99:25:ac:
         c5:b5:45:a2:96:45:0e:2f:1a:a2:84:38:66:a6:93:45:03:b1:
         bc:69:99:a0:30:6f:c2:66:97:05:1e:4b:c6:c4:b7:4f:13:6d:
         14:c7:a0:cb:0f:f4:fc:64:be:d8:16:26:68:16:32:24:32:6e:
         e2:4f:3a:69:2e:c1:0e:0a:62:97:b4:f7:71:a0:99:31:98:c2:
         00:9b:06:b3:3c:0b:9b:b9:13:f7:e5:4b:ac:2c:3c:b6:b5:ef:
         c2:b7:73:1c:cb:85:81:59:5d:fa:60:0b:03:c8:60:b9:3c:52:
         ba:c0:c6:80:a3:a7:19:27:c5:f0:29:db:92:c5:c1:2a:45:eb:
         ab:ed:b8:28:11:42:8d:ea:ca:36:f7:c1:91:ff:97:e2:26:52:
         2f:c7:d7:06:45:29:9c:70:03:9f:e5:66:04:c3:7d:90:e8:2c:
         38:22:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:45:09 2026 by rpki-client