Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File:                     yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier:          vL2F2vmxwnzMcBoU/ss1C2Ghjm3mcBJZvNLKf7e+heQ=
Subject key identifier:   10:7C:98:79:36:4E:3E:8F:00:0F:68:39:FC:53:9D:7E:0E:21:57:9E
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer:       /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial:       3582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number:          3582
Signing time:             Thu 24 Sep 2026 14:54:51 +0000
Manifest this update:     Thu 24 Sep 2026 14:54:50 +0000
Manifest next update:     Thu 01 Oct 2026 14:54:50 +0000
Files and hashes:         1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: cJtEffxBZErtfbyqRe0JEMB7NySptSBLAAG1nhdyOSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
                          rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13698 (0x3582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
        Validity
            Not Before: Sep 24 14:54:50 2026 GMT
            Not After : Oct  1 14:54:50 2026 GMT
        Subject: CN=6ab539ba-076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:09:37:ad:a8:21:b2:34:cc:9e:52:f5:a5:
                    b3:c3:8e:41:58:04:d8:56:42:77:fa:c5:ce:d2:7a:
                    a2:8d:fb:26:18:64:04:35:23:cd:33:e0:0e:59:78:
                    8b:05:ea:1e:9e:1d:11:4d:31:18:46:c2:f2:63:33:
                    17:00:55:c6:40:9d:65:61:32:67:ef:3a:35:56:19:
                    45:5b:de:c5:3a:89:18:87:dc:15:cb:43:d0:60:d7:
                    58:b3:12:97:86:c3:56:95:fe:6d:48:81:23:d9:60:
                    1d:97:82:31:6b:b5:d0:ee:c4:41:b0:c2:46:3e:e2:
                    b5:98:09:ac:af:33:fe:f6:44:17:17:0b:d3:ba:d9:
                    9c:f9:9b:bc:20:1d:5b:62:33:b8:83:7b:da:5c:88:
                    94:92:54:9d:a3:16:07:7a:4a:5f:35:4d:b5:df:34:
                    a0:ee:9b:ab:bd:33:b2:e7:7e:e5:c2:39:87:64:2b:
                    83:3c:89:be:56:c4:12:eb:de:3f:8f:9a:d7:c4:ac:
                    ff:35:ec:da:84:19:f8:60:3e:c4:68:87:a9:20:08:
                    1f:d1:68:ef:92:08:cc:96:d5:08:22:f9:ba:37:3b:
                    4e:05:15:06:7d:e3:d9:34:d9:f4:60:48:0b:00:ad:
                    f2:4d:e8:88:49:89:3d:a6:7d:49:ae:7a:60:89:ae:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:98:79:36:4E:3E:8F:00:0F:68:39:FC:53:9D:7E:0E:21:57:9E
            X509v3 Authority Key Identifier:
                keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:03:35:70:fc:9f:66:22:12:20:c9:40:25:5f:04:d0:6b:d7:
         2a:21:b5:f0:bc:b9:69:9c:a0:d1:37:19:88:9c:ed:d3:05:61:
         a2:16:06:e2:49:4d:7c:29:a9:9c:02:5d:b8:92:8e:98:89:7b:
         18:07:57:52:7a:88:88:4b:80:03:70:35:bf:20:14:93:13:64:
         17:06:c2:b9:76:45:70:23:34:45:f5:da:cc:37:8e:56:36:7a:
         05:d8:82:bc:22:86:ef:89:d3:fe:06:8b:08:aa:a7:d6:ba:35:
         ac:20:5e:73:8b:3f:6b:cb:2c:ca:e2:70:f1:05:5c:e2:de:ea:
         f4:64:01:8b:51:39:78:2c:16:cc:d4:62:93:5b:fa:75:69:a8:
         f8:83:64:bf:69:15:d3:c2:98:cf:15:c8:ba:70:61:cb:54:47:
         1e:6a:b1:27:4c:ee:17:74:82:6e:87:87:dc:c9:fc:61:36:0c:
         15:9c:ac:02:be:7d:1c:d3:f5:6f:25:7f:f7:41:39:14:18:a3:
         a9:33:9d:46:47:d6:27:80:8b:31:11:81:24:04:63:a6:6f:34:
         d8:31:9a:6a:91:00:09:a1:9c:87:1d:3f:55:5c:87:d2:4b:95:
         55:0a:2f:0b:69:f8:45:d4:9a:59:19:13:8f:31:86:8c:5c:e8:
         9b:96:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:42 2026 by rpki-client