Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File:                     y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier:          zRBlBnRFT/3Th0J3K/9EnNSFkXrvOkEs6EYDVAzpWLA=
Subject key identifier:   74:E9:5C:F5:CF:06:F6:A5:41:D5:68:D3:CB:55:05:E8:37:6A:3C:39
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer:       /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number:          018A
Signing time:             Tue 13 Oct 2026 05:04:49 +0000
Manifest this update:     Tue 13 Oct 2026 05:04:48 +0000
Manifest next update:     Tue 20 Oct 2026 05:04:48 +0000
Files and hashes:         1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: ReB6vnL98saz4D9MMCihe+Kj7s7vopcyHMq+zGrq+vQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 05:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
        Validity
            Not Before: Oct 13 05:04:48 2026 GMT
            Not After : Oct 20 05:04:48 2026 GMT
        Subject: CN=6acdbbf1-679e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:fa:eb:1a:b6:8e:89:12:ad:1b:e4:4d:ca:
                    ef:83:f7:7e:f0:d6:bd:7f:4f:8e:6a:59:28:81:38:
                    4c:91:fe:1d:e7:e9:76:8c:4e:7f:dc:0c:4b:62:ed:
                    1d:70:64:f2:65:36:de:d3:bb:c8:10:a4:37:e6:4d:
                    d4:51:bc:7f:bb:99:2f:fb:f4:f1:8d:db:6b:58:0a:
                    28:9c:82:c0:d7:e8:e5:24:47:aa:29:94:76:70:b0:
                    6d:ce:83:c6:23:33:09:57:15:f2:a5:58:3e:f8:96:
                    a4:c4:6c:69:5b:4f:1e:b2:b3:08:73:1c:44:ae:56:
                    e7:0c:6c:1f:70:e3:a0:ae:21:64:19:d0:bc:be:03:
                    42:93:40:b2:ec:4f:f9:96:3d:0b:c7:e3:36:93:62:
                    83:9e:7f:ca:34:bd:76:3f:66:46:d9:f8:71:ac:0a:
                    22:81:a8:ba:13:bb:72:68:26:70:68:ca:9b:59:91:
                    0a:18:31:ea:a8:f0:02:4b:fb:d2:45:3d:d1:26:70:
                    5a:98:0b:62:fa:25:8f:49:31:96:f2:70:58:ee:61:
                    c9:4b:c4:4d:22:36:e2:c7:d1:f4:6c:b1:a0:3a:68:
                    08:bb:41:2a:8d:56:97:f0:82:86:f8:2d:09:a8:3e:
                    a2:c3:ee:45:67:1f:25:60:90:8d:4b:8e:06:57:aa:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:5C:F5:CF:06:F6:A5:41:D5:68:D3:CB:55:05:E8:37:6A:3C:39
            X509v3 Authority Key Identifier:
                keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:32:2a:33:55:98:f9:2d:ab:ce:4a:94:48:5b:02:9a:fa:57:
         f2:e7:49:f3:a3:6c:93:38:fc:dc:3d:62:2c:41:9b:87:56:ba:
         f0:f8:ee:ac:33:db:89:18:fb:c6:52:a0:6c:c4:47:db:0a:c2:
         7e:50:96:b0:23:06:39:e6:e2:53:6c:01:4c:5c:cf:2a:20:c3:
         77:02:d1:37:a8:9b:5f:21:a1:7f:82:36:eb:f0:c2:60:d0:4f:
         91:32:10:90:c8:53:e1:af:58:17:24:9b:97:c9:86:dc:5e:bc:
         c3:ab:72:dd:96:4d:63:13:64:e2:b5:89:f3:af:36:4c:2c:63:
         c0:fe:15:77:23:14:cc:59:fb:71:80:af:ef:4d:86:97:13:6c:
         21:8f:a0:7a:57:1a:ce:41:b9:4b:82:56:82:e9:ff:74:a8:7e:
         6a:2c:41:df:21:a6:64:14:72:87:6f:21:a9:15:7a:4e:fa:d8:
         9f:1f:7b:7a:18:4e:c2:b2:28:cd:6f:c1:fd:d6:b5:68:58:b9:
         91:a9:02:35:6d:b2:21:f3:63:c6:7c:88:28:3f:9c:4e:58:dc:
         91:3a:03:b7:4e:4c:45:05:5e:eb:39:33:8d:4b:69:4d:ab:d2:
         05:c7:1c:06:06:ae:7e:6f:8f:de:c8:68:28:50:80:db:73:b6:
         89:81:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:35:54 2026 by rpki-client