Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
File:                     09PYYPhoyT7RDi7VqXqHlFTITBY.mft (raw, json)
Hash identifier:          Ive3LSgMc5JofzN5nPTQIpEYnit203MeOthuLg1/gmM=
Subject key identifier:   46:BF:CF:88:64:AA:D1:0D:AE:E8:2E:FF:4F:6D:AC:FC:E3:44:AF:74
Authority key identifier: D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16
Certificate issuer:       /CN=A912B017/serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
Certificate serial:       0277
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
Manifest number:          0261
Signing time:             Mon 21 Sep 2026 02:19:42 +0000
Manifest this update:     Mon 21 Sep 2026 02:19:42 +0000
Manifest next update:     Mon 28 Sep 2026 02:19:42 +0000
Files and hashes:         1: 09PYYPhoyT7RDi7VqXqHlFTITBY.crl (hash: wtvdafQ5UxQzUkf7z4kDrjJV5I7pqrfeXZFuZ+E22RQ=)
                          2: 1D11FFD4352D11EE9543B52FC4F9AE02.roa (hash: 5W92E32XU1AG2SE7ILAomrNCfIvth1YE0xyocchPZ5Y=)
                          3: 25342138B11C11F182DE95AD4511F970.roa (hash: JNorVh4J5hD1g3opD5QXvy6/Z2sqrAUvUx2i2WRBflw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl
                          rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B017, serialNumber=D3D3D860F868C93ED10E2ED5A97A879454C84C16
        Validity
            Not Before: Sep 21 02:19:42 2026 GMT
            Not After : Sep 28 02:19:42 2026 GMT
        Subject: CN=6ab0943e-614c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:0d:e9:c4:f4:5e:7f:8e:cb:fa:bd:19:a6:
                    ab:10:40:29:14:24:bf:b0:6b:20:c0:50:4f:21:66:
                    79:fd:c4:eb:21:8c:68:76:5d:46:3c:e9:b7:82:57:
                    2a:f2:1d:c0:f7:e0:a4:94:18:88:7e:3b:2c:21:ab:
                    e2:20:f9:d1:f5:cd:9c:b7:6b:94:4e:ff:11:a7:ee:
                    96:b7:e5:1e:06:33:dc:ff:90:c7:6d:54:fc:7e:a9:
                    25:ad:e1:ba:73:ee:25:57:f3:1e:5b:03:46:b4:76:
                    d5:37:67:a5:3d:6e:d2:8c:c4:4f:67:d6:c1:72:77:
                    0b:ab:d3:b3:b8:30:34:8f:13:92:38:c3:08:f2:28:
                    0c:2d:3e:ea:9a:4d:a7:d2:70:60:33:53:57:3a:db:
                    0e:da:e4:ed:9e:93:19:00:59:4c:bd:e1:ee:ec:f3:
                    f8:40:17:de:18:49:d9:bc:f6:d4:58:09:f8:90:a8:
                    73:4c:f4:69:06:76:20:37:a4:bf:5b:0a:96:a3:b4:
                    21:bf:10:f0:e4:1e:11:e8:20:34:fa:b7:0d:16:09:
                    20:cf:e6:25:79:89:99:69:fc:f0:27:df:fd:3d:47:
                    b9:f6:8a:89:8f:06:23:00:3a:94:aa:0c:c7:bc:29:
                    94:9d:52:86:9e:1b:59:e2:79:e1:de:d6:e2:32:7a:
                    cb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BF:CF:88:64:AA:D1:0D:AE:E8:2E:FF:4F:6D:AC:FC:E3:44:AF:74
            X509v3 Authority Key Identifier:
                keyid:D3:D3:D8:60:F8:68:C9:3E:D1:0E:2E:D5:A9:7A:87:94:54:C8:4C:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09PYYPhoyT7RDi7VqXqHlFTITBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B017/DE75F2222A1311EE95D58A66C4F9AE02/09PYYPhoyT7RDi7VqXqHlFTITBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:cf:cc:2d:24:d5:4b:16:76:09:df:e3:b7:26:38:09:5c:
         02:b8:5a:5e:48:28:32:c5:8d:a1:01:6a:ea:9f:05:c8:63:a9:
         3b:b5:d0:78:c1:78:b4:0f:71:e6:a3:fc:c1:d6:6a:5c:b0:d1:
         0c:e4:46:b1:dd:33:05:b7:42:57:62:b0:73:93:33:96:e3:ea:
         98:24:63:5e:7e:47:25:1d:4a:a9:3f:8c:a4:82:23:fc:a3:f0:
         a0:0e:1b:b0:51:72:f6:5d:43:0d:de:99:fa:b5:38:92:d4:44:
         38:6e:1b:3d:ba:ab:1b:e2:30:77:04:13:38:38:da:2a:14:cf:
         ba:76:00:ef:ea:39:7b:85:a3:e0:60:6e:1f:0b:92:f2:61:90:
         cd:c1:3a:d4:da:98:be:9c:a1:6b:86:f1:49:53:4f:ef:03:7a:
         19:12:33:a6:8b:73:aa:da:96:8e:f3:1d:91:05:fa:27:ca:0f:
         2f:77:18:c4:e4:cc:9a:34:28:39:45:26:2c:a9:cd:09:b1:3c:
         88:d0:62:ac:f2:5b:61:8b:6c:2f:64:bd:8a:33:95:8b:ab:98:
         cf:22:1b:07:98:b6:7c:92:5a:39:71:d7:2f:1f:b4:79:63:a0:
         6e:c5:47:3a:07:2c:d0:cf:bd:3f:74:dc:fe:74:a1:bd:0a:05:
         61:68:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:24 2026 by rpki-client