Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
File:                     ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft (raw, json)
Hash identifier:          U55JDTs5KVpFHJVHtAwXlsIu+ysC1CdyLJU+Jt3XPOo=
Subject key identifier:   26:00:58:CB:F4:D9:F7:01:E8:E7:91:D8:0F:80:4D:21:0A:0B:53:1B
Authority key identifier: CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8
Certificate issuer:       /CN=A912BD8E/serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
Manifest number:          0143
Signing time:             Fri 25 Sep 2026 05:28:26 +0000
Manifest this update:     Fri 25 Sep 2026 05:28:25 +0000
Manifest next update:     Fri 02 Oct 2026 05:28:25 +0000
Files and hashes:         1: ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl (hash: kY3omSB1CE5uO/ALWw/FoWB4/zeIHno71kON6TYZ0G4=)
                          2: 095AF45ECE8911EFBEC5D618C4F9AE02.roa (hash: D7h1gktg5+5yyaBrNhzNSFMs7boyS9O5+bm+qSSzUdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl
                          rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BD8E, serialNumber=CA573F0900BF642CB1E03A3B6C45C6969E7723D8
        Validity
            Not Before: Sep 25 05:28:25 2026 GMT
            Not After : Oct  2 05:28:25 2026 GMT
        Subject: CN=6ab60679-5f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:ec:c5:a3:d4:3f:a4:ab:49:6d:fe:21:c5:
                    3d:d5:69:38:99:a0:06:ac:f4:f1:32:71:18:b2:3f:
                    0e:ef:52:24:06:36:f6:63:de:78:fb:68:2c:f7:16:
                    f8:17:3a:b1:db:29:21:45:8c:56:fc:01:35:dc:db:
                    79:58:3e:7f:94:fa:4b:56:69:b5:be:f9:3d:ef:01:
                    9a:b3:98:ca:20:65:ce:5f:a2:00:74:23:39:88:0b:
                    d6:bd:43:f8:1d:59:f7:0e:80:8d:d9:22:f2:95:a4:
                    2e:20:48:b8:b5:36:35:8e:d9:65:6a:21:a0:07:3e:
                    b3:e1:0b:17:d4:85:46:c5:df:e1:c8:8a:7c:16:8d:
                    63:2f:2f:28:7f:99:22:57:ba:5a:a1:c7:32:c3:9e:
                    56:e2:50:66:99:f5:fa:eb:2a:5e:b7:d6:a2:e7:29:
                    a8:88:4f:47:99:84:c5:5f:35:e5:b2:61:e4:2b:9b:
                    f5:5a:1c:e9:a7:6d:2a:81:bf:f0:ef:fc:ec:02:4b:
                    29:89:43:87:8d:ea:29:4b:0f:65:60:e4:25:6b:07:
                    c4:26:34:61:44:9b:8f:fe:97:7b:59:7a:e7:a2:0e:
                    20:3d:e2:ae:b4:c7:b1:4b:46:d0:b9:46:7b:00:4c:
                    1c:a7:01:f1:57:af:10:db:d9:02:3b:9b:be:8e:ec:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:58:CB:F4:D9:F7:01:E8:E7:91:D8:0F:80:4D:21:0A:0B:53:1B
            X509v3 Authority Key Identifier:
                keyid:CA:57:3F:09:00:BF:64:2C:B1:E0:3A:3B:6C:45:C6:96:9E:77:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ylc_CQC_ZCyx4Do7bEXGlp53I9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD8E/43D9197CCE8811EF87C07117C4F9AE02/ylc_CQC_ZCyx4Do7bEXGlp53I9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:3b:6f:2b:2d:2e:f6:41:cb:67:ec:22:1a:22:c2:93:2a:
         5f:98:25:24:02:4c:88:49:14:d4:6c:6c:a8:33:aa:eb:b8:7f:
         e7:33:c4:53:f7:ea:a7:04:ef:8c:9a:62:c3:ae:bc:21:1e:c0:
         bc:b8:1b:0c:98:73:a1:aa:c1:04:9a:48:f7:e9:d3:11:7b:0e:
         1a:27:12:06:c6:14:9a:7a:ec:55:ce:bb:99:c4:16:1b:f2:f4:
         0b:bc:11:29:19:88:7b:c3:ab:3d:f7:44:32:ce:f3:af:97:b4:
         99:ac:aa:a4:58:6a:c5:11:3d:3c:52:6c:ab:4c:f5:a6:6c:e3:
         02:b6:ef:03:70:3e:2b:be:1f:f5:f2:19:16:f1:c7:df:b4:37:
         e0:ca:4b:b5:b4:14:6a:ed:22:40:9c:6c:69:9b:44:97:1f:85:
         fd:83:14:18:4c:46:e3:53:af:1f:db:58:2b:53:d5:97:0e:78:
         38:d9:61:e3:9f:e6:e6:96:6b:b6:32:7b:c3:e9:c9:82:5d:1f:
         db:06:28:38:b4:be:e4:44:e3:62:f5:da:c6:b6:f1:ee:ac:fd:
         fe:11:d0:66:53:7d:6f:51:ad:6a:81:9e:24:fd:27:00:1a:79:
         72:0b:75:a8:54:e2:91:23:e8:a2:4a:4a:b0:e3:dc:87:0f:95:
         68:96:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:29:21 2026 by rpki-client