Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          SqzpQCZpb/+L9qVr7f85Ts5inoAftwDd77AygZegGh0=
Subject key identifier:   B4:CC:16:5C:7A:4E:5D:F4:77:83:00:EC:D4:51:D2:21:2A:62:6D:6E
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       0453
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          044B
Signing time:             Thu 24 Sep 2026 21:38:27 +0000
Manifest this update:     Thu 24 Sep 2026 21:38:26 +0000
Manifest next update:     Thu 01 Oct 2026 21:38:26 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: +N6g5N3+FMn60JbbXhWkmiwGfCvx+Lxdj3iEONao+Ek=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 21:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Sep 24 21:38:26 2026 GMT
            Not After : Oct  1 21:38:26 2026 GMT
        Subject: CN=6ab59853-9880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:dc:14:ec:8a:b6:8e:9e:50:fb:57:cc:40:
                    39:37:ed:41:67:90:db:03:ba:99:ef:1e:47:28:93:
                    41:e8:07:73:d4:3b:80:ad:29:dd:3a:c9:36:91:bb:
                    27:55:9f:8a:07:15:c8:94:0e:ed:bc:e5:31:b6:b5:
                    b1:65:6b:d3:b8:b4:d2:a7:0f:d3:4c:3a:a9:41:7d:
                    cc:59:82:a3:d4:6a:1a:43:b4:fd:ce:e0:08:dc:91:
                    52:00:bd:90:1c:7c:75:7e:c6:34:39:ed:5d:df:25:
                    bd:b9:1f:87:fc:c8:12:3a:f6:3a:93:9c:0c:57:ad:
                    14:0d:9b:64:ae:ba:e1:6c:68:dd:a9:cb:f3:98:d3:
                    a9:ac:6e:d2:d6:77:b9:f1:05:52:7b:29:2e:9e:ef:
                    c0:04:70:7b:bf:c5:ef:e0:50:c2:c6:c2:e4:88:f9:
                    4e:64:17:6f:d7:13:7a:f5:28:14:ee:50:9e:54:4a:
                    df:46:cf:76:a9:f8:3d:1c:93:08:5d:95:c9:2c:46:
                    44:83:07:7c:74:72:37:16:dd:78:4f:2d:48:29:09:
                    a5:63:ea:e4:bc:ad:2a:38:1f:75:96:64:92:9c:f6:
                    b8:7b:58:c0:68:36:71:bc:21:30:22:18:4b:99:eb:
                    c7:7e:bf:1b:8b:c4:9c:8a:20:46:c2:e3:66:0f:e2:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CC:16:5C:7A:4E:5D:F4:77:83:00:EC:D4:51:D2:21:2A:62:6D:6E
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:47:45:a6:48:9e:88:4c:ca:93:c9:2b:69:1c:58:94:6f:61:
         6c:0f:20:f0:bf:83:d7:a7:64:f5:bf:64:c5:23:59:de:58:c5:
         38:98:26:ac:db:5e:58:76:f1:87:1d:1b:86:e9:d4:c3:f7:98:
         7d:d3:75:7e:89:8b:47:9a:f8:1d:f5:70:41:fb:62:f1:6f:c1:
         9b:6b:ae:d5:b5:a7:64:a2:02:8f:df:72:de:d1:c3:70:4a:26:
         f0:87:53:d3:32:5a:2d:1a:bc:2f:36:6d:5c:e7:ed:76:fb:e4:
         c1:97:a2:fb:ae:9d:10:5a:9d:9f:9e:64:b1:2b:ed:ba:62:69:
         20:0b:a8:26:97:a7:0d:d5:24:ce:55:b0:c3:5d:45:29:a0:f9:
         86:b5:b5:74:42:c1:8c:a3:ab:41:43:0f:94:3e:4c:74:30:5b:
         91:0d:9d:33:e4:ed:ba:74:dd:2b:d9:dd:ed:3b:ed:7b:26:76:
         a0:70:e9:d7:11:b1:b5:66:01:e3:84:f5:55:b6:8e:a6:2d:b6:
         9e:1a:7f:4c:fa:69:b9:fe:10:07:f2:af:a6:69:96:73:dd:54:
         81:e6:34:df:bd:4c:e1:24:7c:6d:b5:66:8f:4a:c6:24:36:43:
         ab:c9:5d:b2:c5:bf:3e:13:1d:be:cc:16:34:1c:9f:5f:99:75:
         6a:a5:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:32:59 2026 by rpki-client