Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
File:                     Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft (raw, json)
Hash identifier:          QRE/C6RqfCQP3fiUPm+WCJhiDeMOCWQ9B6BQep9dW7k=
Subject key identifier:   0D:EF:17:3B:47:3F:11:92:B2:57:D5:F4:DD:26:B6:54:AD:E5:42:4C
Authority key identifier: 62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E
Certificate issuer:       /CN=A912D4AE/serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E
Certificate serial:       26A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
Manifest number:          2687
Signing time:             Sun 20 Sep 2026 15:39:58 +0000
Manifest this update:     Sun 20 Sep 2026 15:39:58 +0000
Manifest next update:     Sun 27 Sep 2026 15:39:58 +0000
Files and hashes:         1: Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl (hash: sGMvoO1NjW9fX1Ah5I2DOUWXQNSkO5pTWs5DAgiF2PA=)
                          2: C9996B26D40D11F09F81D24AC4F9AE02.roa (hash: mG6TKyu7p2WgX58jr4isRmpWhz+S04wbdcqTHFUxivA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl
                          rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9893 (0x26a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D4AE, serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E
        Validity
            Not Before: Sep 20 15:39:58 2026 GMT
            Not After : Sep 27 15:39:58 2026 GMT
        Subject: CN=6aaffe4e-17e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:f9:52:b0:92:40:f4:e5:7d:ba:a3:4a:86:
                    c5:22:83:fe:3c:7e:cd:bb:0a:bb:45:0e:65:ff:a7:
                    eb:61:46:6a:0f:f3:a5:a8:7e:f2:09:8a:04:8b:b2:
                    4e:0f:10:65:c2:30:75:d8:1b:ba:37:ca:78:93:01:
                    99:ca:dd:68:76:07:f9:a7:0a:73:21:06:43:99:a6:
                    2f:cf:c2:a7:7f:c9:d2:82:0b:25:2a:bc:79:33:3e:
                    95:a9:a4:8f:dc:9b:1d:3a:77:f5:17:82:de:fb:5f:
                    7c:37:73:bb:85:7d:3e:6d:31:67:ba:59:f2:a8:d4:
                    19:1d:de:03:3d:0a:ce:ce:ed:91:e2:09:21:9e:32:
                    dd:03:e2:3b:3c:5a:7a:70:68:77:0c:e5:19:4a:58:
                    4e:d4:c3:4d:c4:89:7c:6c:93:a2:b7:4e:ad:39:23:
                    46:b4:f7:ff:0b:48:2a:e0:45:01:36:40:aa:e2:df:
                    85:e3:33:b6:66:74:b7:58:6b:38:ce:73:4f:0f:0d:
                    fb:8e:68:4e:12:fb:0a:c9:08:19:05:7f:46:e6:67:
                    30:0a:dd:dd:f9:19:14:39:8c:a7:a2:d0:9d:ef:64:
                    3e:d0:6f:fb:82:90:9b:e5:fb:fc:fd:51:92:8c:5d:
                    3e:20:85:92:c6:d3:5d:bc:7b:4b:6f:1c:2e:a8:1b:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EF:17:3B:47:3F:11:92:B2:57:D5:F4:DD:26:B6:54:AD:E5:42:4C
            X509v3 Authority Key Identifier:
                keyid:62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:b3:bc:c9:7e:71:df:5f:96:ce:e2:d0:59:cd:16:df:5b:
         6f:a5:ae:4e:29:45:42:cc:f2:c3:11:73:8c:7c:1b:c2:cc:62:
         aa:09:c0:34:99:b4:6b:56:32:e5:35:41:f4:2f:44:b0:5e:75:
         47:dc:56:98:6a:76:3d:01:bd:14:1f:c8:26:24:de:57:c5:0a:
         c0:66:03:88:ed:57:9e:65:c0:96:38:2d:76:6a:0b:4c:34:4c:
         4c:79:bd:50:74:74:a8:96:95:87:3e:7b:32:7c:2c:1e:cc:c7:
         bf:e7:9d:dc:3f:03:e1:cc:0e:87:7b:31:7d:f6:9e:75:bc:4d:
         dd:88:b2:77:95:d0:8a:3c:1e:f4:d1:cd:9c:93:f4:a6:ea:c6:
         a9:d1:cb:7f:04:49:32:0f:49:df:5d:63:d9:5a:74:a7:0b:28:
         8d:36:82:4d:1d:04:25:4e:00:57:f9:f0:96:9a:80:35:4a:64:
         74:36:86:7f:82:94:d5:34:a4:6f:bc:27:76:a3:d2:de:8d:f7:
         fd:08:02:6f:18:7a:71:a1:22:3f:37:b1:73:87:1e:77:e0:1d:
         4a:07:8c:68:57:d4:28:4c:e0:64:4c:dd:f7:72:05:ea:fc:1e:
         2f:ab:c4:19:23:a6:bd:44:b1:96:8b:19:e9:e2:6c:06:1b:db:
         f3:21:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:37:18 2026 by rpki-client