Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          I05lScDVzlCRKhIkZjrVOKvzU6UaZEQ85CT206X3s68=
Subject key identifier:   7F:D4:A5:8B:26:F1:D1:60:33:5D:5F:07:05:25:3D:DB:55:51:24:8F
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       04F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          04E7
Signing time:             Sun 20 Sep 2026 23:32:06 +0000
Manifest this update:     Sun 20 Sep 2026 23:32:05 +0000
Manifest next update:     Sun 27 Sep 2026 23:32:05 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: DYB7HD1Mfq1bJS0yK16kRGnX4P8adkmX8FGVlpq6iIc=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: m8HrRpjyvQWeBhp94E8HFgt5mQuokJM0t43Pm2rxy7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Sep 20 23:32:05 2026 GMT
            Not After : Sep 27 23:32:05 2026 GMT
        Subject: CN=6ab06cf5-187a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:46:b3:bd:0b:e6:a3:1b:5d:ac:83:ab:b0:
                    aa:42:77:4b:80:14:72:b5:93:37:a9:cc:8f:f4:eb:
                    a7:77:87:cd:ee:a1:7f:78:84:b3:7f:c7:b4:3d:7a:
                    bb:5f:59:23:03:9e:31:fa:8d:eb:a0:5f:0f:51:1f:
                    0e:33:4f:ec:5a:62:99:b6:12:7b:1d:29:c9:f6:a9:
                    e2:48:cb:39:c8:63:ad:ae:d5:74:ba:34:91:e3:2c:
                    69:9f:91:46:94:01:2d:bf:98:8b:e1:95:a5:f2:71:
                    c9:86:e0:c3:b6:39:42:e2:22:26:e0:d8:df:8b:27:
                    37:dc:63:51:dd:3b:49:52:17:73:6b:cb:3f:43:73:
                    19:91:73:11:95:03:a1:d0:4d:85:4c:c7:3c:bd:c4:
                    47:0c:37:c8:78:a1:e3:a7:a9:0e:e7:bd:f4:de:ee:
                    21:12:5e:b5:9c:e4:11:2d:ae:4f:14:fa:58:cb:1f:
                    bb:9e:6a:c4:38:01:35:57:af:28:9a:b7:b1:48:f7:
                    44:94:0c:4a:16:b6:2a:ef:af:24:a4:1d:58:24:04:
                    cf:ec:1d:77:bf:55:a7:a7:61:b6:fe:80:a2:d0:34:
                    a2:e6:73:e9:22:37:39:e4:7e:d4:07:b4:2c:65:2f:
                    5a:a8:83:9d:bd:1e:5f:cf:37:3d:19:92:bc:1a:bd:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:A5:8B:26:F1:D1:60:33:5D:5F:07:05:25:3D:DB:55:51:24:8F
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:7b:28:d5:96:a5:61:31:dc:32:33:93:9e:9d:aa:96:8b:
         11:6c:44:82:de:a4:d3:09:52:14:03:b6:01:f4:84:b2:25:41:
         3f:df:06:73:b2:0e:07:83:cd:21:6f:aa:c2:e3:c2:fc:da:a5:
         5c:15:50:cb:dd:0c:74:fb:6b:8d:13:38:32:66:da:87:13:3a:
         5e:75:b5:69:04:62:f7:e7:cc:a5:a4:a5:bc:c7:e8:33:09:c9:
         91:a6:e7:66:a4:2b:4b:c2:ab:f5:ab:d0:db:9b:ea:7a:99:9b:
         cf:99:ff:af:35:8c:ba:dc:a9:0f:22:92:8e:72:7e:5a:91:59:
         5f:32:0e:33:5a:e1:5e:58:84:0c:8c:96:9f:db:d3:f2:ea:03:
         cb:e5:3e:df:15:02:2f:b6:08:a6:b4:d3:35:ad:58:5a:82:ec:
         6d:2d:17:13:cf:af:27:f7:a3:08:2c:76:dd:6b:02:e9:0d:95:
         0c:78:f9:34:7f:25:fc:c6:3d:09:09:a7:ce:fc:dc:b8:4c:ff:
         b9:07:b7:96:a7:18:cf:ea:55:4e:87:d4:6f:44:11:b1:1c:2b:
         d8:f3:2f:45:78:3f:a3:7f:c0:05:0a:a7:4a:56:df:88:c2:6a:
         58:2b:ed:8c:f7:a1:34:41:c1:37:50:dd:0a:38:f1:3d:5c:a5:
         e4:ae:8d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:29 2026 by rpki-client