Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
File:                     YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json)
Hash identifier:          td2c77pSl4qdc4o/cEQKavXeFLUXUTusDGad1goHTZE=
Subject key identifier:   89:F1:80:D9:7F:74:91:AF:BE:78:D9:5C:87:CD:D9:88:02:79:0A:67
Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E
Certificate issuer:       /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
Manifest number:          01F9
Signing time:             Mon 21 Sep 2026 03:18:32 +0000
Manifest this update:     Mon 21 Sep 2026 03:18:31 +0000
Manifest next update:     Mon 28 Sep 2026 03:18:31 +0000
Files and hashes:         1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: 0WL6U035MCVF6NfTNkasWSZEXxk+BAjtW5ern/X9fk4=)
                          2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: ExYQsL4DX6Hi4BKxNjsrHvE6gNcBGNmimGeGw2+s/0Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl
                          rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E
        Validity
            Not Before: Sep 21 03:18:31 2026 GMT
            Not After : Sep 28 03:18:31 2026 GMT
        Subject: CN=6ab0a208-ee66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:10:e0:e4:53:9f:31:ae:d0:8d:46:65:ff:
                    4b:2e:20:b4:00:ee:fc:e6:42:9e:ca:e8:de:60:2b:
                    bb:e8:f6:4f:64:42:c7:94:69:51:4d:14:52:22:04:
                    c9:1c:b2:d5:0c:73:85:25:d5:93:dc:3b:d1:f6:a5:
                    c1:ad:0d:0d:53:dd:c5:98:48:7c:16:78:a8:50:da:
                    de:be:ec:94:ed:7a:98:48:a4:53:ec:2a:49:eb:13:
                    21:8a:1d:ef:fe:5b:7a:9d:3e:0a:08:6b:98:37:a5:
                    69:f1:e5:86:84:21:bb:f9:a1:86:15:b0:e2:54:0f:
                    ff:8c:6b:cb:61:e4:7c:c5:a9:d0:74:08:44:9b:3d:
                    bf:55:43:34:be:6f:13:d5:c8:5d:8a:1f:df:49:dc:
                    0b:b9:f1:9d:55:6c:54:da:ce:97:51:cf:cd:52:92:
                    79:50:e5:98:bf:09:69:f4:3f:66:b4:dd:bc:4d:db:
                    40:8b:42:3e:8a:14:56:f6:15:1c:07:fa:f4:6d:4d:
                    aa:b9:8b:6c:eb:6a:bc:a5:f8:d3:0a:25:4c:b0:8c:
                    e7:1f:a0:77:db:d1:3d:81:83:f9:8f:c3:e0:bb:ce:
                    6d:0e:37:1c:f5:93:37:94:00:30:57:2d:6a:96:e8:
                    a1:e3:50:9b:fe:89:c9:3f:e3:f9:9b:fc:f7:e2:89:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F1:80:D9:7F:74:91:AF:BE:78:D9:5C:87:CD:D9:88:02:79:0A:67
            X509v3 Authority Key Identifier:
                keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:36:5a:b4:69:b6:4b:d5:8a:bc:dd:a7:fe:ed:72:ac:2f:61:
         35:01:e7:f3:dd:30:a4:c4:83:13:4a:f8:86:8d:22:b9:db:68:
         f7:91:8f:62:9d:11:6a:b6:df:16:63:d5:05:f7:aa:82:73:70:
         21:56:18:99:0c:70:e2:85:81:4a:7f:b6:7d:4f:a1:11:f7:b0:
         e0:c2:1f:41:68:a5:3f:33:db:fd:1e:b3:5d:e7:81:ea:e5:c9:
         8e:31:1a:74:f4:d1:db:0d:08:fb:c4:77:43:a9:29:c5:e3:1a:
         2d:7f:69:40:bc:1e:73:39:8d:fb:89:32:2e:5e:39:82:11:0a:
         94:3f:57:89:d5:15:ed:3a:04:eb:28:9a:e3:09:81:66:70:66:
         9d:cb:e5:48:c7:48:90:c2:c9:19:4f:f7:f2:ac:95:1a:48:a6:
         a6:15:d6:21:bf:b8:05:2e:ae:81:72:e9:75:49:09:ec:41:84:
         54:ca:13:9d:8d:ba:54:99:09:d0:35:e3:8f:08:29:d6:ef:99:
         0b:0e:83:7e:f9:06:06:dc:b9:70:f1:f9:a5:45:44:82:5d:a5:
         4b:8c:d5:03:84:36:1f:a6:08:44:94:21:30:6a:3a:af:27:31:
         d6:5d:70:f9:a3:58:58:aa:29:71:07:aa:10:35:2e:33:ca:d5:
         63:41:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:50:20 2026 by rpki-client