Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
File:                     Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft (raw, json)
Hash identifier:          5zzgwDX1Nc0Dksaj8HBqoMbdxG84wXEnuay/0BHSlZ0=
Subject key identifier:   D3:23:43:D4:EC:E1:50:A8:0E:5C:94:08:63:6E:8A:11:73:6D:A4:43
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Certificate issuer:       /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
Manifest number:          0365
Signing time:             Sun 27 Sep 2026 00:55:49 +0000
Manifest this update:     Sun 27 Sep 2026 00:55:48 +0000
Manifest next update:     Sun 04 Oct 2026 00:55:48 +0000
Files and hashes:         1: Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl (hash: 3Pu7nD+zt67GP8LRsG9tFqWs2Kf5jsfv7nMM2S1O8QQ=)
                          2: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (hash: GmoVWMVaQCe3fAG+ffrSeaTBcuJkexIzDglD0FGJBNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
                          rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
        Validity
            Not Before: Sep 27 00:55:48 2026 GMT
            Not After : Oct  4 00:55:48 2026 GMT
        Subject: CN=6ab86995-51e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:3a:65:28:b6:17:0e:8e:1b:f4:f8:d1:66:
                    51:93:00:e1:b2:e6:5a:31:f7:7b:90:0f:ff:09:7e:
                    d0:77:a9:8e:b9:85:d7:62:95:ad:c6:7d:0d:7f:bf:
                    47:9c:11:c2:cd:bb:9b:56:2c:38:3e:a4:c1:77:9d:
                    40:e7:19:87:75:70:ff:80:4c:b0:0b:70:8a:41:67:
                    5d:7d:ed:aa:6a:de:b9:49:af:00:3e:6c:83:3c:49:
                    e8:b5:82:ca:81:6d:c3:13:0c:1e:a3:b1:db:78:fc:
                    5f:f4:89:67:a7:7f:73:06:2c:5b:2f:1c:72:ed:6b:
                    3d:c0:2a:30:89:08:02:15:70:ee:dc:1d:14:95:ce:
                    f9:42:38:c9:b1:96:94:27:4a:fb:75:c2:21:01:a8:
                    ab:6a:82:61:7d:09:f2:9d:4b:f3:c4:d0:23:07:d6:
                    80:48:55:95:35:9f:e0:8b:8a:5a:50:74:19:bf:71:
                    a0:9c:fb:28:f1:e8:f9:a2:0f:d1:e2:5e:e4:67:4f:
                    6b:70:ca:8b:c9:dc:64:b5:61:ef:5e:d5:e9:2b:ea:
                    b0:9b:93:eb:19:12:0e:5b:7f:73:7d:a2:95:04:0d:
                    70:7b:58:80:0b:19:0d:ba:92:48:50:fe:35:c3:c6:
                    7d:2b:98:c7:00:3a:b9:08:f3:c5:73:f2:0c:19:34:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:43:D4:EC:E1:50:A8:0E:5C:94:08:63:6E:8A:11:73:6D:A4:43
            X509v3 Authority Key Identifier:
                keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:e1:4a:40:7a:95:db:5c:33:50:bb:10:50:34:70:f0:7c:
         5b:39:4a:72:44:33:74:74:ac:04:33:ae:25:e8:e6:31:ad:37:
         e6:1f:65:e3:c2:91:87:08:cc:d6:03:3d:65:cf:07:d0:e4:7f:
         6e:7b:5b:91:c4:06:7e:25:4d:01:a3:85:8a:cd:30:e9:1a:0f:
         ce:d6:17:af:e4:c7:42:f7:ef:a9:44:75:8c:88:ba:32:c3:c5:
         ea:f6:b5:b6:30:e1:ea:55:2c:36:ea:9e:e8:ad:91:1a:c4:30:
         9f:91:34:d9:2c:86:c3:7e:92:47:a7:fd:fd:24:02:59:23:42:
         04:17:6d:b2:58:18:cd:42:f1:54:59:0d:56:40:08:6f:64:ce:
         b3:2c:27:53:85:21:f4:2f:6f:9f:0d:88:74:5d:29:6d:35:b1:
         b9:c7:f0:2c:ac:86:3b:00:4f:77:d5:16:80:71:ab:59:55:f0:
         a3:9a:92:c4:f6:90:a3:e5:27:7f:68:82:07:c8:74:df:6a:f8:
         b7:b2:39:61:dd:7f:0a:b9:4e:c2:10:c4:dd:f3:3c:0d:7c:0f:
         12:c4:82:28:ae:7e:28:5e:ee:17:65:84:74:70:1f:86:ae:b8:
         0b:ae:fc:4d:88:ca:51:fd:78:73:03:b4:fb:ef:eb:74:a2:d6:
         d7:75:e2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:04:36 2026 by rpki-client