Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
File:                     Y8QELC5YMug5UaBUZeiB1qfd0CI.mft (raw, json)
Hash identifier:          anQrZTBtru4SfnOjMKXDblF6uFhulMK/5j906PJX+fE=
Subject key identifier:   74:F2:36:EB:A0:39:69:20:04:51:3B:A1:EA:16:EC:F6:22:06:51:7D
Authority key identifier: 63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22
Certificate issuer:       /CN=A9146039/serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
Manifest number:          64
Signing time:             Mon 21 Sep 2026 08:03:03 +0000
Manifest this update:     Mon 21 Sep 2026 08:03:03 +0000
Manifest next update:     Mon 28 Sep 2026 08:03:03 +0000
Files and hashes:         1: Y8QELC5YMug5UaBUZeiB1qfd0CI.crl (hash: 2WYekzz/gc8S3mTlR8yrUOZa9W96sVFLvNcHbdHL+lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=63C4042C2E5832E83951A05465E881D6A7DDD022
        Validity
            Not Before: Sep 21 08:03:03 2026 GMT
            Not After : Sep 28 08:03:03 2026 GMT
        Subject: CN=6ab0e4b7-176a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:99:a4:78:ee:c1:1e:2d:b7:44:11:f7:b3:
                    97:4c:df:b2:e6:cb:34:8e:95:dd:e7:30:03:11:f1:
                    2a:97:51:59:eb:ff:29:f5:a6:64:15:9e:2f:80:4c:
                    1d:dd:26:9f:aa:1a:f9:65:fc:b9:88:dc:96:b2:ac:
                    24:f5:ee:ff:93:c2:f9:00:2f:ac:68:cd:84:c9:76:
                    67:fa:0c:ff:5d:a0:00:ea:6f:21:0e:3f:75:55:99:
                    a8:a9:59:91:c5:ae:68:c6:d9:c4:32:ac:39:75:40:
                    23:d0:83:c3:5a:a2:dc:4d:ac:84:25:b0:5d:45:bd:
                    5a:ea:e5:15:04:03:dc:f0:59:ac:58:06:05:68:9f:
                    8b:ce:46:d1:d6:62:40:32:3c:df:4f:44:c4:e4:6e:
                    ad:c5:4e:af:58:1d:38:09:c0:bd:22:d3:fc:84:45:
                    74:7b:62:57:51:00:05:6c:f3:59:a7:8b:9f:11:83:
                    58:3a:4d:a3:af:6d:3c:3f:e5:cf:27:4b:08:d8:b2:
                    9d:07:f2:83:81:85:7f:f8:88:c6:2b:07:0a:1c:13:
                    38:53:fd:a3:91:2f:e1:59:5b:e9:a0:b1:33:6a:d9:
                    63:8c:a0:f4:9d:2d:bd:43:2e:37:fe:bb:a1:ff:11:
                    51:af:29:40:97:d5:ca:cb:80:41:15:dd:0e:44:90:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F2:36:EB:A0:39:69:20:04:51:3B:A1:EA:16:EC:F6:22:06:51:7D
            X509v3 Authority Key Identifier:
                keyid:63:C4:04:2C:2E:58:32:E8:39:51:A0:54:65:E8:81:D6:A7:DD:D0:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y8QELC5YMug5UaBUZeiB1qfd0CI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/840752F21D5611F19653F658233D8C67/Y8QELC5YMug5UaBUZeiB1qfd0CI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:06:32:03:83:8c:95:40:9d:6e:03:a7:4c:65:b1:8d:36:
         6c:d5:d8:13:08:99:9f:f3:78:2b:72:f0:cd:55:43:d6:cc:25:
         8e:0b:04:15:b0:7e:ee:bc:cc:ef:3e:b0:db:ad:b6:bd:88:ed:
         8e:10:bf:22:0d:d3:46:86:58:3c:7c:63:a8:5a:5e:bf:9b:68:
         e7:82:d2:6d:82:6c:83:d6:f7:ca:54:5f:68:bb:12:f1:ae:f3:
         e6:61:d9:41:dd:a7:a6:ef:6d:92:8b:27:d6:ae:0b:11:7b:7d:
         1d:b6:81:c1:b7:fa:6b:27:8d:aa:83:99:81:88:7c:6f:3f:20:
         28:77:e0:36:1d:56:b1:40:d3:21:1e:ed:04:a7:ce:86:a0:a9:
         95:f0:c9:15:42:71:86:8e:8a:f9:05:5e:58:3f:a0:c3:ef:ff:
         6d:55:eb:2b:d1:87:9d:67:f4:3d:84:b2:78:58:9f:fb:d8:3f:
         25:51:06:59:5f:36:9f:c2:1f:f8:80:c3:93:a1:4d:d5:22:cf:
         76:d1:57:52:bc:22:4a:ca:1d:c7:a8:c1:f1:b1:f1:a4:9d:c4:
         d9:48:0b:4d:2a:7b:7e:16:3a:b0:ff:45:18:23:23:1d:5a:c8:
         82:2a:a7:98:f9:d4:40:b2:74:78:e4:c6:ff:a9:91:a3:da:bf:
         53:85:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:11:56 2026 by rpki-client