Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          A54wj4Jphk8bXFDLXcBT6CQTboBJRmrjg+IDrpZQ/o8=
Subject key identifier:   77:13:D8:61:9E:9E:95:E8:0B:2B:E8:A9:82:B6:1E:99:4C:AA:77:D7
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       08A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          089B
Signing time:             Mon 12 Oct 2026 20:50:27 +0000
Manifest this update:     Mon 12 Oct 2026 20:50:27 +0000
Manifest next update:     Mon 19 Oct 2026 20:50:27 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: ZUfusRXbRX19YW+m6HBiVZjWEqszqSn10FR+jpQmC8U=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
                          3: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 20:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Oct 12 20:50:27 2026 GMT
            Not After : Oct 19 20:50:27 2026 GMT
        Subject: CN=6acd4813-5a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:d8:72:7b:ca:12:b9:6e:60:ff:14:d7:06:
                    2e:fa:7a:b3:dd:70:9f:81:7f:c9:ea:f2:16:d9:d8:
                    4c:d7:da:11:61:d9:5c:3a:8f:13:de:b8:ab:3a:19:
                    95:15:36:e0:66:74:84:c9:72:13:a1:fc:e5:82:9f:
                    c1:a7:b7:92:9c:e0:a6:51:11:51:36:9e:c4:72:ff:
                    84:86:94:14:ad:bc:e1:14:3a:73:cb:ab:d9:c0:a2:
                    b4:3e:34:1e:d0:3f:7e:3c:a3:5e:e8:fd:78:c4:7f:
                    aa:a2:94:9c:fb:9a:ac:df:22:85:a0:e6:ae:cb:53:
                    f9:5f:4f:aa:9f:d5:2b:72:b4:55:ad:54:97:41:8b:
                    35:06:69:22:f8:46:b1:5e:c2:d6:d4:67:30:b9:cd:
                    e9:f4:31:89:2b:93:1c:8c:76:3d:6e:41:2a:44:11:
                    73:56:dc:bb:2e:a3:f5:65:2a:b3:ea:f5:1b:fa:03:
                    cc:13:d8:36:05:60:17:77:90:4a:27:bd:a7:b2:2f:
                    fe:3a:92:10:0f:e0:6f:35:9e:b6:75:00:05:0a:58:
                    78:b5:f6:db:14:1e:e7:25:29:b9:33:3e:ee:f0:3d:
                    a2:1d:ca:77:6e:bb:33:29:6d:9d:e3:0d:85:9d:06:
                    fd:55:70:38:cb:52:ea:63:6a:26:06:6a:25:61:5e:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:13:D8:61:9E:9E:95:E8:0B:2B:E8:A9:82:B6:1E:99:4C:AA:77:D7
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:68:5a:f5:bf:49:5e:8b:da:5d:90:dd:05:7c:41:f7:64:
         cd:6e:c7:ad:53:78:f5:13:57:62:7e:c2:0c:93:0e:52:3b:bb:
         2b:17:2b:d6:06:88:72:1e:7e:1c:2e:4a:28:e7:aa:f6:d4:de:
         eb:32:97:f6:5b:1f:dc:29:74:a5:f1:f0:1e:2a:cc:72:1f:71:
         6a:5e:c2:99:78:99:49:12:04:f9:f2:96:e1:56:e2:01:8a:0e:
         22:60:ad:eb:96:09:51:cb:d1:33:b4:9e:b7:ce:ee:da:d7:da:
         85:ef:0c:dc:c5:f8:a3:3e:ed:e5:b3:ba:62:f6:7a:40:a4:d8:
         90:70:ee:72:1d:e4:18:98:55:21:08:f7:ad:f3:dd:73:d9:bc:
         51:f8:40:66:dc:a7:9e:68:30:8c:34:86:4b:e5:1b:df:af:45:
         fb:65:ab:1a:32:3c:1d:34:ec:e6:84:ef:cb:c1:5e:05:9b:d2:
         91:e2:42:2f:ff:ca:c7:d9:c8:7c:67:00:45:3e:3b:11:51:eb:
         65:c3:41:94:b5:31:09:1e:d5:ed:50:e2:4a:2a:23:3c:d5:d7:
         d5:e6:85:79:76:e6:3e:27:13:fb:48:50:2e:c9:3b:0b:c8:04:
         70:37:ba:4f:a4:32:b1:3f:7a:9a:46:7c:08:cd:89:ae:dd:65:
         a1:14:cd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:54:27 2026 by rpki-client