Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File:                     YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier:          Z2tsX3oL4QA88+6Nz0KO1Uq8mL8cVmvdyy9vtIWOsBY=
Subject key identifier:   DA:3C:A3:C7:6C:8F:7E:5D:B8:FC:67:CB:C7:62:19:A8:16:22:F0:26
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer:       /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number:          41
Signing time:             Mon 21 Sep 2026 08:28:01 +0000
Manifest this update:     Mon 21 Sep 2026 08:28:01 +0000
Manifest next update:     Mon 28 Sep 2026 08:28:01 +0000
Files and hashes:         1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: MgxXv9cxPXkh/DN8hXfSnEZm5RoHM8ze5z42++4MrG8=)
                          2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
                          rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
        Validity
            Not Before: Sep 21 08:28:01 2026 GMT
            Not After : Sep 28 08:28:01 2026 GMT
        Subject: CN=6ab0ea91-d8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:83:e0:4c:cc:cd:17:75:25:03:e2:52:0c:
                    50:78:8d:09:20:1d:02:61:0a:3c:3a:ac:3f:91:58:
                    9f:58:ed:a2:0d:d6:a9:db:e3:fe:8a:c5:c2:ad:66:
                    f2:c6:d5:e7:c7:4b:9e:cb:24:0f:34:c6:ea:15:5b:
                    64:78:c5:51:d1:17:0b:ef:6d:73:03:7c:db:fb:31:
                    9a:3d:21:79:a4:d5:5d:0b:aa:ab:35:83:08:f5:6a:
                    6c:49:44:26:e7:e8:a7:5c:f8:b2:47:b2:83:f1:ef:
                    a1:41:11:b8:9f:eb:1b:f2:bd:bb:ef:44:e6:ea:88:
                    fe:d5:42:ff:9c:16:31:0b:c5:ce:ac:50:a6:26:e3:
                    64:20:07:f8:e6:bb:08:00:89:2f:5e:81:ba:d2:55:
                    d4:00:53:05:13:a4:22:31:6b:3e:e4:81:92:3b:29:
                    25:05:c6:4e:7a:e2:16:fe:3d:5c:41:85:44:37:2b:
                    b1:37:03:65:3b:68:d4:33:3d:e8:42:30:2c:b6:b5:
                    ca:0e:d5:0d:f9:61:b2:b4:5b:fd:9d:b9:ac:ea:51:
                    4d:9a:dc:df:93:d5:f9:6a:d4:d7:0c:97:6c:d2:07:
                    1e:29:99:e5:d9:4f:ec:39:bf:3d:ce:df:e2:08:e4:
                    e9:97:17:51:d9:6c:ae:9e:6a:1f:bc:6b:30:0b:c2:
                    79:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3C:A3:C7:6C:8F:7E:5D:B8:FC:67:CB:C7:62:19:A8:16:22:F0:26
            X509v3 Authority Key Identifier:
                keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:25:81:ff:c4:a4:c1:ff:ba:46:e7:6d:ee:5f:3e:00:ef:
         d5:9c:f9:1c:87:5c:1a:68:5f:c7:62:1d:ba:89:ea:f2:ad:01:
         e2:10:cd:e9:f5:26:8e:5f:45:0f:63:7a:6b:33:b4:4c:25:2a:
         b2:f1:35:ce:48:51:14:b8:3d:98:ba:71:ac:2d:48:7b:67:68:
         b7:84:cf:49:64:26:0b:57:75:e1:db:45:2e:f6:82:c6:f8:0b:
         ab:3f:69:57:5a:8f:e5:fc:3f:b8:59:8a:52:5e:6a:30:b9:0c:
         d3:67:2f:b4:b6:34:5d:ec:3d:1c:ad:c8:b2:66:59:4d:32:38:
         80:27:2e:91:b4:25:c4:54:b4:19:45:5e:63:b7:7a:d4:e1:1f:
         35:68:65:f2:cb:a5:61:c1:72:05:ff:f4:c8:3f:33:08:b2:ef:
         3b:c0:9b:5d:6f:b2:d5:d5:23:00:a0:5d:ac:a7:31:2c:6b:76:
         af:5d:a8:39:e5:90:cc:28:0d:45:eb:bf:17:75:2d:fe:c5:72:
         87:6d:18:c6:57:7c:e5:64:61:02:e5:d8:a7:8e:57:3c:27:7f:
         7d:f1:46:cf:e7:08:00:96:7c:50:e2:1e:85:d7:31:e4:c4:7d:
         6f:31:59:96:96:56:a2:80:28:d4:5c:47:9f:e8:bc:72:f2:6f:
         cb:e0:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:38:05 2026 by rpki-client