Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File:                     YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier:          N1JwYI1rG44HrjDpJ4Yys7Bt3HGBt/snPBqkirCSaic=
Subject key identifier:   B6:C1:8F:5A:0F:46:9F:6D:A5:DD:BB:6E:E2:FE:56:99:AF:F0:1F:4C
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer:       /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial:       01E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number:          01D1
Signing time:             Mon 21 Sep 2026 03:46:58 +0000
Manifest this update:     Mon 21 Sep 2026 03:46:58 +0000
Manifest next update:     Mon 28 Sep 2026 03:46:58 +0000
Files and hashes:         1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: FQVBqr8iG1xxTj4m1ImMd//l3BzphoHkVhrgtpaTlTg=)
                          2: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: IRQ5tUvjSdYBMHXJtMeaFpdBVsbhUU9VeI4w+7YPShY=)
                          3: C43ADC9898A011F197259AE96111F970.roa (hash: qUX0d4svcA2ISwsDOMGvmImpbdf1PX0kSQo3+dTZN0E=)
                          4: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: EXf60aPYaF6V19CZAmIAiXajARXVjVYLev6p/NnSpqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
                          rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
        Validity
            Not Before: Sep 21 03:46:58 2026 GMT
            Not After : Sep 28 03:46:58 2026 GMT
        Subject: CN=6ab0a8b2-0933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:d7:d6:33:b7:33:9c:cf:f7:1a:b1:b7:81:
                    79:c4:dc:f8:d2:0b:3c:6a:5b:7d:be:89:15:4f:a8:
                    bb:d3:ee:ea:b4:93:e4:c7:50:43:84:e5:7c:0e:0e:
                    73:a1:be:45:1a:82:b7:79:33:20:3b:c9:f1:7e:99:
                    30:be:1a:59:b6:ce:af:8f:c6:ad:04:5b:b9:9e:38:
                    50:60:59:8f:e6:b9:0d:42:c3:06:42:1b:2b:11:b5:
                    85:ee:53:2a:38:98:cb:4a:a3:74:63:cc:4b:94:6f:
                    d8:59:46:c1:a4:64:60:cb:37:d0:f9:4e:8d:44:01:
                    2f:2b:24:c9:a0:70:19:2f:df:4d:7e:2c:7f:22:79:
                    b0:f7:9a:3d:38:e9:9d:5f:30:6e:86:5a:c9:04:7b:
                    d3:6a:7f:db:8e:82:d0:5e:17:22:1e:52:12:f3:20:
                    a8:08:48:9a:19:fb:4d:52:03:cb:a0:b2:15:4c:d7:
                    9b:d1:23:43:de:13:a1:4c:4c:36:82:2c:5a:5a:19:
                    70:f1:c2:89:19:57:34:91:37:56:ed:cf:8c:d6:3e:
                    9a:89:8a:b4:0b:7d:53:d9:a4:16:71:6f:97:f2:b4:
                    cb:8d:9f:50:e9:b2:49:73:f9:d0:c4:74:34:c1:f3:
                    a5:e4:e2:30:54:ce:cc:20:79:4c:68:b2:9f:01:ef:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:8F:5A:0F:46:9F:6D:A5:DD:BB:6E:E2:FE:56:99:AF:F0:1F:4C
            X509v3 Authority Key Identifier:
                keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f5:c8:7c:0b:f7:eb:39:50:a8:69:90:a8:28:78:5c:8b:52:
         65:aa:70:42:2f:ce:54:3d:b2:4d:5e:e7:9a:50:03:53:33:d9:
         5e:79:25:fc:44:93:66:ff:e0:e6:54:fa:28:2b:70:7b:97:7a:
         6b:d4:47:1b:ab:51:19:c8:97:0b:84:43:f4:82:25:0e:62:f5:
         7f:f5:65:93:01:0f:a5:d3:7d:78:25:85:03:59:3f:11:6f:d5:
         fc:c2:a0:7a:29:b2:9c:73:18:11:8b:ad:49:45:d9:1c:d3:62:
         7a:56:54:0d:8a:8c:dc:da:ca:01:6a:6f:d1:58:d8:c7:02:14:
         47:ee:8d:fd:08:44:5e:28:72:6b:5c:b9:96:22:18:7e:1f:8e:
         3e:22:8c:8f:ab:01:39:4a:d9:82:9f:54:09:92:92:11:17:7e:
         49:36:d4:a9:65:36:a6:84:6f:db:66:c0:53:72:7e:d1:db:86:
         f1:c6:71:a9:b2:70:19:f2:83:0b:08:e0:66:68:fa:60:a3:02:
         7d:41:e0:6d:4b:23:ef:f7:cc:d1:98:52:72:73:5f:c4:42:ad:
         3b:ed:8c:9e:32:4e:ed:bd:2c:78:1a:fb:e2:df:7d:15:40:8c:
         95:f4:06:29:8c:ab:8d:5a:98:62:e9:b0:e7:16:03:58:b3:7b:
         78:7f:12:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:23 2026 by rpki-client