Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
File:                     YJezTWdAEygGKfiFypA_1pq5W-M.mft (raw, json)
Hash identifier:          KrD1VrAfYtng8X8vqyPA1U5gdWdPcjLLXnhKGyJFjLg=
Subject key identifier:   25:F1:C0:67:5A:97:8D:E6:EF:7E:CF:98:D3:7F:11:C7:7B:B1:D8:C8
Authority key identifier: 60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3
Certificate issuer:       /CN=A915E742/serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
Certificate serial:       35A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
Manifest number:          3592
Signing time:             Sun 20 Sep 2026 14:25:07 +0000
Manifest this update:     Sun 20 Sep 2026 14:25:07 +0000
Manifest next update:     Sun 27 Sep 2026 14:25:07 +0000
Files and hashes:         1: YJezTWdAEygGKfiFypA_1pq5W-M.crl (hash: 9rRCCqmddE4A/Q2G76/gGIfYDQ6xUuyHsQ82vX9iNh8=)
                          2: 9D0BDA0AD09111F0847B8D52C4F9AE02.roa (hash: d2qnOMj+4aMvpadCEEalUtvRb5DNsG3YqUzCX2r+V1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl
                          rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 14:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13737 (0x35a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E742, serialNumber=6097B34D674013280629F885CA903FD69AB95BE3
        Validity
            Not Before: Sep 20 14:25:07 2026 GMT
            Not After : Sep 27 14:25:07 2026 GMT
        Subject: CN=6aafecc3-d5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:0f:41:32:28:b1:5c:de:6c:6e:ea:66:73:33:
                    1c:8f:0f:11:0e:cc:70:07:1d:5f:cc:b7:da:d1:fb:
                    48:89:8e:d9:21:18:43:1d:f3:6b:90:ea:2c:13:9b:
                    8d:4e:70:96:ed:79:89:93:e5:4f:4f:19:b2:92:ad:
                    99:0b:c3:3e:76:41:6c:7c:61:30:0b:c7:28:b3:6b:
                    21:15:cf:e2:6d:be:98:1c:08:90:18:c0:66:92:cd:
                    6f:f0:8c:48:00:55:14:66:ae:19:e0:9e:9d:ca:c7:
                    e0:7e:cf:34:62:97:63:06:01:21:cd:ba:33:c8:a4:
                    09:87:50:a6:d6:ee:d0:2a:81:57:90:2b:06:3b:9e:
                    d2:b4:c0:75:96:08:ed:11:fa:34:f7:f7:6d:f3:51:
                    34:cf:f1:db:01:a2:ba:77:1d:6a:41:4e:c6:6e:07:
                    30:da:93:43:cf:f1:a3:41:a9:0f:ea:10:c9:e3:9b:
                    e7:91:51:03:e0:da:3f:77:4e:e8:10:02:4f:88:53:
                    5c:f1:69:6b:c2:6c:4e:99:16:1e:b9:ba:9e:89:ee:
                    50:d7:95:1c:7a:25:77:f6:3e:95:c9:bd:f5:d8:1d:
                    0c:64:f6:20:74:be:77:b4:1a:eb:a8:3a:56:d3:78:
                    2c:e3:ce:74:8a:78:04:20:8a:3e:a6:b2:95:a4:6f:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F1:C0:67:5A:97:8D:E6:EF:7E:CF:98:D3:7F:11:C7:7B:B1:D8:C8
            X509v3 Authority Key Identifier:
                keyid:60:97:B3:4D:67:40:13:28:06:29:F8:85:CA:90:3F:D6:9A:B9:5B:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJezTWdAEygGKfiFypA_1pq5W-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E742/2ED0F5FC1D8511E2B032A9DB08B02CD2/YJezTWdAEygGKfiFypA_1pq5W-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:30:c7:de:70:cb:3d:27:24:54:f4:83:3a:34:0b:22:92:ad:
         22:6b:b3:9e:8f:04:eb:87:c0:fe:09:78:e3:71:e6:ba:b3:e3:
         de:13:b8:0d:ae:78:80:81:30:d9:eb:58:d3:4f:8d:ac:bc:cf:
         f6:ae:46:05:af:bb:af:17:04:d8:51:5c:25:32:7f:02:19:e8:
         8a:c9:ed:0b:c9:12:33:94:3f:9d:d3:aa:7c:d4:87:ba:c8:34:
         cc:18:23:c7:b4:87:c0:87:74:35:ce:13:29:24:0e:79:5e:89:
         ee:f7:9d:c7:04:a6:dc:d2:28:3a:33:89:ed:40:16:91:82:e4:
         18:bf:45:32:c6:71:c4:48:98:a2:48:a8:e2:45:f8:5d:b4:1f:
         84:10:c4:9a:bf:1c:fc:c4:ee:59:db:73:2a:ed:ae:4f:4f:f9:
         bb:15:2f:f0:8b:84:a6:a0:de:95:1b:69:1c:b7:6b:3b:b3:43:
         56:03:ac:fe:5c:d7:55:5a:2b:e8:71:08:3e:1d:79:49:8e:b7:
         47:e1:5b:84:62:00:d5:03:90:84:ff:3c:f2:34:95:84:ed:e8:
         90:1f:23:74:11:1e:ca:ef:ae:55:e1:d5:5f:9e:b1:51:05:42:
         51:4f:4d:21:18:05:21:46:f3:69:c4:61:99:74:72:83:ac:5e:
         72:11:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:57 2026 by rpki-client