Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          wUPBstAQiUNh/RnW1hMvibiL5U4Z1c+2CYVApewpDK8=
Subject key identifier:   F5:36:A8:AF:F3:BC:73:52:10:11:1C:6F:77:E0:94:7F:1B:14:DE:33
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       06E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          06DC
Signing time:             Sun 20 Sep 2026 22:10:15 +0000
Manifest this update:     Sun 20 Sep 2026 22:10:14 +0000
Manifest next update:     Sun 27 Sep 2026 22:10:14 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: CChjmIiFS4bDYXkLs8ny46a4k9G7tDinGL/FFRBmQRU=)
                          2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1768 (0x6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Sep 20 22:10:14 2026 GMT
            Not After : Sep 27 22:10:14 2026 GMT
        Subject: CN=6ab059c7-0235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f9:f4:6b:27:04:e8:a9:5b:99:76:cf:c1:d9:
                    0e:44:3a:58:54:94:7c:86:21:dd:9d:85:f0:42:b6:
                    ab:8b:b9:4a:4f:54:f6:d0:fc:8b:97:82:aa:dc:0e:
                    1f:bf:63:42:4d:09:a5:e6:e4:e3:26:6d:54:e7:92:
                    af:56:29:c2:42:a3:f9:6f:e4:49:fc:20:61:8c:f8:
                    ed:ab:5c:21:cb:ef:9c:41:84:e7:b7:23:64:f0:43:
                    8d:e4:56:8b:90:4f:42:89:00:31:04:70:f1:15:ad:
                    16:1d:48:1f:a5:6c:7a:08:77:69:a7:45:da:70:94:
                    fe:a9:fe:6c:fc:8d:ba:45:b5:65:c8:c4:55:b7:aa:
                    23:1c:db:6f:69:30:ca:7c:61:f0:a1:98:60:19:7e:
                    13:54:3f:24:78:8e:a8:b7:c1:b1:9d:17:e6:a6:df:
                    a7:d2:b0:0a:73:c6:25:31:b9:9d:a1:50:11:c8:f3:
                    90:4d:b9:54:0c:59:63:47:7c:d1:22:bf:4b:07:de:
                    f1:4f:8d:19:92:3c:fa:ae:18:d5:03:e1:36:92:61:
                    e5:39:32:65:ed:15:40:e4:0b:80:19:c5:9d:70:cc:
                    1f:8e:bc:30:1a:ee:68:8a:6d:74:34:a9:53:83:16:
                    2b:4f:47:7e:e6:c2:ff:e2:9e:42:79:cf:53:2b:4d:
                    7c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:A8:AF:F3:BC:73:52:10:11:1C:6F:77:E0:94:7F:1B:14:DE:33
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:05:6e:41:5a:ae:76:ad:2e:4f:fd:5e:75:3d:4b:2a:2a:f3:
         20:45:dc:97:dc:b0:74:76:ca:f1:5b:95:1f:10:91:84:0f:63:
         f9:20:56:51:47:1d:ce:de:1e:bb:3e:63:8a:2e:80:0f:62:58:
         2d:7d:95:13:24:70:60:60:e6:bb:45:28:1e:6b:97:4f:e1:17:
         39:bd:ee:00:ee:1c:60:d6:9b:66:9c:40:7b:38:05:92:8c:ac:
         31:ad:15:26:ec:78:ca:7c:00:94:3a:2b:bd:4e:20:3b:58:00:
         f1:9c:c0:f3:55:cb:a5:a8:a4:5e:5e:d5:a7:f2:26:60:c2:c2:
         fc:2a:58:7d:91:14:68:b5:f4:ea:ce:1e:4f:ad:d7:e9:8a:25:
         71:e2:21:4a:29:ef:5d:f1:0a:f1:dd:f5:d2:ff:03:b2:00:d8:
         f9:e4:4f:6d:60:91:c2:83:10:0d:c9:92:0c:8e:73:7e:2a:e4:
         ed:0c:01:40:a4:8a:a2:62:00:75:74:62:2b:6c:d7:07:fd:1e:
         26:b9:8d:19:85:aa:96:cd:92:81:42:9a:15:c0:77:0e:e6:6a:
         65:ed:5e:68:16:21:2a:bf:94:76:a0:1f:f9:4d:8f:1b:f3:c0:
         7c:b5:ef:a3:42:bd:be:e0:d5:6b:67:66:47:21:bd:83:1a:8b:
         b5:b0:58:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:31:51 2026 by rpki-client