Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File:                     YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier:          0GpHB5i0eHgAPXtLfiQ2rMixRHbh0q9p4ixIBwvXvUI=
Subject key identifier:   6C:FB:57:FB:4E:19:B2:93:C5:60:36:B8:D1:4D:57:20:A1:8C:EE:CC
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer:       /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial:       0528
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number:          04F3
Signing time:             Sun 20 Sep 2026 23:42:45 +0000
Manifest this update:     Sun 20 Sep 2026 23:42:44 +0000
Manifest next update:     Sun 27 Sep 2026 23:42:44 +0000
Files and hashes:         1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 7fcy5EnbS4eQXuEMbWh9/YQjGLxRUdl6RnUgms7GJWo=)
                          2: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: qM1jpngbGtLR2m4oUSpuCPTJ9nzvkY0kh4taVmX3HNk=)
                          3: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 1u7MoOEqUAcZtaB8C3gY/ex2tSVz31yAb6iq9EUXHLo=)
                          4: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: rTxo/ci/zZDp1JRh6YocwArvN83oqi4lpSlFY+PJjME=)
                          5: 33930A2290C511F1A86DF5B63D11F970.roa (hash: W5WRjM7yN2YAZI9GZoTzu+RbB4vd+NIEsv5YO+RYxFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
                          rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
        Validity
            Not Before: Sep 20 23:42:44 2026 GMT
            Not After : Sep 27 23:42:44 2026 GMT
        Subject: CN=6ab06f75-248a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:58:49:6e:58:b5:55:d1:5b:ab:72:6a:2d:
                    cd:cf:2f:a0:69:29:35:ba:d7:88:e2:b9:c3:3d:09:
                    72:d7:fc:06:59:1a:77:79:ba:74:89:17:4a:79:ff:
                    df:94:1c:98:bb:e8:3b:e8:a8:00:60:23:c9:ac:e9:
                    01:11:25:e0:9e:da:24:cb:9a:70:09:87:04:21:8d:
                    ad:44:7a:cc:48:34:32:2d:1c:87:87:a8:60:7c:b4:
                    e3:8c:e9:c3:6d:a9:d5:e5:35:76:8f:71:bf:53:2e:
                    32:35:33:12:c2:6c:d0:c2:dd:a1:05:a7:0e:33:18:
                    c3:25:dd:e3:1a:18:87:a1:32:3a:b9:cc:4b:a8:15:
                    90:76:53:a9:bd:38:87:95:5d:1b:25:e7:0c:fd:21:
                    f6:a9:ec:49:d8:ba:47:c6:7d:49:ea:cf:64:4c:d4:
                    77:0e:8d:5f:39:7f:39:5a:60:9e:25:4a:0e:26:7b:
                    8c:8d:f0:3e:e5:32:98:3f:28:4e:3b:cf:33:70:f7:
                    07:3d:36:e3:ef:99:8f:ea:3f:b1:d9:e6:49:03:78:
                    7c:58:aa:58:e4:4c:c1:48:d4:33:70:fe:9a:56:e9:
                    0a:a7:2c:7d:77:fc:10:b7:88:c7:aa:32:a5:5c:dc:
                    55:53:fc:c0:55:40:9d:3b:cf:4c:fb:5a:95:4c:06:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FB:57:FB:4E:19:B2:93:C5:60:36:B8:D1:4D:57:20:A1:8C:EE:CC
            X509v3 Authority Key Identifier:
                keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:b3:e1:23:e9:0a:41:02:38:f4:50:cb:1a:96:ce:0c:65:
         89:43:66:b9:ba:e9:1e:d8:e6:94:02:55:fe:1b:21:da:94:36:
         2f:45:72:8e:fc:42:98:64:93:63:94:4e:ff:f8:29:f6:f7:b1:
         9f:47:38:64:38:6f:23:df:b5:d5:3d:71:3c:b4:4e:fe:5b:45:
         7a:8c:df:31:25:f0:0d:6d:f0:66:88:ac:35:ab:b1:95:ab:d1:
         f7:ba:45:34:e3:6e:f6:bb:fa:4a:4f:26:18:bb:02:5b:28:b0:
         3b:33:85:a1:c1:e3:05:f5:7c:e3:b7:d1:09:1d:02:9d:e7:f1:
         58:92:c3:d1:97:4e:54:3d:b7:41:6a:e1:a4:42:66:59:71:93:
         1e:61:92:eb:59:12:5d:d5:a3:a0:b5:00:e5:a2:0e:63:76:cc:
         4d:ef:df:70:84:03:5e:c8:59:d1:58:8e:82:67:38:85:a1:3e:
         32:01:d3:31:c2:7f:33:60:e7:0c:92:51:94:23:f6:bb:5c:61:
         5b:36:82:84:ad:fe:07:82:9a:00:cb:3e:1b:87:83:6b:af:37:
         a7:87:1a:5f:b5:c1:f2:c5:97:f5:1c:39:d9:24:8d:46:13:45:
         81:b8:28:9b:97:76:b5:75:e8:98:bf:f0:24:47:76:a1:49:f4:
         1e:c7:b0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:46:33 2026 by rpki-client