Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
File:                     y2bgNeLweFj09ztHjc2FpjakJQo.mft (raw, json)
Hash identifier:          Dr/VK6ZuvnAPFdepaXsAZj2q8yaUZDFsZX9GAdHx0ow=
Subject key identifier:   1B:9C:49:0B:00:CE:42:34:5F:D6:A5:7D:A0:91:C4:FC:50:E6:C0:2A
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
Manifest number:          01C6
Signing time:             Sun 27 Sep 2026 04:21:03 +0000
Manifest this update:     Sun 27 Sep 2026 04:21:02 +0000
Manifest next update:     Sun 04 Oct 2026 04:21:02 +0000
Files and hashes:         1: y2bgNeLweFj09ztHjc2FpjakJQo.crl (hash: RK+eK6Z9yyuIYrWYiZOJQlzYiB025M+UnL9jBUvnN1k=)
                          2: 851515FC1C8711EF964ED80AC4F9AE02.roa (hash: MAtmMwfjtzQ9R8LyZXq78h+1kb3Yy15h8cOKjzlP4LM=)
                          3: 24D519F226FA11F0B737393FC4F9AE02.roa (hash: x10D9pADYHToKbPS6t/synxTqCGYuiAeyckivfclbFs=)
                          4: AF27640226FA11F0B0383240C4F9AE02.roa (hash: 4LD8HC62z2DhT4Dg2lOYzbuBHzfVnUe3OyB/4hGuDkM=)
                          5: 82D8082A292611EF875A5C36C4F9AE02.roa (hash: SyXuffXDHXPbASG7Y+LG0Brt2u6hsVNRNcrnMwVVAGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: Sep 27 04:21:02 2026 GMT
            Not After : Oct  4 04:21:02 2026 GMT
        Subject: CN=6ab899af-4fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:54:56:63:61:89:3a:6f:a6:ca:c3:2b:c3:
                    f5:0b:f0:f8:0c:25:7f:67:b1:d4:90:27:1e:47:4f:
                    7a:1d:59:09:db:59:fb:c2:0a:20:da:f2:be:b6:63:
                    3a:65:1d:79:77:d7:7e:ec:62:39:b4:cc:9a:fb:c7:
                    88:9a:09:8d:46:55:c7:d2:cc:99:7a:da:7c:8c:11:
                    c9:cf:de:92:b1:60:27:36:22:d1:a0:d5:08:06:3e:
                    1c:3b:40:29:ae:73:0b:67:25:c7:84:b4:c0:b9:43:
                    d6:bd:a8:e3:f3:4c:d9:81:11:7f:5e:cc:4e:b4:d3:
                    59:a7:58:77:cd:29:e0:db:40:f4:15:71:4f:97:df:
                    5c:ca:1a:fe:9a:c5:99:2d:00:be:57:9e:3b:17:a9:
                    42:4f:92:45:68:85:68:35:f7:f1:56:69:b7:f8:f6:
                    58:53:50:dd:8c:a9:c2:4d:2a:41:60:f5:66:65:13:
                    4c:66:39:08:70:6e:f7:b4:48:d1:05:5f:11:e5:85:
                    cd:2e:ba:c2:a9:65:ea:09:a2:89:f9:6b:69:1c:b4:
                    75:db:fe:a8:c3:76:52:43:8c:e9:34:1f:6a:f8:41:
                    8c:a4:5f:cd:73:29:63:92:ff:1b:1c:93:be:fe:e2:
                    2c:03:e8:f4:8f:e5:b8:f6:e0:22:7a:1e:73:ca:29:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9C:49:0B:00:CE:42:34:5F:D6:A5:7D:A0:91:C4:FC:50:E6:C0:2A
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:72:9f:3b:fc:6b:2c:ba:1a:1a:22:3b:f3:29:5c:96:6d:
         e0:bf:43:73:49:e5:df:fa:25:59:cc:1c:66:76:cb:57:ee:e1:
         9e:6c:8e:6f:51:45:3f:2a:8d:bb:4a:87:da:25:e4:75:f5:14:
         d6:94:c4:b6:04:da:2f:16:06:b8:18:bf:5b:06:6b:4c:aa:36:
         91:9a:50:a4:41:e1:85:22:79:e9:11:cf:96:ab:c7:ed:3a:d4:
         ff:a6:60:3d:18:23:8c:43:e4:17:23:88:10:01:0d:56:9e:ae:
         78:5e:be:27:38:33:ea:e8:01:bc:6a:7f:4a:68:66:1c:26:c4:
         72:7f:67:35:c4:a0:4a:8c:ac:27:c9:ba:2f:7c:65:85:ce:4b:
         f5:fd:0e:48:ae:58:c3:f1:24:3b:f5:23:b6:16:90:35:a8:98:
         64:49:72:17:80:ea:68:d6:41:f9:db:7d:b0:e5:f7:52:4f:71:
         5f:68:22:57:79:17:93:31:f5:84:a9:85:30:a7:c6:50:77:b1:
         d7:1e:3d:7f:c9:b9:02:f3:8d:a6:04:c0:39:8a:dc:17:5a:74:
         b7:52:8b:ec:90:81:b8:78:0d:50:18:87:71:54:d7:7f:2b:ce:
         82:87:f5:c0:fc:ac:78:d6:cf:fd:2f:48:4b:9b:ad:e6:c5:ea:
         cb:bd:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:35:58 2026 by rpki-client