Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
File:                     ydng2CxkMec8k65V7gMJ6xAaqz4.mft (raw, json)
Hash identifier:          VUR62tx8awnEYtxtjZtqmwSwJtnp0f6dynXlJhogh2M=
Subject key identifier:   4D:E3:CC:2C:08:1F:09:01:16:93:B1:1C:B3:88:12:DD:8F:C2:1C:8B
Authority key identifier: C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E
Certificate issuer:       /CN=A9175FD2/serialNumber=C9D9E0D82C6431E73C93AE55EE0309EB101AAB3E
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
Manifest number:          0B
Signing time:             Sat 19 Sep 2026 09:13:12 +0000
Manifest this update:     Sat 19 Sep 2026 09:13:12 +0000
Manifest next update:     Sat 26 Sep 2026 09:13:12 +0000
Files and hashes:         1: ydng2CxkMec8k65V7gMJ6xAaqz4.crl (hash: AoY6Ph4XpsW759v2dK2zQ+XFfwRszu6BlTg3g0XShew=)
                          2: 8jO73dI1-jpS3v_OajBexhsgyEo.asa (hash: cMxjjwyRMvaA7cb2h9MgRse7lhTgAivhkaHy7NeQXjE=)
                          3: 1D8BBB2AA83011F1A305C5833511F970.roa (hash: 7QXnUtP13fTricsaeFoI/Or7NbiijQkbrf+qG02XcaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.crl
                          rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FD2, serialNumber=C9D9E0D82C6431E73C93AE55EE0309EB101AAB3E
        Validity
            Not Before: Sep 19 09:13:12 2026 GMT
            Not After : Sep 26 09:13:12 2026 GMT
        Subject: CN=6aae5228-55f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:11:65:b3:a7:45:23:45:2b:70:f9:82:94:
                    02:e6:ee:84:00:43:3b:19:bc:cf:8d:be:c9:5c:8f:
                    da:61:07:79:14:2f:82:4d:7a:6f:25:7e:39:4e:7b:
                    30:92:d6:24:7e:14:3d:87:a8:12:6a:e7:82:36:87:
                    e5:b1:7c:21:31:1b:46:15:e3:6a:6d:32:05:68:26:
                    e2:41:7a:48:50:6d:95:f5:05:88:a7:8b:10:6e:5f:
                    88:4a:3b:a4:17:b3:b0:9c:ad:cc:63:2f:cb:f2:0f:
                    51:9c:5d:10:75:a9:d7:e0:e1:92:7c:ea:1a:e6:86:
                    2f:c6:a4:2a:41:44:b8:22:86:02:a0:8c:ca:0f:1f:
                    20:45:55:52:30:fc:81:f8:cf:66:96:43:f2:b6:37:
                    8d:b3:99:40:32:19:e5:e1:ed:7a:62:59:bf:53:cc:
                    7f:0d:5b:a7:e2:0a:26:2f:f2:a2:f9:8c:62:f6:62:
                    fc:70:11:33:ba:a1:d4:de:a1:ba:e9:a1:3b:4e:0f:
                    56:f7:f8:6b:ee:96:07:46:55:d6:c8:07:e1:5b:7f:
                    1e:56:bf:c4:a3:38:b7:0c:e1:fa:93:df:cd:e9:a1:
                    aa:1c:de:7b:72:f9:d6:a7:66:ea:c4:36:8e:c4:3b:
                    c5:7e:db:e8:28:6f:d3:90:ba:d9:4a:99:86:c7:8e:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:CC:2C:08:1F:09:01:16:93:B1:1C:B3:88:12:DD:8F:C2:1C:8B
            X509v3 Authority Key Identifier:
                keyid:C9:D9:E0:D8:2C:64:31:E7:3C:93:AE:55:EE:03:09:EB:10:1A:AB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ydng2CxkMec8k65V7gMJ6xAaqz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FD2/D5989518A82F11F189CAAA7B3511F970/ydng2CxkMec8k65V7gMJ6xAaqz4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:fe:e7:32:cd:c0:05:3f:e6:00:2e:21:c6:73:a0:b5:4c:
         92:1e:d7:ec:3c:c8:5d:f2:93:84:7c:e1:6c:78:37:98:37:2a:
         8d:4d:ac:fc:7b:04:84:c8:d1:9a:26:bd:f5:80:c8:09:5c:c8:
         e8:bb:fc:51:95:fe:aa:f6:88:65:2b:82:9a:5b:3d:98:de:de:
         ee:4d:37:18:bd:f9:5f:01:8e:6b:d4:2b:8f:a7:36:09:ca:68:
         4d:5f:16:fd:b0:af:84:00:80:ca:3e:1d:24:91:60:ce:fe:92:
         36:bd:e3:91:b8:b3:5b:6f:44:9c:13:b6:13:ba:4a:1f:54:fb:
         27:2f:a5:96:bd:36:ae:6c:3f:32:69:30:3e:2c:62:ea:e4:2b:
         02:fc:a0:78:ff:a6:ea:d2:8c:34:13:be:f4:15:95:85:29:f1:
         be:fd:77:3d:f1:b8:8d:bb:68:9e:e1:2a:0a:07:52:b6:b5:9c:
         20:fe:7f:ad:d3:96:11:64:f3:b0:c3:7d:62:e9:fe:1d:99:91:
         94:93:07:bf:49:e1:1f:7b:7a:fb:d3:22:dd:b0:f4:cb:87:df:
         d0:09:f1:92:ea:ca:3e:63:86:d0:4d:48:ae:5c:4d:c1:6a:da:
         ed:25:36:1a:c7:4f:c0:a1:94:83:25:8a:78:5f:75:c5:72:b0:
         5f:3c:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:39:04 2026 by rpki-client