Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
File:                     1Y-DTjzFalATaTGkQZnby-WLhEw.mft (raw, json)
Hash identifier:          JJzXXS7AHeg0IESTU3KSLsimrWWqq+7XikLQg4e0EVA=
Subject key identifier:   2C:50:40:C4:E4:E5:6B:22:0E:44:52:05:2C:CA:4A:02:49:69:8B:E9
Authority key identifier: D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C
Certificate issuer:       /CN=A9178992/serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
Manifest number:          87
Signing time:             Mon 21 Sep 2026 07:37:43 +0000
Manifest this update:     Mon 21 Sep 2026 07:37:42 +0000
Manifest next update:     Mon 28 Sep 2026 07:37:42 +0000
Files and hashes:         1: 1Y-DTjzFalATaTGkQZnby-WLhEw.crl (hash: HA/0vdIulFXthEcmYfW1ZNPUVeIPhTUomRRPvPH6M4g=)
                          2: 694A4554ED2311F09CB4E0CD436F56BC.roa (hash: EhS//Fv0PhcyswJMfy8v37wRi8RtUogTTHlQepTJJls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl
                          rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178992, serialNumber=D58F834E3CC56A50136931A44199DBCBE58B844C
        Validity
            Not Before: Sep 21 07:37:42 2026 GMT
            Not After : Sep 28 07:37:42 2026 GMT
        Subject: CN=6ab0dec6-a524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:bb:6a:df:ff:12:30:fd:f8:09:67:2d:17:
                    72:3f:5c:11:42:1f:9f:e9:92:9f:89:32:bd:cd:46:
                    37:3c:7c:f3:d0:8c:5a:48:77:37:5b:cf:e4:79:f0:
                    0d:f3:cc:1c:f3:71:d7:0f:c3:9b:b0:f8:bc:f3:a0:
                    87:c6:8d:cb:73:8e:dd:01:61:6f:2d:46:05:58:9d:
                    5d:f8:93:57:84:d5:4d:ef:4c:76:79:1f:69:17:2f:
                    5b:3c:0b:59:2b:c5:e1:0e:56:9b:40:0b:10:a5:68:
                    47:81:39:e3:24:95:24:88:5b:79:35:b4:49:d9:0a:
                    ae:74:0f:95:17:30:3e:36:85:4e:eb:29:a1:2e:be:
                    ba:fc:9b:ef:9c:a9:1b:12:a8:20:ed:8f:e9:94:88:
                    3b:8c:c3:bd:a2:ae:57:30:ad:5f:fb:56:88:26:23:
                    29:1b:0f:62:8a:b2:21:d7:d2:31:db:5f:16:37:ba:
                    fa:8e:68:7f:1d:4a:eb:22:d7:48:2e:7c:4d:f5:de:
                    bf:65:1c:05:49:88:34:7f:fa:e1:dd:23:a3:52:49:
                    42:dc:80:5c:36:08:7c:a5:93:2a:7c:ce:1d:a7:a4:
                    43:42:74:9d:8b:9f:bd:80:ed:a9:29:ea:e2:11:34:
                    d3:90:d0:f7:48:3f:c4:53:41:0d:2f:ec:65:6b:2c:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:40:C4:E4:E5:6B:22:0E:44:52:05:2C:CA:4A:02:49:69:8B:E9
            X509v3 Authority Key Identifier:
                keyid:D5:8F:83:4E:3C:C5:6A:50:13:69:31:A4:41:99:DB:CB:E5:8B:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1Y-DTjzFalATaTGkQZnby-WLhEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178992/0586BE1CED2311F09F54DF18436F56BC/1Y-DTjzFalATaTGkQZnby-WLhEw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f0:f5:a8:3a:37:b1:25:99:ef:4c:b7:bc:f2:df:9d:37:20:
         ee:8a:68:ea:cc:c6:7a:43:81:b4:bc:41:73:7f:f5:12:3d:27:
         69:b6:e0:48:b7:c3:80:c9:43:7d:21:17:8d:c9:6f:95:da:58:
         bb:54:cf:cf:ff:4f:e4:69:e1:a9:ff:19:61:64:ca:ea:8c:50:
         77:df:6b:2e:3a:aa:b0:12:bb:41:0d:fa:16:ed:aa:13:c8:62:
         bb:90:ca:d9:63:95:ab:c0:a4:7d:b0:1e:fb:0c:c6:24:b0:ae:
         cc:10:1b:f7:63:ab:5e:bd:fc:e3:a6:fd:7b:1a:b3:4c:ea:8b:
         d2:4d:29:f1:7c:58:d7:12:d8:b9:89:33:f6:cc:88:d8:03:84:
         20:50:d2:95:46:b7:51:a3:7d:73:db:d0:52:c6:d9:f5:2f:b1:
         34:22:e5:4d:9a:04:0e:d0:25:16:bc:58:99:99:34:30:55:86:
         87:25:21:c5:d5:5e:81:81:2c:27:20:b6:de:d5:dd:66:f8:0e:
         3c:c1:35:a0:6f:f0:67:cc:66:9b:cb:e9:6b:c8:ed:fe:69:ca:
         c0:2b:d2:d5:1b:d4:27:c4:03:6c:d9:96:a0:38:52:00:7a:f7:
         ee:1c:39:0f:8f:a8:26:ea:e0:10:6a:c6:a2:52:a8:bb:dc:48:
         6d:3c:9a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:06:50 2026 by rpki-client