Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File:                     YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier:          fLbj16cqUq5VC7wLUAc75WRzS7K3EUqTpcKdqNPLYF4=
Subject key identifier:   4C:C1:0E:A2:AC:DD:09:A6:AC:3C:73:F8:42:3C:18:78:DA:C0:6B:A9
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer:       /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial:       8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number:          8D
Signing time:             Mon 21 Sep 2026 07:34:13 +0000
Manifest this update:     Mon 21 Sep 2026 07:34:13 +0000
Manifest next update:     Mon 28 Sep 2026 07:34:13 +0000
Files and hashes:         1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: hUbIpzHl4SN/f+88L8ObLIngCPEKPQNRWzhCqjEoKIM=)
                          2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: biBbqFto51rOZiPG5JNmrRxR/U8JC7IUfuy2q4b9zao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
                          rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
        Validity
            Not Before: Sep 21 07:34:13 2026 GMT
            Not After : Sep 28 07:34:13 2026 GMT
        Subject: CN=6ab0ddf5-7686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:7b:c8:ec:b8:b0:ef:11:a6:53:b0:6a:c7:
                    5d:38:7a:72:e1:ef:8a:20:98:2f:8e:e5:af:37:7b:
                    4c:f1:18:45:55:fc:41:a2:e8:c8:fe:5c:9a:4d:75:
                    01:36:45:7c:10:f3:ab:fe:ca:dd:65:52:d3:72:9f:
                    b1:a2:e5:6f:0b:90:93:fe:53:1a:9a:a7:ba:2b:ea:
                    cc:f3:b8:76:0b:24:ac:8d:4b:94:3c:d4:51:71:93:
                    f0:bf:85:b2:31:09:ff:9e:01:fc:e3:d2:cc:34:1d:
                    b9:24:ee:76:2c:90:99:38:f9:d8:e5:fb:de:47:ad:
                    77:96:cd:c5:72:0c:9f:52:06:52:65:36:62:42:eb:
                    bd:3c:03:a2:bf:8a:ed:d4:ba:f3:ec:b2:12:43:0f:
                    63:73:b1:57:a4:86:72:27:f9:f3:84:86:86:73:26:
                    77:6a:85:c3:9d:fc:bf:ef:63:d3:22:11:7e:76:d5:
                    05:de:88:0b:e3:74:ea:d5:99:0d:1c:ce:43:ab:ea:
                    8c:4f:f4:d8:99:d4:dc:3c:de:68:c8:30:a2:b0:80:
                    39:b3:fe:72:17:49:6b:1c:45:a8:89:dd:5f:2b:70:
                    ff:da:a0:5e:65:ee:f9:d5:a6:dc:de:36:3b:01:eb:
                    be:bf:19:81:1e:a6:4d:c3:20:06:52:08:17:92:a0:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:0E:A2:AC:DD:09:A6:AC:3C:73:F8:42:3C:18:78:DA:C0:6B:A9
            X509v3 Authority Key Identifier:
                keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:28:ff:96:9e:1a:27:05:f7:01:73:61:e8:98:1b:3c:c0:a7:
         6b:30:80:5d:47:d5:4b:c5:ff:d6:e2:57:2f:ef:72:6d:70:bc:
         82:b1:81:fc:c8:3e:1a:71:4f:98:17:26:1a:88:d0:fa:ae:fe:
         9f:fe:a4:02:bd:15:14:a7:7b:d9:80:7e:a2:32:e4:6a:3b:7b:
         d1:d2:3b:2b:39:b4:82:4c:23:20:08:6b:81:f6:90:19:cf:61:
         25:0e:72:eb:a3:85:ce:99:47:1b:bc:c2:17:9e:a4:b4:59:6e:
         58:e3:02:25:bf:78:c3:78:a9:10:0b:b8:a8:05:50:50:3a:6a:
         40:dc:f9:cb:76:e3:1c:96:f2:ab:3e:7b:a8:b8:d6:38:de:9e:
         4d:b1:ba:d1:2e:6d:3f:26:36:bf:01:75:e7:8b:3d:96:bf:2f:
         80:02:c5:6c:fb:c6:03:d1:97:37:47:b7:66:14:dc:73:11:5a:
         57:b5:c8:18:85:7b:80:d8:10:af:75:c0:9f:8f:03:a3:71:7a:
         56:54:30:62:2a:6f:1b:dd:6e:80:61:41:23:74:78:6c:3b:42:
         c9:92:de:df:70:8d:a4:b1:d0:1a:e9:fe:37:38:08:1c:fd:8b:
         f8:db:ef:b6:5a:7d:b0:a1:a0:c2:51:40:b6:78:be:03:64:4e:
         83:50:8d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:41:29 2026 by rpki-client