Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          iqc0Ampe0o/I2P7h0Btqw8UJOAVJdSmIu99eUOI6qDk=
Subject key identifier:   93:DF:6E:65:D8:29:A3:72:95:29:5C:92:8A:1E:F7:D5:38:E4:AF:16
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          02CC
Signing time:             Mon 21 Sep 2026 01:15:26 +0000
Manifest this update:     Mon 21 Sep 2026 01:15:26 +0000
Manifest next update:     Mon 28 Sep 2026 01:15:26 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: ouhbqcc8/vH/OEKJF/SOoKBMzXn5pm08KFnw8k4VYVI=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Sep 21 01:15:26 2026 GMT
            Not After : Sep 28 01:15:26 2026 GMT
        Subject: CN=6ab0852e-5147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:e5:64:b6:e8:19:e8:58:10:fd:a7:3e:cb:
                    eb:34:c3:16:68:4e:86:f8:c9:ac:c7:b7:d5:c8:98:
                    3e:a3:72:a0:d5:aa:7d:52:66:fb:7a:55:7a:36:09:
                    68:64:b2:de:8e:f5:6c:98:98:d0:8d:55:30:80:76:
                    b4:e5:9d:49:22:b9:8c:95:a1:0d:f9:cd:d2:1c:a6:
                    d5:26:c3:7e:22:6a:5c:31:ab:09:10:9d:66:7f:64:
                    d6:b9:75:49:56:d8:84:87:61:61:81:e7:7c:43:f9:
                    03:70:d2:97:1b:e5:a7:c3:05:1e:72:18:9c:dc:3b:
                    bd:f9:89:29:96:f6:fc:b4:a4:3b:94:58:a4:4f:42:
                    77:cd:c8:ff:78:a9:68:66:3a:df:a4:b0:a7:fa:8a:
                    b8:da:b1:19:f9:a7:01:f0:50:ce:92:a3:7f:f7:9d:
                    16:90:60:82:0f:81:78:bb:98:33:fc:13:e6:5c:35:
                    b3:c2:97:d9:41:fe:e9:eb:13:fb:66:4d:66:52:77:
                    ff:ae:a9:8b:76:05:7a:39:03:c2:87:d2:32:ec:7a:
                    b1:a2:36:57:7e:4d:a1:89:fa:ee:b8:6f:93:2c:2d:
                    eb:7b:c6:48:69:36:0f:00:aa:5e:6e:dd:10:4f:d7:
                    ea:a0:67:a4:37:d9:61:26:f3:79:02:b0:b1:3f:09:
                    a0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:6E:65:D8:29:A3:72:95:29:5C:92:8A:1E:F7:D5:38:E4:AF:16
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:84:90:65:e8:f1:bd:cd:8b:96:4e:40:99:7d:31:31:40:59:
         c0:8c:e1:ea:fe:ed:1f:58:c8:a2:30:5d:66:81:4a:45:1d:7d:
         ef:03:a8:40:7a:d5:bc:34:87:70:ae:ae:fc:6e:4e:33:97:c0:
         51:ad:29:ad:9e:b5:40:f9:a7:fa:04:da:83:e8:fd:34:ad:87:
         0e:b8:cb:94:0c:b5:f2:47:ae:d4:f6:e6:89:4d:32:a2:64:9e:
         e3:64:66:10:9f:12:ce:3a:69:49:a8:06:41:a3:13:61:75:ee:
         8c:48:1a:63:05:e4:a5:35:69:a5:8b:9e:8a:c1:b4:58:92:9f:
         56:40:95:28:c5:e5:b9:fd:04:de:6d:18:33:fe:97:4b:e1:56:
         27:a0:be:67:e3:7e:ab:35:cd:87:ec:a1:a3:5a:e8:25:39:b6:
         e0:30:07:ee:be:7f:bf:e0:04:af:9c:13:11:55:ee:4f:a1:a3:
         6a:34:c5:dc:3b:82:40:f2:ba:2f:13:4e:a0:45:60:b8:d8:2f:
         5c:4f:33:23:dd:e0:28:53:b8:3a:ca:bd:cf:c5:00:26:94:96:
         39:bf:80:2a:bf:68:5a:38:7f:e6:58:b0:61:23:b0:a1:68:13:
         6c:da:4d:2e:7f:c4:ce:12:e5:8e:d6:eb:6b:75:c1:7e:6a:d4:
         59:8f:83:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:25:45 2026 by rpki-client