Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
File:                     YQPK5q-yXkC6nl2kxULP4JtndCo.mft (raw, json)
Hash identifier:          aRvwgM487hlLRdQUkz0/Z1I6FxqyKCZnwSDrpDKbS2s=
Subject key identifier:   79:D0:D9:57:3D:24:4F:51:00:15:5E:3F:34:CD:E5:C5:E4:2E:15:24
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       0A93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
Manifest number:          0A88
Signing time:             Mon 26 Oct 2026 19:35:14 +0000
Manifest this update:     Mon 26 Oct 2026 19:35:13 +0000
Manifest next update:     Mon 02 Nov 2026 19:35:13 +0000
Files and hashes:         1: YQPK5q-yXkC6nl2kxULP4JtndCo.crl (hash: CbRjYdeJmhztNLN3UebxPZgqxKuZ/xc7enpIDXCZSFM=)
                          2: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (hash: h1FScDmATHfunMcIYToAdhRcFfBgHG5Y3p1Jl4Wlwi0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 19:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: Oct 26 19:35:13 2026 GMT
            Not After : Nov  2 19:35:13 2026 GMT
        Subject: CN=6adfab72-c9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:d0:7a:54:d9:24:63:bc:4e:c4:ce:a1:2c:
                    ba:15:07:27:d0:57:f7:bf:ca:aa:2a:15:fd:a7:1e:
                    e7:20:d1:02:ea:f0:6f:7c:29:00:f3:e6:ab:00:f1:
                    a1:f2:6c:ea:d5:c2:59:28:dc:4f:66:b1:9f:a1:14:
                    e7:d3:ba:76:42:bb:57:7e:e4:0e:1d:c3:b9:5c:de:
                    4f:34:7b:ba:08:39:df:80:6b:79:4d:b8:19:86:7b:
                    55:c5:75:a0:c4:73:bb:09:04:93:c2:6b:9c:43:4f:
                    1e:ad:22:40:94:4b:29:1a:27:5d:d4:d9:c9:47:0a:
                    f2:f2:7d:63:34:f3:be:42:af:51:a2:49:85:37:17:
                    eb:12:0c:ce:04:c7:6d:af:1d:60:2e:e6:db:3a:f3:
                    7e:e0:04:7a:0d:e4:14:45:d1:23:3a:2e:81:6c:52:
                    7b:c4:43:f2:8d:89:64:bf:69:af:ec:e9:2b:71:f0:
                    ad:16:86:c8:3d:3e:ce:f2:99:f2:97:4e:17:3e:7c:
                    08:07:78:89:5e:3b:f8:d7:bf:02:b3:2e:94:fb:7d:
                    84:e3:02:20:83:af:fc:38:19:79:1f:9f:60:c6:99:
                    49:06:d0:b0:47:70:d3:26:0b:6f:38:97:6a:a1:ac:
                    ff:ae:bb:cb:6f:1b:16:a6:06:5d:f2:f6:e1:35:5e:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:D9:57:3D:24:4F:51:00:15:5E:3F:34:CD:E5:C5:E4:2E:15:24
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:39:0b:9c:e9:6d:21:b8:fc:11:26:25:89:78:98:e0:fb:17:
         f5:64:15:5e:e9:70:4a:cd:05:ff:1a:e6:e9:81:b2:34:1b:a3:
         8c:23:18:be:af:e2:d7:74:2f:c6:a3:d9:1c:c1:66:dd:9f:59:
         e6:93:0b:e1:5b:27:db:fb:a2:6d:bf:c8:88:ba:02:36:00:25:
         0b:cc:c2:03:f1:1f:43:e3:3a:2e:36:a6:f5:a4:c1:7e:38:d0:
         d2:d9:b1:be:83:8f:8c:5f:01:d3:b7:7a:aa:79:f9:c4:ff:75:
         6e:33:e4:28:e6:dc:e5:af:d4:c1:39:df:88:44:7f:4a:a8:02:
         f3:6c:83:39:16:c1:cf:67:0e:97:fd:2d:38:ed:09:cd:8f:42:
         19:e9:18:7c:77:34:cc:68:69:95:4b:3d:cd:ab:26:5b:ee:16:
         a8:c2:f1:2e:55:6c:c9:1a:73:59:55:e7:1e:37:e3:cf:ea:a6:
         18:ba:ea:18:df:60:ea:d3:40:a1:75:83:ef:ff:b7:1e:d0:6a:
         0c:9e:ad:01:36:ba:d0:6a:f8:5d:46:37:1b:ff:89:51:1b:81:
         ab:29:30:2f:ec:db:61:96:f0:61:24:92:97:fc:94:c6:91:8a:
         d4:09:bd:c5:35:9b:ff:81:4b:ff:0c:6b:82:09:b4:e5:c3:9f:
         af:79:af:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:05:22 2026 by rpki-client