Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File:                     y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier:          aj/mPZmV0mGt6xIn3dz9h++hqc80SlCsw/ikrYiiun4=
Subject key identifier:   36:B3:84:6D:EE:1F:58:B3:BD:EA:A7:23:9C:9E:B1:44:43:D3:5F:3F
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer:       /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial:       087B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number:          1101
Signing time:             Thu 24 Sep 2026 20:43:46 +0000
Manifest this update:     Thu 24 Sep 2026 20:43:45 +0000
Manifest next update:     Thu 01 Oct 2026 20:43:45 +0000
Files and hashes:         1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: M7uN8JLrsgzrc/9ZVfL+4IkYp0zremvMMQJf2eYUqXU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
                          rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:43:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
        Validity
            Not Before: Sep 24 20:43:45 2026 GMT
            Not After : Oct  1 20:43:45 2026 GMT
        Subject: CN=6ab58b81-27a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:ba:7b:8e:a6:8e:e1:e8:bb:6e:69:57:74:
                    78:24:d3:d6:b4:65:5b:78:17:2c:2c:96:36:c4:9f:
                    f0:fc:b5:ff:e2:94:a7:5c:90:92:5b:72:3f:4c:51:
                    45:be:39:96:e1:41:82:08:6c:15:5c:61:85:35:97:
                    91:7a:04:2c:5b:7b:c1:f6:51:6b:26:21:0a:46:e3:
                    c7:be:58:29:ec:e8:9b:cd:d1:ec:24:58:28:fe:41:
                    e2:8e:e2:5a:36:bf:6e:5b:70:44:ed:2b:59:5c:57:
                    61:8c:d8:83:c7:c0:d6:7c:ec:54:68:c0:b9:8f:03:
                    78:18:a1:45:2d:65:7a:58:30:29:6f:9b:42:f0:96:
                    5d:04:5d:5b:e8:f8:63:0a:a4:75:78:21:e8:8f:99:
                    0b:03:62:3b:db:ad:15:d1:2c:b4:4d:15:a9:89:09:
                    6b:57:81:93:15:92:26:2d:eb:f5:f8:53:26:06:1b:
                    96:69:a9:93:bb:c9:1b:79:db:f8:cb:49:3d:87:72:
                    7d:49:17:af:c1:4f:13:da:45:03:a8:71:66:85:42:
                    83:05:95:ff:eb:5b:31:b9:8a:30:26:30:b3:4f:de:
                    3d:e3:dc:7d:4f:65:dd:43:68:fa:7a:f6:74:01:39:
                    e7:02:c7:dd:17:5e:ab:44:a6:85:a7:01:ed:eb:c9:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:84:6D:EE:1F:58:B3:BD:EA:A7:23:9C:9E:B1:44:43:D3:5F:3F
            X509v3 Authority Key Identifier:
                keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:19:06:f6:1c:d5:53:9a:17:9f:7a:1f:4e:39:19:a0:50:
         69:1e:a4:2a:20:f3:9d:e4:fe:c4:6b:ce:01:1b:29:82:13:30:
         07:c7:5e:0c:da:d2:c6:2c:74:16:62:a1:d2:0a:02:1c:c2:6c:
         6c:fc:05:55:5d:d6:98:6c:21:c4:05:57:7f:61:f4:dc:f6:e0:
         d5:5f:36:cb:fc:29:83:b5:e4:87:43:52:7d:11:0a:7f:50:1d:
         84:7d:5d:cd:e6:42:2e:bb:cd:fb:f5:d8:74:0f:b7:94:08:be:
         e1:35:f2:d9:33:c5:ce:61:04:e4:b6:bd:d9:83:a8:c0:3f:27:
         86:5a:89:d4:dd:a8:9b:91:2b:85:68:b4:92:a1:60:df:ef:8e:
         5e:19:3e:7f:e6:a8:84:59:e0:d8:6e:5b:13:f4:c2:42:0e:c5:
         5f:fe:fe:da:50:f4:98:22:e0:93:07:79:9b:94:64:8d:e5:93:
         d8:c2:25:3b:0a:b2:3f:91:eb:c5:5b:93:1f:34:25:3b:a1:f6:
         e5:94:fc:c2:9f:01:66:71:c7:f8:36:34:56:a9:12:d3:19:8d:
         13:a6:52:25:8b:aa:fb:ae:cf:25:3f:47:6f:26:99:bc:54:11:
         ab:7f:46:e6:3a:07:8a:08:31:86:ba:81:cd:e2:26:19:31:c4:
         7c:e0:1d:6d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD
NTY3QkUzODgwHhcNMjYwOTI0MjA0MzQ1WhcNMjYxMDAxMjA0MzQ1WjAYMRYwFAYD
VQQDEw02YWI1OGI4MS0yN2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMK6e46mjuHou25pV3R4JNPWtGVbeBcsLJY2xJ/w/LX/4pSnXJCSW3I/TFFF
vjmW4UGCCGwVXGGFNZeRegQsW3vB9lFrJiEKRuPHvlgp7OibzdHsJFgo/kHijuJa
Nr9uW3BE7StZXFdhjNiDx8DWfOxUaMC5jwN4GKFFLWV6WDApb5tC8JZdBF1b6Phj
CqR1eCHoj5kLA2I7260V0Sy0TRWpiQlrV4GTFZImLev1+FMmBhuWaamTu8kbedv4
y0k9h3J9SRevwU8T2kUDqHFmhUKDBZX/61sxuYowJjCzT94949x9T2XdQ2j6evZ0
ATnnAsfdF16rRKaFpwHt68lW2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDazhG3u
H1izveqnI5yesURD018/MB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx
REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N
UjFkZWIwN2d3T2pGWjc0NGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYkZBvYc1VOaF596H045GaBQaR6kKiDzneT+xGvOARspghMwB8deDNrSxix0
FmKh0goCHMJsbPwFVV3WmGwhxAVXf2H03Pbg1V82y/wpg7Xkh0NSfREKf1AdhH1d
zeZCLrvN+/XYdA+3lAi+4TXy2TPFzmEE5La92YOowD8nhlqJ1N2om5ErhWi0kqFg
3++OXhk+f+aohFng2G5bE/TCQg7FX/7+2lD0mCLgkwd5m5RkjeWT2MIlOwqyP5Hr
xVuTHzQlO6H25ZT8wp8BZnHH+DY0VqkS0xmNE6ZSJYuq+67PJT9HbyaZvFQRq39G
5joHiggxhrqBzeImGTHEfOAdbQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:27:03 2026 by rpki-client