Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
File:                     yPzMxL6JiqkgZxNmoP15UynpIB0.mft (raw, json)
Hash identifier:          TAzcUzpA3DVsCRLD5cOZvebbjufRFLzWCvbOkeed0yQ=
Subject key identifier:   A0:9A:71:19:9F:F3:2C:84:8C:A5:F6:88:AC:EE:23:A9:66:A7:7F:D9
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0CBC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
Manifest number:          0CA5
Signing time:             Tue 22 Sep 2026 18:28:41 +0000
Manifest this update:     Tue 22 Sep 2026 18:28:41 +0000
Manifest next update:     Tue 29 Sep 2026 18:28:41 +0000
Files and hashes:         1: yPzMxL6JiqkgZxNmoP15UynpIB0.crl (hash: 8t9qoYwGrzOzUYdkH28PYsDqzF2myUL9Mjnq9OyPl2A=)
                          2: 20748896236511EABCF20E10C4F9AE02.roa (hash: 9c0xnj42aQVd0DJMJ7QVY1vll1L6k0F8fnB4B2KdtTM=)
                          3: 5407E320236911EA9967DA1CC4F9AE02.roa (hash: q8cCOCPHYUVLORYyWYiF8lMPvMHY/AGuLx1h919ki24=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3260 (0xcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Sep 22 18:28:41 2026 GMT
            Not After : Sep 29 18:28:41 2026 GMT
        Subject: CN=6ab2c8d9-4a65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:95:03:b7:c9:31:ab:90:3e:ee:03:01:33:
                    0e:da:bc:8d:92:8b:b6:78:fe:a6:df:fc:a0:c8:4d:
                    12:22:3c:ec:a0:c4:48:e6:2e:91:18:80:cd:f0:32:
                    0d:a9:eb:22:ce:2b:a7:48:9e:c6:2c:10:d3:2d:68:
                    53:2a:bc:4a:e2:f1:16:9f:1e:6b:81:15:d7:be:bd:
                    b0:19:0c:86:65:85:2c:59:42:a9:4f:98:21:cf:95:
                    cc:da:f0:21:c4:01:de:23:ad:df:b1:de:78:76:20:
                    f2:69:f4:b6:f6:47:84:6f:bb:84:b6:05:2b:7b:0c:
                    f0:d2:4d:57:86:27:d0:68:2b:ff:c6:33:a3:85:4a:
                    4f:3a:40:ba:89:d3:17:83:4c:21:e1:be:bb:99:77:
                    ea:f9:ca:c9:19:fe:31:6b:99:0e:69:6e:c7:47:f4:
                    e8:30:e2:9f:cf:73:3e:85:b0:3e:f1:4a:b5:b1:87:
                    0b:5c:5f:c5:f0:d0:de:58:ac:ed:ca:ef:c9:54:af:
                    72:f4:2f:dd:0d:b6:e5:cf:39:55:ef:0d:97:31:7d:
                    98:6b:26:ce:03:36:35:86:b0:f7:2a:00:b2:9f:00:
                    e8:53:7c:3d:c5:3b:d1:97:c3:a0:1a:bf:19:07:37:
                    b4:14:7d:1f:f7:37:1b:22:f0:b9:6c:f6:85:18:b2:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9A:71:19:9F:F3:2C:84:8C:A5:F6:88:AC:EE:23:A9:66:A7:7F:D9
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:19:65:ae:bb:b3:e4:cb:12:54:2f:e7:90:08:78:11:89:e6:
         b5:4a:92:eb:8f:72:91:77:96:b6:ea:44:86:33:f7:19:3f:c0:
         77:2a:78:dd:ec:62:cc:b0:88:6c:e5:d3:b2:9e:57:8b:05:d5:
         98:be:af:55:64:80:e5:34:5e:58:d6:af:e9:65:ea:f2:7b:bb:
         4a:fd:98:a3:d6:8d:5c:1b:ae:4f:84:79:f5:57:53:b5:7a:a2:
         41:14:9e:6c:2a:46:79:94:33:f6:0e:71:f5:d6:b0:d8:34:37:
         03:89:f0:c3:45:f6:c3:6b:d5:ea:8a:3b:16:52:19:92:ef:d0:
         eb:e6:e6:84:b1:1e:3c:40:c9:fb:34:b5:2d:3a:c2:64:0b:ea:
         df:39:89:89:c3:dd:b1:bb:9c:a2:07:37:87:31:5c:85:ad:3b:
         73:a3:94:22:b7:ce:f1:76:50:9b:07:22:8d:e8:12:b0:7e:f2:
         6f:d6:38:a1:be:08:78:92:5a:e7:4f:34:69:46:4e:80:bc:5d:
         1a:2d:2b:f4:82:6b:87:2e:b6:f0:00:91:54:46:92:0a:2c:50:
         a4:d2:03:e8:b3:ba:a4:fc:85:ab:89:70:b4:fd:4a:a5:ec:22:
         9e:c5:43:87:cb:5f:b2:2d:04:60:55:42:21:a8:6f:1a:a8:8e:
         bd:ef:b0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:00:04 2026 by rpki-client