Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier:          lZfrE7SP7UR5kyLkrg4pwgVnviLP35Te/4K7W1N3gBU=
Subject key identifier:   A2:8F:29:E4:02:14:98:87:13:09:87:A0:D2:97:41:65:1B:E1:62:6B
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer:       /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number:          06A5
Signing time:             Sun 20 Sep 2026 22:19:27 +0000
Manifest this update:     Sun 20 Sep 2026 22:19:26 +0000
Manifest next update:     Sun 27 Sep 2026 22:19:26 +0000
Files and hashes:         1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: sIH0EBBHsXL+4cN78i3dK2bPXeFi0En99BU2GFnL2ao=)
                          2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Validity
            Not Before: Sep 20 22:19:26 2026 GMT
            Not After : Sep 27 22:19:26 2026 GMT
        Subject: CN=6ab05bef-c48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:8d:38:53:bb:70:67:23:dd:a3:69:bd:5f:
                    e6:15:94:e7:1e:02:9c:20:ca:d0:4c:32:95:38:42:
                    eb:98:39:0d:87:17:9e:37:a6:8a:0d:53:75:9c:85:
                    e3:f8:ca:40:71:40:c5:1b:bf:2b:7b:bf:d0:b9:20:
                    26:f3:61:73:bf:5f:f2:3c:06:81:3d:29:08:5b:1b:
                    e2:84:00:d1:4f:a4:aa:91:7d:82:af:1b:d6:5c:ce:
                    d5:17:2e:dd:e6:0e:32:55:03:b1:67:19:f7:08:0a:
                    e8:59:41:ae:91:2c:68:f5:76:80:88:ac:20:0b:a5:
                    39:b2:25:62:86:1e:06:67:df:0a:59:d2:85:eb:e4:
                    d6:8d:21:81:b6:fd:6f:a4:fd:fa:f5:52:d1:d2:07:
                    f9:81:a0:68:4b:fd:26:c5:d0:0b:16:48:c8:29:ee:
                    ad:7a:46:5d:55:63:42:22:cf:3d:bd:33:fe:49:b1:
                    cf:90:19:33:d8:10:97:d8:b9:21:20:3a:df:c5:e2:
                    b0:41:13:e8:bc:7b:d0:eb:a4:33:a8:e4:4a:46:45:
                    1b:72:e2:bc:f0:cb:68:fb:51:2c:fe:8c:03:95:e2:
                    7e:23:88:8a:47:0d:17:be:44:68:4a:5d:3b:c0:c7:
                    5e:4d:8e:d3:4e:4a:a2:92:f8:7a:61:fc:30:3f:45:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8F:29:E4:02:14:98:87:13:09:87:A0:D2:97:41:65:1B:E1:62:6B
            X509v3 Authority Key Identifier:
                keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:27:b6:26:d2:d6:a7:4d:90:13:0d:b4:9d:07:09:14:0d:
         7e:8b:9d:0a:60:5e:e1:c3:97:01:8d:95:4c:e3:45:f4:4e:5b:
         67:18:bb:5f:c2:87:c6:d4:b5:b3:cc:08:1f:56:d8:0e:76:38:
         c5:45:4c:01:78:8a:31:1d:68:33:45:bc:29:e9:ab:26:4f:3a:
         eb:fc:47:8f:2f:ba:bb:53:69:4f:14:b8:d0:91:c0:9f:f8:5a:
         8e:b8:ed:8f:b2:98:e4:42:ee:95:83:af:bf:da:b9:5b:da:de:
         f9:ad:37:dd:e8:3e:a2:4d:a2:bd:21:25:56:be:19:50:b8:17:
         f8:69:76:a5:d0:58:d2:a7:12:2a:ce:f6:65:56:f2:e4:1e:6c:
         6a:5b:c5:88:1a:ca:a7:3a:1e:a3:b0:99:17:fd:aa:1c:20:fa:
         34:9f:49:02:0f:d4:b8:4a:b2:17:25:02:e9:51:56:ea:4b:ba:
         cc:eb:dd:59:af:af:85:cd:c8:ed:0d:d6:2e:9a:b6:76:1a:82:
         f0:c9:87:6e:b9:83:dd:63:79:10:4e:ed:18:2f:a9:99:b6:16:
         ac:4a:bb:8a:22:9a:02:57:09:a5:ba:6a:ae:e1:74:d3:fd:b4:
         c5:45:53:7a:22:f7:1b:4e:73:22:c2:a2:cd:74:6f:6d:8f:b0:
         54:18:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:57:32 2026 by rpki-client