Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File:                     yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier:          tZndtjTHU7J2NCrktXZxosS3CEfbOj8RWlTOYUlWeGg=
Subject key identifier:   6A:17:F5:49:B4:AC:11:17:B9:31:F4:A8:6A:E0:F2:F3:AC:6C:B7:BC
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer:       /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number:          026D
Signing time:             Mon 21 Sep 2026 02:04:56 +0000
Manifest this update:     Mon 21 Sep 2026 02:04:56 +0000
Manifest next update:     Mon 28 Sep 2026 02:04:56 +0000
Files and hashes:         1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: voXJq1G5lijrjfN/mHhXdCZhNeOVzs94bQu+giEOsz8=)
                          2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
        Validity
            Not Before: Sep 21 02:04:56 2026 GMT
            Not After : Sep 28 02:04:56 2026 GMT
        Subject: CN=6ab090c8-a93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:ce:e6:76:f9:9f:b7:0f:c6:ea:5b:f0:f4:
                    40:a4:1a:be:bd:14:b9:e8:1f:f3:de:7c:e1:1c:1e:
                    21:66:ef:ae:f5:cd:8f:8a:cf:de:2e:de:a1:29:32:
                    fb:e8:c1:b8:ce:6e:fe:a8:82:5f:aa:a7:ea:c2:17:
                    36:7f:a8:da:87:76:d7:9e:86:74:ea:26:5a:4a:8a:
                    95:79:35:0c:e8:c6:d4:96:43:73:44:4a:cf:3f:4d:
                    4e:a2:74:58:68:1c:67:57:2b:ec:86:bd:fd:46:5e:
                    68:f4:f1:44:7f:99:97:90:52:6f:9d:3a:89:76:c4:
                    85:ee:91:62:03:2f:31:44:82:1f:39:d5:20:f1:57:
                    56:b6:52:3c:15:17:a1:c8:6a:2d:f9:08:b8:de:88:
                    07:7d:87:00:9d:db:a9:34:d2:18:ad:48:1e:78:db:
                    82:aa:9d:8b:0e:5a:de:a4:b5:bc:11:e7:a0:fe:57:
                    af:ad:65:9e:64:15:ea:6e:12:0a:a6:5b:ab:35:bf:
                    3f:98:2c:14:59:ed:26:e6:97:77:4e:b9:54:d4:f7:
                    20:ab:da:0b:90:91:01:00:39:b2:7f:fa:2f:7d:fd:
                    57:b0:df:29:11:22:52:32:c3:57:13:ec:9f:d4:d6:
                    1f:de:ec:27:49:20:6a:0c:bd:58:f6:dd:18:83:0b:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:17:F5:49:B4:AC:11:17:B9:31:F4:A8:6A:E0:F2:F3:AC:6C:B7:BC
            X509v3 Authority Key Identifier:
                keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:bb:16:35:c9:a1:9d:35:7b:af:0a:26:a6:5f:3c:1c:f0:
         a0:8b:89:ed:70:c1:5a:f0:59:54:60:e0:8b:77:19:c7:37:12:
         3c:2d:87:f2:d0:39:7b:94:49:4a:a5:88:7d:fa:a4:70:55:d4:
         e7:c6:d1:0b:cf:12:77:6a:25:35:9d:98:00:fb:0d:1e:ac:23:
         de:ca:82:31:ba:4e:d4:ca:da:83:3e:52:68:ac:90:2e:4a:69:
         df:86:12:0e:02:ba:c2:c0:b2:d5:40:f9:7b:fa:47:43:81:fb:
         37:9c:6f:b9:8d:fe:dd:76:b4:95:40:1c:ec:82:22:c9:c5:31:
         fd:a3:62:79:62:6f:f9:c3:b5:c8:e1:56:5e:4d:69:54:3d:45:
         c6:fe:b7:d7:df:7b:ca:45:3b:9d:2e:e0:fc:60:4e:3f:ce:25:
         70:f3:71:e1:37:17:a8:88:13:5d:35:85:8b:68:f8:7f:25:45:
         84:5b:b0:b1:93:2d:69:c3:93:1c:ea:3e:78:37:0c:55:1c:a8:
         a6:cf:80:5e:91:a6:ed:b5:e4:69:dc:bf:d1:35:8c:26:c4:c4:
         86:c4:a3:eb:85:6a:f8:39:4e:06:09:fb:cd:21:b1:57:87:d3:
         6c:31:8f:51:4a:b2:39:73:5a:7e:bb:d3:8f:a1:37:b8:24:81:
         b8:da:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:02:16 2026 by rpki-client