Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          IfzR1q76bZL7cYChqz02aeyFOj4GOGxPr0MPtgXB+nE=
Subject key identifier:   22:E7:18:86:DB:33:48:11:10:2A:25:13:0B:DE:F7:E8:92:86:51:C7
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          A5
Signing time:             Fri 25 Sep 2026 07:18:31 +0000
Manifest this update:     Fri 25 Sep 2026 07:18:30 +0000
Manifest next update:     Fri 02 Oct 2026 07:18:30 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: blofOXK5aX78uWI0OFEYxtu+Z6bH+sq76iOIfaEA1Tg=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Sep 25 07:18:30 2026 GMT
            Not After : Oct  2 07:18:30 2026 GMT
        Subject: CN=6ab62046-64f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:23:86:48:ff:a4:38:87:ee:39:62:e1:24:
                    59:43:12:dd:09:f2:5f:9d:c7:c5:47:b3:92:13:60:
                    75:88:20:4d:10:18:18:b3:00:86:e9:49:fc:81:21:
                    31:08:11:74:8a:26:89:fe:fe:e2:d6:40:a4:3b:e9:
                    5f:3d:6e:61:3e:36:d8:8e:3c:fc:73:a8:e2:20:d0:
                    18:b6:e2:57:03:e2:f4:07:a4:0f:0d:fa:fd:05:23:
                    9d:26:ad:c5:d0:50:d6:ba:26:8b:04:7c:25:92:e4:
                    de:49:51:4c:12:35:9e:57:74:07:d8:2c:cc:0f:7e:
                    ba:f2:0c:27:13:d5:d1:e3:d2:6b:33:ee:b4:49:16:
                    f5:02:eb:d7:69:52:ed:97:aa:cb:db:a9:4e:11:5c:
                    3f:50:7f:f0:88:fe:89:fc:29:d9:bc:84:3a:28:41:
                    e3:8f:ab:07:34:a9:15:b6:ac:6e:03:f1:7b:52:a1:
                    fc:18:bb:90:df:38:ab:23:a4:17:e2:4c:10:55:50:
                    00:3d:47:26:44:75:9b:14:65:35:21:2c:c6:3f:be:
                    93:05:e2:56:9f:bf:90:3b:aa:90:11:a9:c9:28:3e:
                    ba:f7:5e:ac:86:09:e5:0e:05:a8:f9:d9:f5:35:a9:
                    cf:3b:74:85:c8:54:2b:72:b5:15:33:d4:19:37:2a:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E7:18:86:DB:33:48:11:10:2A:25:13:0B:DE:F7:E8:92:86:51:C7
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:87:c1:62:d2:72:ec:99:e0:d1:ce:4c:54:c2:17:c2:97:
         1a:ab:39:1a:b0:12:49:68:02:cb:53:a1:a3:a0:c7:9e:b3:1b:
         a3:df:13:37:f1:9d:e6:ac:9e:22:c4:5b:6f:64:5a:7e:c5:7c:
         31:95:5b:8d:97:5f:2b:91:17:1d:88:c1:3b:f9:5c:4d:9e:ec:
         13:f2:d3:ad:b5:22:5b:61:d7:8d:01:9f:7f:0f:11:91:48:ec:
         3b:47:ea:a5:5c:1b:88:23:92:8c:7d:2c:be:92:cf:75:e7:9f:
         bf:26:1a:62:66:d2:b3:53:48:59:e0:c8:9b:a5:f2:e6:57:de:
         fc:83:72:ff:fb:bc:d7:d9:9e:df:b7:2a:38:ea:67:11:58:95:
         6b:44:26:60:16:e4:17:e4:8f:33:08:dd:1c:28:b8:06:5c:24:
         fb:e9:c5:60:99:8c:af:8a:46:f9:cc:82:fd:69:dc:28:11:3f:
         9a:20:e4:72:0e:d4:55:71:a9:6c:19:8c:b0:95:2b:ab:b9:26:
         79:5d:d7:22:fb:df:0a:b1:ee:36:86:2b:fa:5f:1b:93:af:5f:
         ea:f5:b1:e0:99:eb:af:6d:8c:0d:d7:6b:f5:e5:58:a3:05:bd:
         23:22:c4:47:fe:6c:b3:1e:c9:4d:6e:b0:55:ea:9b:a8:70:ae:
         f2:71:ec:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:43:51 2026 by rpki-client