Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
File:                     sYTDX2rtv7hd2kET8nUuDInKOpA.mft (raw, json)
Hash identifier:          unX95bEoXeu7/LfUdFlRvKmdqCG/aH0iPMFBobHFDwc=
Subject key identifier:   F1:47:5C:41:0E:95:9C:58:C1:2A:90:3E:20:5B:27:3A:9A:8D:E4:C9
Authority key identifier: B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90
Certificate issuer:       /CN=A91F88F4/serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
Manifest number:          0BE4
Signing time:             Tue 22 Sep 2026 18:50:28 +0000
Manifest this update:     Tue 22 Sep 2026 18:50:27 +0000
Manifest next update:     Tue 29 Sep 2026 18:50:27 +0000
Files and hashes:         1: sYTDX2rtv7hd2kET8nUuDInKOpA.crl (hash: PsPMpiq3E/WZfeq/rUMyrlMQYdLX3K650df6CzThij0=)
                          2: F9D16F1CC7D811EDB42DFF20C4F9AE02.roa (hash: 3yI5gZ2vGPgL1FKd+BCUys3WRaz0/cKCtffyBVWrgS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl
                          rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F88F4, serialNumber=B184C35F6AEDBFB85DDA4113F2752E0C89CA3A90
        Validity
            Not Before: Sep 22 18:50:27 2026 GMT
            Not After : Sep 29 18:50:27 2026 GMT
        Subject: CN=6ab2cdf3-0b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:fb:ed:a5:ad:e5:aa:48:f5:52:31:48:d9:
                    ac:ae:d4:f3:bc:17:65:70:0f:17:a1:b4:ee:88:8a:
                    07:8d:b3:05:05:41:4d:9a:de:84:3f:c4:49:a3:0c:
                    df:06:ec:68:3d:33:ab:7e:90:73:12:bb:34:b9:7a:
                    b4:86:46:11:4d:3a:89:b7:12:5b:e8:f0:51:f8:6a:
                    4d:0b:5b:de:6f:0d:7c:48:32:37:4d:64:39:a6:84:
                    a8:ae:3b:96:b6:a2:87:84:74:3f:39:9a:70:fe:b1:
                    2b:f6:bd:cc:6c:37:b8:55:08:c8:f4:5a:df:ae:7f:
                    63:88:f1:59:13:0c:05:d8:5d:23:2d:d9:ce:44:21:
                    36:3e:a0:96:21:77:51:35:24:ed:e3:c5:51:0f:33:
                    59:68:ea:d5:c3:0d:85:bc:2d:e6:ab:78:5f:c7:eb:
                    ce:16:61:a9:12:8f:3c:65:84:86:63:27:5f:17:9d:
                    26:21:d4:4f:55:d3:42:20:08:c8:58:7c:9c:df:3a:
                    fc:7a:12:c1:17:13:e4:1e:7b:3d:8f:d1:07:76:7e:
                    b6:bb:c7:22:34:32:66:ac:b6:35:bf:72:64:26:e2:
                    49:60:86:92:38:b5:ca:91:47:d6:90:27:ce:f2:9e:
                    11:d5:a8:bd:b8:9d:e5:68:6f:46:a1:84:c1:ad:09:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:47:5C:41:0E:95:9C:58:C1:2A:90:3E:20:5B:27:3A:9A:8D:E4:C9
            X509v3 Authority Key Identifier:
                keyid:B1:84:C3:5F:6A:ED:BF:B8:5D:DA:41:13:F2:75:2E:0C:89:CA:3A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYTDX2rtv7hd2kET8nUuDInKOpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F88F4/07AE77CC48CC11EAAEF50151C4F9AE02/sYTDX2rtv7hd2kET8nUuDInKOpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:82:0c:99:30:f5:e1:46:14:af:d7:9b:f1:77:b7:b4:a0:d5:
         ef:c2:5e:72:a2:bf:24:cd:77:46:82:35:c3:cc:bc:b8:84:f7:
         8f:c6:7d:61:f9:24:9e:13:5b:42:52:45:bb:32:35:aa:7d:3d:
         7f:f2:4f:51:bd:79:5e:cc:39:f9:c0:a3:67:67:24:21:ee:0f:
         72:22:0b:21:0f:63:90:5a:73:84:5a:fd:1b:9c:64:37:d9:fe:
         6f:0f:0a:24:83:83:64:67:a9:c1:82:bc:1f:4f:f1:d8:4e:4c:
         c1:f0:c6:20:10:19:7e:89:01:42:bd:7d:8e:1a:7e:c5:ed:8f:
         76:cd:15:9a:22:74:dd:9f:2f:60:08:3d:f1:0e:b8:9c:98:c6:
         25:21:b0:3e:76:83:7b:ad:09:54:3e:cb:e3:df:4c:2d:d2:6b:
         23:0f:90:f3:b6:28:5a:31:17:ed:eb:21:ce:8c:0f:1d:19:de:
         f5:16:02:99:f0:4d:ab:b6:3b:c8:71:16:e7:80:0c:d3:fa:c8:
         c0:c0:71:51:fc:51:fe:09:31:a3:0e:e1:51:14:c5:cb:c4:87:
         ae:e1:68:85:c8:ff:c3:e0:e6:02:36:2f:2c:f9:4a:e8:ad:3a:
         99:31:d5:e8:79:13:fc:2c:2a:71:8d:dc:ea:9e:df:e2:53:6d:
         42:38:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:10:44 2026 by rpki-client