Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File:                     yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier:          LdmMGhBJEDGztoaUQgpEhMFzp8jmS8BR/WKU7CUPuOY=
Subject key identifier:   CD:D8:63:7D:A9:55:39:F6:99:88:7B:D6:33:D6:23:C1:0D:B7:E0:33
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer:       /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial:       0C29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number:          0C1F
Signing time:             Fri 02 Oct 2026 19:03:17 +0000
Manifest this update:     Fri 02 Oct 2026 19:03:17 +0000
Manifest next update:     Fri 09 Oct 2026 19:03:17 +0000
Files and hashes:         1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: 8cqw60FQ7mJFNKFg2WRvbcCMZhB6anz3Ny3isXbMLac=)
                          2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: zYt9aMZ+O8CRpxULcPzMchvE4WlyLPK1U5WVZqzWIF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
                          rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 19:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3113 (0xc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
        Validity
            Not Before: Oct  2 19:03:17 2026 GMT
            Not After : Oct  9 19:03:17 2026 GMT
        Subject: CN=6abffff5-551a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:ff:68:a3:2e:34:b2:ea:43:b3:b3:d5:ef:
                    b3:3c:42:63:8b:4e:62:91:f5:d5:c7:dc:50:59:86:
                    76:11:6e:b1:74:fd:ab:26:bd:fb:cd:18:14:e3:9b:
                    ca:bd:90:6b:7b:dc:af:2e:6a:64:26:89:4e:8a:78:
                    30:81:b8:15:96:87:a9:6a:fb:08:62:e0:08:71:8d:
                    f1:89:2e:36:5a:e5:d1:c7:18:3d:48:50:a6:70:f3:
                    00:bc:12:04:f9:b7:8c:95:86:d2:1a:91:d2:d7:47:
                    30:d0:f2:63:45:21:ee:1f:a6:c6:a1:90:b9:7a:72:
                    6e:90:b6:ab:6f:9f:85:f5:73:58:fa:ec:d4:90:d9:
                    40:be:14:64:cf:35:1c:34:bd:93:43:d1:50:b8:90:
                    36:32:2e:c8:32:62:73:f9:03:fe:20:26:81:30:ac:
                    32:54:05:af:e7:41:21:9f:c9:57:13:d7:39:d9:bf:
                    cd:79:9f:bd:5b:16:2f:47:11:4a:62:23:7d:bc:4a:
                    b2:9b:a0:44:e7:eb:be:f6:2e:8f:06:9a:c5:7e:61:
                    75:7a:bc:08:32:8a:5e:1c:c1:ea:02:63:39:2e:1b:
                    3b:72:10:60:03:9c:d7:c9:9c:be:24:ef:c0:52:02:
                    ed:eb:bc:44:83:3d:59:c3:3e:a6:3b:24:8e:67:26:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:63:7D:A9:55:39:F6:99:88:7B:D6:33:D6:23:C1:0D:B7:E0:33
            X509v3 Authority Key Identifier:
                keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:dd:05:72:91:b2:3e:cb:68:26:c4:4c:3c:22:c6:44:48:
         9f:a6:ac:c8:eb:35:18:35:c6:30:e6:d9:84:9d:53:4b:4d:c8:
         f9:6e:f8:2a:ff:fb:95:79:ca:10:af:c9:6d:48:f4:b5:0c:af:
         15:4f:d5:56:1e:17:ae:53:ed:1d:f3:63:3a:4a:97:e8:dd:97:
         05:c7:fd:04:89:50:b3:c5:df:33:47:5c:fa:de:c0:f0:0e:41:
         52:56:b5:90:ea:08:1b:c8:93:a9:d0:14:ff:47:4a:6f:5c:03:
         58:22:b7:69:a0:c6:5e:50:3d:23:67:9e:3c:0e:aa:cb:e0:3a:
         7b:47:9d:21:18:45:a0:6b:a8:1a:d6:b8:5d:8f:12:e3:5b:71:
         39:8d:e8:f8:d4:4d:5d:e1:68:e5:ba:99:a3:5d:58:97:a5:30:
         48:f5:17:0a:1e:b3:50:3e:c9:23:e8:fd:f1:a2:cd:a1:ee:80:
         36:90:37:4f:09:f1:39:22:b0:0f:f7:71:9f:80:d0:09:1b:a2:
         ff:3e:e9:fd:83:0f:eb:a2:67:5c:24:95:43:f0:4c:86:40:62:
         98:4e:02:f5:2e:55:ae:68:68:8b:16:85:47:96:e0:50:d1:f2:
         e5:c2:20:c3:f4:5a:35:83:36:dd:5e:b0:bf:1d:47:6d:b5:1c:
         68:7b:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:30:18 2026 by rpki-client