Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
File:                     yl3F7VK2QLF0vjjiadTEniVnTxc.mft (raw, json)
Hash identifier:          VLqpT6RUv/gJtaKYPyG1itpwIcl1pii3lv0a1CKtLzY=
Subject key identifier:   27:B5:8C:60:0A:E3:39:E8:4D:C6:11:F0:21:EB:6F:5D:A0:02:09:58
Authority key identifier: CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17
Certificate issuer:       /CN=A9127687/serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
Manifest number:          4B
Signing time:             Mon 05 Oct 2026 08:50:04 +0000
Manifest this update:     Mon 05 Oct 2026 08:50:03 +0000
Manifest next update:     Mon 12 Oct 2026 08:50:03 +0000
Files and hashes:         1: yl3F7VK2QLF0vjjiadTEniVnTxc.crl (hash: EVweE4FHZIc+neAAdy+CmvFEUILPTz6dq3A1S2ZjzWU=)
                          2: 76FA27AE4E0E11F190083CE1CC833773.roa (hash: va/1lyhr1y7ZVbyMMDIeDeUDTkfRGTrO+6LCCS/pWVI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl
                          rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127687, serialNumber=CA5DC5ED52B640B174BE38E269D4C49E25674F17
        Validity
            Not Before: Oct  5 08:50:03 2026 GMT
            Not After : Oct 12 08:50:03 2026 GMT
        Subject: CN=6ac364bc-7e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:06:08:b4:5b:84:0c:c4:7e:30:cf:02:41:
                    ae:30:9a:eb:90:18:4c:e8:b7:e7:32:fd:f9:cc:95:
                    a8:4b:d6:c4:ad:4d:01:c8:e5:6f:0f:1b:58:55:25:
                    67:b4:6d:52:49:bc:03:75:14:39:00:1f:15:2f:7a:
                    32:5a:69:f7:16:8e:ba:aa:89:85:99:d9:15:88:60:
                    87:ab:e1:f7:a9:eb:20:e5:13:09:0b:f7:81:86:42:
                    90:3a:32:bc:9d:23:3a:29:5e:3d:db:9f:2d:8d:25:
                    a5:e4:86:92:bd:50:74:62:27:32:74:40:6b:df:eb:
                    aa:a1:95:af:ac:41:86:ae:8f:ae:bf:5d:6d:58:8b:
                    8c:ab:5b:39:f9:9f:33:f0:4b:45:0b:72:b2:5d:36:
                    0f:fc:e8:b7:22:c5:e1:4f:01:0a:b7:96:9e:da:1d:
                    af:f5:4c:22:8b:94:89:de:05:a2:b6:1f:40:3e:c9:
                    a5:b7:2e:bf:43:89:9a:4d:e3:3e:af:31:e7:8f:e3:
                    c8:06:11:7d:86:4b:f6:c9:ab:b8:0f:8f:4d:4b:7e:
                    e1:f6:3f:3f:01:28:04:67:b9:31:ce:5d:91:f4:6a:
                    ec:6a:76:0c:3e:71:e8:eb:8b:71:56:30:23:98:1a:
                    9a:58:41:4f:d1:6c:91:66:76:34:cf:a7:0e:77:b0:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B5:8C:60:0A:E3:39:E8:4D:C6:11:F0:21:EB:6F:5D:A0:02:09:58
            X509v3 Authority Key Identifier:
                keyid:CA:5D:C5:ED:52:B6:40:B1:74:BE:38:E2:69:D4:C4:9E:25:67:4F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl3F7VK2QLF0vjjiadTEniVnTxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127687/1975883A4E0E11F19959F8BBCB833773/yl3F7VK2QLF0vjjiadTEniVnTxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:41:5a:a6:be:42:cc:2b:c2:3c:ed:89:8e:ff:45:cf:8e:b8:
         57:73:eb:64:9b:75:44:56:b1:9c:20:f5:ce:2c:a7:fe:49:93:
         70:1e:4e:90:e9:ec:cb:1f:c4:83:3c:6d:2a:2e:02:a1:03:98:
         03:19:c8:84:1d:f3:7d:34:68:76:a2:6b:89:69:05:15:b3:9f:
         ba:86:75:82:74:08:ee:6f:1d:2c:5f:f9:1c:57:e6:46:a7:7f:
         9e:a3:2b:98:3c:94:bf:c5:0a:a3:9e:a0:b5:88:0f:7c:5f:13:
         76:36:c3:b4:43:c8:6d:06:d5:db:17:a2:26:b0:25:21:62:47:
         28:a7:cc:c2:bb:8f:af:4d:89:ac:8a:83:9c:b4:5a:f2:7a:b2:
         a3:1f:f3:f4:d4:8b:ca:3b:8d:ac:0d:53:56:62:0b:1d:e5:59:
         6d:8f:a2:a4:7a:98:fb:4f:c6:1c:88:ef:2d:a4:54:a5:90:6c:
         6c:e0:8c:f7:10:91:94:07:10:d1:01:e2:5c:44:9b:55:fa:6d:
         ab:3e:fd:0d:93:0f:a3:32:f5:35:f9:31:a3:53:a6:4c:2e:c0:
         7e:0c:0c:7e:ed:98:92:a7:66:e5:d2:b0:f8:88:a4:63:b5:f1:
         ca:a4:0a:35:b1:15:ca:73:bc:31:96:13:26:5c:be:5a:c8:09:
         fd:3d:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:24:43 2026 by rpki-client