Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File:                     YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier:          HH/yX1vJJS5NazyTrYRJ6Ya7oxolc0F1VOJDt/6UJvg=
Subject key identifier:   8E:DE:98:D6:78:D0:BF:67:25:02:2F:11:B2:59:97:C8:8A:29:45:B9
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer:       /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial:       0449
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number:          0441
Signing time:             Fri 04 Sep 2026 21:36:01 +0000
Manifest this update:     Fri 04 Sep 2026 21:36:01 +0000
Manifest next update:     Fri 11 Sep 2026 21:36:01 +0000
Files and hashes:         1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: wz43grvXdQAL+VqKBFVn/d7vUO/u+6TV9rhfjTGt72A=)
                          2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: s9x9gIirWntlK8Owx596ebxdwlOGog5ZPg7HYcpO694=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1097 (0x449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
        Validity
            Not Before: Sep  4 21:36:01 2026 GMT
            Not After : Sep 11 21:36:01 2026 GMT
        Subject: CN=6a9b39c1-093a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f5:c2:95:5a:c9:0e:61:db:a6:fb:76:af:12:
                    c3:16:e5:d8:a0:7f:74:1b:cc:8d:82:e1:8f:b1:48:
                    45:86:b9:10:b9:9b:b1:1e:54:9e:a9:4d:98:bc:ef:
                    de:e2:53:ce:b1:c0:a8:20:c3:ee:39:c6:10:a3:2d:
                    a4:0f:d4:d8:f4:0c:36:45:a7:30:63:41:30:e3:6c:
                    05:c3:fa:e8:fc:ef:08:a8:d3:0c:8e:a5:cf:47:bc:
                    2e:81:48:a9:8c:fe:aa:76:bc:82:3c:c2:19:4d:f3:
                    e6:c2:b4:67:6b:5a:f5:13:2b:f6:cb:b3:c3:7c:12:
                    79:7c:82:f8:ab:35:40:30:16:20:a1:34:0d:28:ed:
                    4e:c6:16:56:fb:bb:31:df:f8:30:30:d0:95:d8:90:
                    ee:f1:79:f3:61:da:02:37:9a:91:db:26:63:2f:f1:
                    72:c2:44:8d:c5:1b:fc:6e:c4:4f:c1:bc:9a:a3:ab:
                    8f:bc:9c:43:c2:f0:66:f8:55:01:30:ef:ad:ae:b3:
                    69:2a:73:f2:6b:01:b7:65:0c:b1:68:4c:c9:b5:17:
                    1a:e6:b3:cc:e2:e4:c4:8c:1a:88:11:d4:3e:55:62:
                    0d:1c:6b:4d:b8:b9:4e:a7:92:d0:67:1d:fb:89:ae:
                    7c:e2:52:85:4b:8a:dd:e4:55:b4:5f:b2:a7:d8:82:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:98:D6:78:D0:BF:67:25:02:2F:11:B2:59:97:C8:8A:29:45:B9
            X509v3 Authority Key Identifier:
                keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:bb:db:26:26:59:92:90:b4:61:f8:44:e8:36:83:c1:65:
         ac:92:60:57:ca:2d:fc:45:16:4f:83:8e:69:bf:07:47:8b:8d:
         ce:f9:c6:54:16:f5:be:02:cb:db:e7:41:d3:b9:5b:27:c7:1e:
         e9:87:df:71:79:de:29:fb:36:05:3d:6e:66:16:85:0c:44:79:
         b1:7a:76:63:7e:6c:7b:b4:a8:05:59:9b:48:f5:35:63:ab:86:
         8d:65:4f:d7:a0:18:a9:3e:a1:4f:f9:6c:b4:f0:c6:cb:64:c0:
         a9:be:c3:c8:44:4c:ce:00:15:5c:7a:77:32:95:7b:6a:ca:f9:
         99:b9:de:f8:68:b0:fe:43:7e:6b:65:bb:fb:b6:02:46:4f:60:
         b0:e7:61:e7:56:49:aa:cb:aa:77:de:85:9a:15:02:b5:09:c4:
         cd:55:a5:5f:d9:77:32:9d:f4:16:df:1d:81:43:16:29:e8:96:
         a8:71:05:c4:ad:fe:d6:67:a6:23:3d:fe:9c:a1:3f:65:b1:aa:
         17:f5:26:ea:01:28:78:0f:55:05:d3:82:64:65:76:79:e3:b9:
         4a:c4:e3:67:f6:41:43:34:56:74:13:4e:40:ea:d3:0a:0e:4d:
         38:f4:44:05:02:71:be:af:31:84:93:27:b8:e1:99:84:e4:49:
         ca:80:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:08:49 2026 by rpki-client