Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
File:                     Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft (raw, json)
Hash identifier:          BxLw0njdpHScPnRXk+f3Vafe9jTrUvdlcyiMWwd/Fyc=
Subject key identifier:   98:CA:A8:FC:A9:5E:4E:EE:60:B8:66:DE:90:CB:9B:1F:BE:91:9C:1E
Authority key identifier: 62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E
Certificate issuer:       /CN=A912D4AE/serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E
Certificate serial:       26AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
Manifest number:          268F
Signing time:             Tue 06 Oct 2026 15:42:45 +0000
Manifest this update:     Tue 06 Oct 2026 15:42:45 +0000
Manifest next update:     Tue 13 Oct 2026 15:42:45 +0000
Files and hashes:         1: Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl (hash: 5mkNYsKfeeEEZTHXLrWGPR034QD6C/XMIslfrsgS/cI=)
                          2: C9996B26D40D11F09F81D24AC4F9AE02.roa (hash: mG6TKyu7p2WgX58jr4isRmpWhz+S04wbdcqTHFUxivA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl
                          rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9901 (0x26ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D4AE, serialNumber=6207F6EFF0099786E30A035B1B5B903C163F597E
        Validity
            Not Before: Oct  6 15:42:45 2026 GMT
            Not After : Oct 13 15:42:45 2026 GMT
        Subject: CN=6ac516f5-0f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:bf:c0:1e:14:1f:05:76:dc:21:cc:5d:13:
                    df:09:78:9c:e5:66:db:47:73:28:27:b3:4d:85:64:
                    ac:06:36:ec:dc:aa:eb:d5:20:17:f7:8c:13:f1:02:
                    b4:bc:50:cd:17:b8:b7:fe:a4:5c:1c:ac:4e:36:a5:
                    53:de:47:b5:29:74:fa:20:37:23:69:9c:06:fc:b5:
                    2f:ca:7d:3e:0e:32:5d:a6:98:c4:3f:00:c6:3c:44:
                    d0:88:af:4a:4f:6a:22:c6:2c:a2:b1:ff:3c:0c:26:
                    73:a3:db:07:a9:85:fe:ab:ff:5d:8c:22:68:d4:6f:
                    02:21:f8:0f:20:21:f5:ba:13:5f:e2:ab:27:e3:1d:
                    22:92:6d:78:9c:ab:92:c6:b1:ac:de:1d:cc:29:ef:
                    03:6b:18:85:b9:ae:28:00:03:5f:26:a5:00:40:24:
                    44:5b:58:5b:66:d6:ab:c5:8d:77:7c:1c:90:6b:80:
                    ef:fd:e1:6c:c2:30:d5:d2:3c:fc:d2:40:84:8a:04:
                    e6:23:49:77:dc:c3:a9:b6:4d:5d:5e:d2:fd:40:ab:
                    da:f2:db:12:ae:a3:7b:3c:c5:38:1d:b6:79:a2:35:
                    5c:09:38:2d:12:23:14:a0:de:c5:b6:bd:01:d2:ef:
                    91:0f:12:21:d7:d5:70:86:43:87:e4:82:cb:df:78:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:A8:FC:A9:5E:4E:EE:60:B8:66:DE:90:CB:9B:1F:BE:91:9C:1E
            X509v3 Authority Key Identifier:
                keyid:62:07:F6:EF:F0:09:97:86:E3:0A:03:5B:1B:5B:90:3C:16:3F:59:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ygf27_AJl4bjCgNbG1uQPBY_WX4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D4AE/D7B2F82C134711E58655A526C4F9AE02/Ygf27_AJl4bjCgNbG1uQPBY_WX4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:19:3c:d8:08:81:c2:95:2b:44:e7:5c:18:ef:87:9b:95:8f:
         69:f1:2d:8c:9d:43:52:50:db:66:a9:2e:38:73:f7:33:e2:b7:
         fc:3c:67:74:bd:55:d7:be:43:89:9b:85:e3:78:95:73:52:45:
         3b:41:a5:cf:df:ae:b7:99:21:b0:2c:3f:ac:f1:aa:38:8a:1f:
         da:fc:37:d9:9e:02:0c:3d:5a:ad:1d:9d:ca:48:7d:ba:1b:82:
         1b:32:74:a7:67:9e:b3:87:7e:90:62:89:b3:85:9f:6d:66:e2:
         12:6e:d5:d2:b9:f6:d8:56:6e:b7:86:eb:25:7f:e9:90:7c:27:
         d3:c7:c7:f9:52:92:03:c7:d7:80:ff:78:7a:db:aa:e7:a8:2b:
         8d:72:6f:fc:65:73:a7:40:2c:b9:b1:d4:98:bb:ab:3e:a6:de:
         73:b3:2a:80:23:23:f2:26:91:b8:41:79:fd:4f:5a:31:9c:1e:
         d5:67:42:75:8d:84:04:39:5e:13:e8:5f:cd:11:06:dc:f4:eb:
         0b:0a:2b:3a:7e:dd:e0:ac:4b:f5:36:9a:74:97:d5:ea:5f:80:
         80:d8:11:67:13:ba:ca:ed:6c:85:b6:1b:39:04:a5:c7:26:0f:
         6a:8b:ef:6c:30:58:5d:e7:bc:db:c0:44:e4:79:f9:39:8a:f6:
         99:4e:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:37:21 2026 by rpki-client