Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
File:                     y6GXwEyqm9KV9XiEcqahCqP773A.mft (raw, json)
Hash identifier:          Ay52JJJs4IedF3euMhrO2yUe5YvcyqrsWz4dEeKTn3M=
Subject key identifier:   49:02:16:C9:B7:90:94:B4:D6:46:D2:14:3E:2B:89:76:F3:6E:31:28
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Certificate issuer:       /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial:       1C51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
Manifest number:          1C14
Signing time:             Mon 26 Oct 2026 16:13:54 +0000
Manifest this update:     Mon 26 Oct 2026 16:13:53 +0000
Manifest next update:     Mon 02 Nov 2026 16:13:53 +0000
Files and hashes:         1: y6GXwEyqm9KV9XiEcqahCqP773A.crl (hash: b8sigGwUo/+e0fpgq0yIMTx5RVSXzOmjR0tZfUvRbvI=)
                          2: A7EF5240597511F185BDC55FA6833773.roa (hash: vMT6HIl8Z5EGx4usQl1z7aLkoXG0MO5waBi4qFCMQ7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 16:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7249 (0x1c51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
        Validity
            Not Before: Oct 26 16:13:53 2026 GMT
            Not After : Nov  2 16:13:53 2026 GMT
        Subject: CN=6adf7c42-a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:29:14:d2:89:73:35:1c:ee:dd:b4:9e:be:
                    f8:3f:82:3d:04:0e:c9:f8:e4:7b:5e:51:98:a6:66:
                    ff:83:0c:c3:7d:8f:2e:b6:8c:64:11:4a:66:a3:92:
                    a9:6e:ae:dd:e2:84:39:6c:7a:4b:80:a7:fe:fd:cf:
                    8a:ba:92:2f:c1:39:05:c4:52:31:99:99:f9:d3:a8:
                    fe:c5:4e:5b:4e:02:b8:ee:cf:10:ec:54:9d:b7:19:
                    63:a4:a9:c4:e8:54:33:e2:a8:b9:d3:03:2f:68:ad:
                    85:58:ab:6b:94:3f:3f:03:56:cc:2d:fa:b0:61:54:
                    dd:6e:32:cc:a0:1e:b2:0b:d1:d8:60:f9:b3:bf:23:
                    77:91:a4:08:12:3f:b4:9c:13:31:05:b1:40:4c:f7:
                    97:b4:81:26:4e:66:70:03:b0:99:d7:48:ce:28:0c:
                    4c:df:d7:e3:aa:d7:ff:9d:7b:fe:85:9e:82:08:9a:
                    ab:18:08:2e:67:68:2c:b1:57:e7:b9:e2:c3:47:2c:
                    91:09:42:af:30:77:e5:a2:29:2e:aa:53:5b:ef:58:
                    fd:c0:cc:18:b8:7b:f3:ce:00:92:53:b2:34:dc:9e:
                    2c:08:c3:33:cc:47:23:9c:db:ac:e3:76:4e:98:49:
                    3f:18:f9:38:6e:25:fa:9f:fe:5e:d3:9b:c3:02:38:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:02:16:C9:B7:90:94:B4:D6:46:D2:14:3E:2B:89:76:F3:6E:31:28
            X509v3 Authority Key Identifier:
                keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:e3:3a:be:22:a1:e3:4e:fb:cc:b9:fa:8d:a5:f1:0e:a8:
         3a:af:84:a1:f5:40:2f:4c:32:8a:fc:7f:02:35:06:0e:fc:db:
         fd:1d:b4:fd:d8:4b:f1:24:24:46:54:48:0e:b2:8f:67:87:04:
         d6:0a:3f:7f:c4:a7:37:d2:fb:99:c7:82:2f:92:43:90:c0:4a:
         79:e0:9e:c9:e1:4b:ea:cb:97:6e:33:98:9e:8d:5f:64:06:f2:
         c7:85:91:df:97:86:9e:11:42:0a:f1:39:ec:85:af:62:3f:bd:
         52:54:62:06:43:d2:3e:8e:a4:34:09:4d:cf:92:b5:46:ca:6f:
         0a:36:1f:36:09:5b:51:65:6b:1c:11:f2:25:d1:6c:74:26:d7:
         84:4a:c4:3f:52:d9:60:f9:d1:d4:a5:9e:8c:7a:3a:2b:39:95:
         b9:3c:f0:8e:bb:de:3f:2c:20:ac:26:f9:dc:0b:f2:81:f5:fb:
         39:d8:d0:50:6b:e6:49:74:22:6b:c5:b8:87:c7:24:df:06:9d:
         fd:a8:08:28:c6:0a:92:0d:4c:4d:6f:40:3f:b2:7f:5e:4d:c5:
         03:8c:bb:1f:82:db:76:24:fd:70:fd:cc:8c:7f:39:b6:08:6f:
         a2:b7:ce:53:de:2d:30:47:33:0e:04:2e:fb:cf:9d:24:9c:fc:
         50:25:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:24:01 2026 by rpki-client