Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File:                     YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier:          y9JhcwTqTURc4eum63l9zun7+swlKfJRRx9vFbHkqFY=
Subject key identifier:   E6:44:69:2B:80:4D:D9:D0:DF:98:81:68:59:58:EC:6E:B6:B2:19:AE
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer:       /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number:          06D3
Signing time:             Sat 03 Oct 2026 00:24:09 +0000
Manifest this update:     Sat 03 Oct 2026 00:24:09 +0000
Manifest next update:     Sat 10 Oct 2026 00:24:09 +0000
Files and hashes:         1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: wAyx7wmlobrHVIZyGZRB+CgffngyvOfB3YcBH3cU6A4=)
                          2: 348A7E8690AE11F1A9F7D8703611F970.roa (hash: SM8gd79n20Bgv9bHyLljmDvrIm8wytlAyX4taX/2YKI=)
                          3: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: 228d9Yp5Ujtrc1y20mhpEdshI3yQHTWHhGD/doCyGs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
        Validity
            Not Before: Oct  3 00:24:09 2026 GMT
            Not After : Oct 10 00:24:09 2026 GMT
        Subject: CN=6ac04b29-5427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:cb:ea:7f:4d:48:20:b2:3a:2a:92:e3:bc:
                    8a:a7:97:41:1a:61:74:fc:3f:05:50:99:e7:b0:36:
                    cb:cb:d7:4d:ec:62:ca:d1:d6:ed:17:6e:d6:5b:29:
                    ef:15:12:f9:42:7d:bf:34:2e:53:f5:a3:dd:9f:c5:
                    f0:56:7b:ac:6f:6b:c7:e7:7d:b9:f6:8b:4d:a2:00:
                    cd:79:b1:84:59:9c:79:f9:03:12:39:27:39:aa:f6:
                    45:0b:dd:69:96:c4:ea:07:9f:cd:fa:89:d9:05:2d:
                    3e:06:fa:67:99:24:63:40:d2:93:03:29:00:f7:6b:
                    c2:ca:a4:da:e9:88:8e:c0:9a:82:ae:eb:03:d8:b2:
                    cd:78:e3:84:ec:2e:a3:b2:f5:15:cc:5c:1c:fa:20:
                    8d:a4:1d:95:d3:d7:21:49:92:34:c0:8a:25:9a:c2:
                    17:99:8f:70:58:8b:af:7f:5c:9a:f5:c1:5e:c5:bc:
                    60:f4:b5:42:e4:e7:8f:96:d0:85:58:75:86:be:ad:
                    9c:91:4b:54:1a:7b:b9:d3:43:ff:9c:25:ab:78:14:
                    81:4e:6d:c4:fd:a6:68:04:61:eb:0b:0c:8e:be:e0:
                    b1:96:4c:b9:60:c3:5f:55:41:bb:64:f8:d2:fd:fb:
                    88:2a:95:41:20:c1:b3:2d:9f:27:cb:4d:a6:9a:18:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:69:2B:80:4D:D9:D0:DF:98:81:68:59:58:EC:6E:B6:B2:19:AE
            X509v3 Authority Key Identifier:
                keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:78:39:cc:46:fc:91:07:1b:bb:2f:dc:b8:b0:bb:3a:17:2b:
         2a:e8:01:e7:31:76:bd:de:0e:9b:f7:4c:cb:53:16:4a:3a:01:
         c1:0b:08:95:71:4d:5f:ed:4a:f9:56:b2:dc:88:95:19:e8:dc:
         ff:2a:8f:c8:2a:1d:f7:b6:2c:fa:89:5e:c6:8e:e9:fd:d1:c6:
         6d:dc:24:48:cb:e9:88:fe:57:48:75:f2:9f:fe:47:52:90:6d:
         8e:96:7c:85:2e:19:e1:19:b7:e9:8a:d9:5e:2d:98:f7:6f:76:
         99:46:e2:51:8d:cc:b3:ca:24:2f:23:4f:c3:6e:f7:37:0a:6c:
         86:a8:ba:5d:c6:e9:5b:d0:6b:d1:02:ca:c6:89:79:c5:85:e7:
         f9:ea:ef:a9:b0:c8:cf:68:46:63:fc:7e:3b:84:ad:13:0e:db:
         4b:3a:3f:d9:e9:12:7a:bf:7f:81:a4:4c:37:d7:85:4e:18:81:
         4b:50:7b:5d:5f:49:4b:04:f8:92:17:58:21:d4:b3:2b:22:84:
         0c:24:c7:1f:17:ba:47:9b:cf:4c:2b:ba:5e:73:ac:77:36:04:
         f7:3d:0f:af:db:ff:94:56:b1:55:81:52:a7:37:eb:98:9e:66:
         3f:36:bb:d7:8f:c5:e7:fc:4b:b8:17:15:e8:f6:d0:62:b0:06:
         92:1b:24:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:24 2026 by rpki-client