Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
File:                     YCjnBlIGqeRf_UskpX7owzQMVzY.mft (raw, json)
Hash identifier:          8UStbsFrYTKfxtvlkvBs2LglWNaDbj8wz28V5/nMhkA=
Subject key identifier:   D2:66:4A:4D:75:56:F6:08:77:98:AA:EE:13:A4:B8:27:42:9D:12:D3
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Certificate issuer:       /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
Manifest number:          059C
Signing time:             Sun 06 Sep 2026 22:58:15 +0000
Manifest this update:     Sun 06 Sep 2026 22:58:14 +0000
Manifest next update:     Sun 13 Sep 2026 22:58:14 +0000
Files and hashes:         1: YCjnBlIGqeRf_UskpX7owzQMVzY.crl (hash: DwpYxrN5b/FrmRSyz8lBMeMrG5YIMSmrtLSXt3xiGlw=)
                          2: 22B4A5FE9F3111EE83D9FA58C4F9AE02.roa (hash: 79TNb9upWSGm9yBDGngscbHy7jvkh/bVgSJa7W+FYrI=)
                          3: 274A12F696FD11EF88F06237C4F9AE02.roa (hash: MCVYIDVOykTmNbo90DABkV8onNjQjPmA4NHqWOQwZM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
                          rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Sep 2026 22:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149FAB, serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
        Validity
            Not Before: Sep  6 22:58:14 2026 GMT
            Not After : Sep 13 22:58:14 2026 GMT
        Subject: CN=6a9df006-0a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:df:73:59:7e:93:56:80:d9:75:ad:48:8f:
                    1b:a8:dd:8b:5d:2d:ca:e1:35:2a:6a:bf:bf:99:dc:
                    6d:e8:6b:8b:d9:2f:cd:c7:4a:f9:9c:50:f2:67:ff:
                    58:30:7f:72:f3:cb:cf:87:36:1e:e8:f4:07:71:37:
                    d7:a1:19:e4:c6:9b:8b:ed:5e:06:3c:a5:ee:e2:ee:
                    8c:31:1b:cd:87:1e:4f:b1:c9:d7:9a:a8:78:ab:e8:
                    ff:b2:84:2e:4b:9c:85:fa:99:b3:7f:ce:57:3d:3d:
                    85:2b:3c:61:18:98:e4:31:e5:49:1e:5b:3c:56:00:
                    f7:bf:65:c0:a7:b8:73:43:61:45:1c:f8:81:ce:1a:
                    60:36:c4:3d:48:ce:34:1a:8c:65:e2:0a:66:46:26:
                    73:cf:5a:84:62:82:06:3c:f4:8b:b1:c1:c3:0d:d6:
                    78:c2:80:69:81:23:7c:88:95:0d:e3:5d:ad:59:12:
                    aa:2e:70:0e:6f:78:e6:ed:74:6f:a2:53:0d:9d:b2:
                    ba:20:3f:27:ee:b2:6e:6c:8d:81:47:2a:4b:b7:0b:
                    2b:b5:b9:63:bc:3b:3e:7a:48:b4:b5:a5:5e:af:af:
                    71:7b:18:0b:c0:1e:7b:3c:b3:a2:83:86:17:89:5c:
                    a5:81:d1:50:2d:ff:b5:68:28:36:aa:eb:4a:60:d4:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:4A:4D:75:56:F6:08:77:98:AA:EE:13:A4:B8:27:42:9D:12:D3
            X509v3 Authority Key Identifier:
                keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:52:9f:c4:5b:31:90:fb:d8:16:79:c7:02:ab:8e:9b:06:60:
         05:f8:e5:4f:6d:96:76:6f:ba:b5:df:5d:4a:7b:18:95:06:96:
         02:02:d4:2b:1f:04:9f:c0:98:37:b4:c3:3e:7a:06:94:79:8c:
         d9:81:4a:7d:c5:14:f3:1d:03:db:ac:46:f2:e4:8f:af:cd:92:
         40:00:7c:bb:61:b2:0a:99:4d:52:84:c9:ab:f6:37:7f:69:64:
         3b:45:7a:ec:4a:84:27:5b:a7:62:c4:85:0f:d7:8b:69:7b:aa:
         41:02:1f:11:cb:9a:9c:70:02:b4:75:ca:33:1d:be:c8:c1:71:
         54:4c:99:65:94:13:b0:46:1a:74:8a:ab:1d:79:ea:b8:3c:fe:
         0a:a9:98:19:8e:e8:40:a4:e1:4c:95:98:ad:6c:3a:fb:28:af:
         f8:5a:b2:fe:46:a8:35:c4:f9:06:7e:71:1b:f9:16:f6:24:eb:
         7c:b6:2e:95:65:a7:6c:b1:9b:49:63:a2:f6:35:80:34:25:5d:
         35:22:c8:aa:92:14:ce:b0:6a:44:77:2f:05:38:94:d8:ec:d6:
         2e:f3:e9:aa:ea:bf:35:fb:46:7a:6a:28:db:5a:56:42:a8:d9:
         3b:19:2b:9f:8a:5d:62:51:bd:10:7d:54:d5:c9:c7:51:0d:c5:
         6a:0a:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:12:06 2026 by rpki-client