Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
File:                     YQihMheWwWwmFLdc14tfV5DNrQE.mft (raw, json)
Hash identifier:          LflZOsafms/bh/vPDl487LzgSgG0gH+9AYZ6oP72D8w=
Subject key identifier:   B4:3C:BD:A4:7D:1A:4F:19:94:E4:34:B8:38:A0:17:F7:AA:DC:27:EB
Authority key identifier: 61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01
Certificate issuer:       /CN=A914ACC8/serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
Manifest number:          48
Signing time:             Mon 05 Oct 2026 08:51:33 +0000
Manifest this update:     Mon 05 Oct 2026 08:51:32 +0000
Manifest next update:     Mon 12 Oct 2026 08:51:32 +0000
Files and hashes:         1: YQihMheWwWwmFLdc14tfV5DNrQE.crl (hash: hg88hD80wwl1byEAq6YORMK9vjtR7lD+5zF79gDY5qo=)
                          2: D5B3126E534B11F1B99ADA8D94833773.roa (hash: sXd+41/gn4hIOq0ToYPsxHfLlqQrww+estsIf7WIWOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl
                          rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ACC8, serialNumber=6108A1321796C16C2614B75CD78B5F5790CDAD01
        Validity
            Not Before: Oct  5 08:51:32 2026 GMT
            Not After : Oct 12 08:51:32 2026 GMT
        Subject: CN=6ac36515-3b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:fc:c7:25:e0:65:0e:fe:a6:9d:fc:52:4c:
                    f4:8e:b0:86:52:35:a6:1d:dc:63:cf:c4:6f:d9:26:
                    a4:a1:41:6e:60:f0:85:fc:aa:59:cd:e0:2b:f2:79:
                    c5:7b:09:94:d3:4a:f9:a7:6d:2a:a3:83:44:c5:9f:
                    be:66:56:9c:ff:6c:fd:5e:1e:15:f7:ab:99:07:c2:
                    f5:a6:30:5c:fa:93:38:3e:4b:7f:58:86:bf:5d:6e:
                    72:04:c8:6b:82:73:85:c2:1c:da:4a:e2:ac:64:b7:
                    26:a3:0f:9f:72:88:e5:a9:ef:87:70:2b:01:90:16:
                    a7:49:a8:66:f9:90:92:65:91:7d:28:de:eb:84:86:
                    47:f0:01:66:f7:4a:4b:02:0d:8f:12:e7:45:11:6d:
                    f1:71:8e:9e:4f:e7:5e:8a:a5:02:8d:fd:6d:55:cf:
                    28:07:11:57:1c:ae:ae:58:6f:67:33:b4:e7:9a:11:
                    9c:75:d5:e5:98:05:ab:f3:10:d0:fd:16:ad:be:91:
                    80:d9:e2:cc:ba:d4:9d:0a:c9:fb:19:73:1b:d8:25:
                    9a:3d:a5:2d:5c:0e:ca:0f:9e:2b:13:a1:11:54:a7:
                    28:0a:a1:7e:7f:a7:89:8f:c5:e0:1c:33:6b:35:f5:
                    54:5a:c7:cc:4e:de:22:44:37:05:b5:b0:7d:0f:24:
                    3f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:BD:A4:7D:1A:4F:19:94:E4:34:B8:38:A0:17:F7:AA:DC:27:EB
            X509v3 Authority Key Identifier:
                keyid:61:08:A1:32:17:96:C1:6C:26:14:B7:5C:D7:8B:5F:57:90:CD:AD:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQihMheWwWwmFLdc14tfV5DNrQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ACC8/A248FFC6534911F191C1D18592833773/YQihMheWwWwmFLdc14tfV5DNrQE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:bc:3f:b9:81:c0:d5:e3:52:23:5d:cf:51:8d:2e:e1:a2:
         35:73:be:4a:39:b2:58:f3:b8:1f:64:00:1b:ec:73:12:6b:57:
         b9:cc:a8:95:34:3b:8d:39:62:2a:e9:16:fe:b5:a8:a1:04:f3:
         11:98:40:e1:de:6e:59:54:59:c9:12:0f:95:5a:94:c6:94:22:
         f3:d4:53:25:66:bc:68:9d:f2:94:ef:8b:bd:08:be:62:26:0d:
         05:04:88:59:2c:a4:1a:55:72:a8:e3:ad:7b:96:f8:00:75:6e:
         aa:61:29:3a:fc:a2:52:35:58:14:37:67:17:cb:db:0f:4e:83:
         8c:27:0c:61:96:12:8f:34:8d:22:6a:db:d5:f5:71:9d:34:00:
         81:3e:8e:19:1b:d7:3f:c0:03:0d:af:df:99:a8:a1:ec:23:c4:
         fc:05:58:39:1b:cc:17:87:f0:7a:f0:4a:d6:f1:bb:37:8f:d3:
         80:4a:d3:9e:27:10:c1:3e:96:52:0b:d2:c7:15:98:b1:e3:06:
         6c:36:69:06:9e:cd:9b:a8:46:33:e9:8d:d5:c2:c6:11:05:21:
         a5:63:82:4f:3e:9a:a9:03:d4:7d:5c:69:6a:99:ad:9d:36:c5:
         87:8d:72:5f:ae:49:64:6e:d7:c7:30:0a:17:07:34:6e:ef:dc:
         26:c4:21:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:41:33 2026 by rpki-client