Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File:                     YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier:          VvpM901UWXb8HkzJb2iD+dko5WJ9QS2iuy1FG8OW4o4=
Subject key identifier:   11:C1:31:B5:E7:00:79:DB:B3:43:04:0D:79:FA:32:D5:49:9F:2E:6C
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number:          1C61
Signing time:             Tue 06 Oct 2026 16:13:40 +0000
Manifest this update:     Tue 06 Oct 2026 16:13:40 +0000
Manifest next update:     Tue 13 Oct 2026 16:13:40 +0000
Files and hashes:         1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: 3jq/pe0cgwXK3YCpG/95cXHvIs/pAOxUpQNryBpINSs=)
                          2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: L7DWBL32H6f/RwujbTDFVJWqhVPyJvTq/sa1OY01Oko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7291 (0x1c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: Oct  6 16:13:40 2026 GMT
            Not After : Oct 13 16:13:40 2026 GMT
        Subject: CN=6ac51e34-29b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:13:ff:4e:8a:5e:bb:97:4a:39:b3:55:b9:
                    d6:df:66:b7:f6:fe:bd:45:37:50:d4:d2:3e:1e:c5:
                    00:b3:25:cf:86:a4:11:b2:60:e3:59:68:02:38:49:
                    84:18:c6:82:53:c7:12:4d:af:d2:20:7b:01:0f:48:
                    53:13:73:15:83:06:ee:69:3f:b3:19:db:21:40:82:
                    f1:3f:5f:a4:4b:9b:06:cd:63:bb:da:f1:8d:4c:70:
                    c6:4d:f7:48:03:f3:38:01:d4:45:9d:ec:2c:7a:79:
                    80:a3:e4:7e:17:6e:0d:c9:ef:9e:0d:43:5e:29:45:
                    6a:73:a8:01:7f:5b:c7:a7:1f:06:65:57:1a:7b:42:
                    b1:2d:50:65:d3:59:12:f2:e8:9e:2e:11:e1:af:03:
                    30:1d:a2:a2:b7:7a:46:b6:76:68:9f:67:05:45:c4:
                    27:08:f5:cc:59:81:6c:f0:6f:0d:26:62:41:69:dd:
                    7d:61:70:8b:ed:e4:0d:7e:0c:86:5a:34:f4:1e:39:
                    26:a4:f4:3d:75:aa:66:40:4e:ac:64:e3:f1:33:5b:
                    8f:b6:bd:f2:4f:bf:dc:c2:20:57:aa:43:78:3d:47:
                    88:c6:3c:cf:21:ac:70:f7:5b:59:57:9d:db:3a:b9:
                    b7:d5:18:2f:57:51:4d:80:62:1b:7f:52:74:f1:ca:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:31:B5:E7:00:79:DB:B3:43:04:0D:79:FA:32:D5:49:9F:2E:6C
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:76:4f:56:ad:3c:89:49:9d:cf:4e:53:85:01:67:27:43:3e:
         8a:25:ec:02:42:6a:ea:6d:91:21:a8:2f:4f:3d:8f:16:c1:55:
         c2:38:16:79:27:e0:fb:2b:b4:f6:df:f1:f4:15:38:23:c9:de:
         c6:5b:10:39:8e:35:fd:0a:f6:cc:04:d7:2d:52:cb:f8:2f:83:
         b5:7e:d3:8f:84:99:eb:82:fc:c8:52:26:45:7e:3d:56:e7:8d:
         e4:4a:6a:11:f2:d5:00:a1:dd:35:6a:9c:a6:36:d3:f7:04:72:
         3d:2d:1e:4a:25:3e:f7:4c:2a:00:1a:ea:4d:f4:e9:ae:ed:3e:
         86:28:c8:e8:8d:af:d4:57:b8:33:15:35:35:81:8e:13:1e:1e:
         70:db:6b:0d:dd:95:78:b9:0e:02:07:e5:c5:37:01:98:e6:99:
         80:32:ad:b5:a4:7d:e7:81:45:a3:bc:f5:4b:0d:d4:1f:2f:a3:
         01:3b:e7:7e:41:84:b3:da:76:64:d6:55:d7:ea:00:2d:7c:80:
         4a:fd:35:fb:2c:31:bf:9b:0a:a6:1d:29:0d:6d:d0:6d:a6:db:
         7c:b1:b7:76:56:e6:ad:8a:b7:9e:76:81:71:5c:53:0d:f1:2a:
         21:f9:d4:ec:b3:4b:5d:d9:4b:6e:77:e5:32:e8:28:e2:db:7f:
         ce:be:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:57:44 2026 by rpki-client