Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
File:                     YfRdxU9H4lL6xlUt27OWWFTGyAE.mft (raw, json)
Hash identifier:          czgXv7sSMsqN9fLXNuHUQ7sbyX27GYiw7GAbyPijMI4=
Subject key identifier:   D5:62:D7:93:62:61:AF:5F:5C:FB:D7:B2:30:6E:C3:37:64:A8:E6:7F
Authority key identifier: 61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01
Certificate issuer:       /CN=A9162CCE/serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
Certificate serial:       06D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
Manifest number:          06CB
Signing time:             Tue 18 Aug 2026 22:40:56 +0000
Manifest this update:     Tue 18 Aug 2026 22:40:55 +0000
Manifest next update:     Tue 25 Aug 2026 22:40:55 +0000
Files and hashes:         1: YfRdxU9H4lL6xlUt27OWWFTGyAE.crl (hash: KmFGpuZFLef1n2N3YlpwM21yLX7+6salL7TwLV/59S4=)
                          2: D47858660E3411F1BB26575989EE528E.roa (hash: bWG4L4zm+kd/J5fsUxpfwPdRmncGUB5tai55L7Yj/oA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl
                          rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1751 (0x6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162CCE, serialNumber=61F45DC54F47E252FAC6552DDBB3965854C6C801
        Validity
            Not Before: Aug 18 22:40:55 2026 GMT
            Not After : Aug 25 22:40:55 2026 GMT
        Subject: CN=6a84df78-35f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d6:05:24:9a:4c:19:1d:29:7e:45:68:9a:11:
                    27:dd:e7:7a:2e:8d:23:67:e8:15:82:85:ef:5e:a8:
                    89:b1:3b:db:83:84:3b:59:08:72:82:58:c9:80:38:
                    71:16:19:8d:cc:cc:15:d8:32:92:fd:51:49:df:9b:
                    8e:cd:03:d0:b7:78:a3:9e:7d:1e:89:8d:fc:aa:21:
                    54:89:20:c0:82:e0:13:8e:b3:ec:ac:85:ac:7e:32:
                    7f:ae:d8:6f:dc:27:ff:a7:b8:45:b3:cb:47:6a:d0:
                    11:a1:96:9b:1a:96:ce:9b:1c:d9:07:3a:9f:40:fb:
                    21:47:61:46:77:ff:7c:58:f6:f9:89:1b:38:c8:b9:
                    cd:b8:33:c7:ea:5d:72:1b:60:ec:95:a1:05:08:b6:
                    62:78:be:74:f4:50:9e:fb:3d:95:1c:e9:45:86:a8:
                    70:cf:d9:42:df:3b:0d:4d:76:b1:08:72:7d:42:8e:
                    04:eb:e3:a8:b5:58:7f:53:87:fb:60:90:79:46:ed:
                    8f:85:9f:02:b0:67:78:b8:da:05:5e:0e:c0:99:17:
                    38:71:a2:e1:e6:28:f8:ad:d4:75:a5:fb:4a:00:cb:
                    cf:f1:25:28:ed:d8:0b:5a:b8:89:1e:26:c6:63:d4:
                    3e:d0:55:92:97:db:fc:82:f2:25:5d:6d:14:51:6b:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:62:D7:93:62:61:AF:5F:5C:FB:D7:B2:30:6E:C3:37:64:A8:E6:7F
            X509v3 Authority Key Identifier:
                keyid:61:F4:5D:C5:4F:47:E2:52:FA:C6:55:2D:DB:B3:96:58:54:C6:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YfRdxU9H4lL6xlUt27OWWFTGyAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162CCE/B755DA28B99411EB93F8265DC4F9AE02/YfRdxU9H4lL6xlUt27OWWFTGyAE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8a:e5:bc:da:7e:c4:4c:77:d0:c3:a2:c0:96:3b:ab:7b:44:
         fd:32:85:e9:69:c2:fe:24:59:64:93:f9:e1:b8:12:1b:59:9f:
         ab:c5:13:64:38:eb:66:71:72:87:7a:3b:f6:c3:54:51:c9:3a:
         02:76:5f:a6:57:b9:28:7f:dd:dc:88:af:b0:19:a1:09:f0:b1:
         3b:e2:4b:53:e8:99:35:34:bc:28:cd:74:5d:d9:99:bc:04:33:
         33:72:7d:a0:bd:a4:b4:d4:96:89:d7:0b:cb:85:6c:c7:a1:ca:
         25:1b:bd:ff:f6:83:c3:e1:65:60:f1:aa:8b:c7:2b:f2:90:2d:
         62:be:b6:e0:55:03:da:24:f4:57:16:14:26:8a:c5:39:21:ec:
         45:b2:72:94:65:69:e8:5b:73:71:7e:75:ad:08:1d:31:97:23:
         00:95:36:6d:9c:20:69:12:7c:23:31:9e:45:08:37:3c:3f:5a:
         3c:8e:b6:c3:5e:ec:2a:cf:1a:b0:e6:f3:5a:f6:33:19:98:19:
         d3:69:f8:84:3d:3c:51:69:af:2e:9d:9c:80:42:77:b7:4a:6c:
         c7:a0:9f:f3:bb:92:7f:21:1d:2b:54:77:a9:b7:b2:4a:50:ad:
         a7:3a:f3:b8:6c:d3:6b:92:56:fd:aa:83:50:f9:0a:f2:06:89:
         95:79:43:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:20 2026 by rpki-client