Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File:                     YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier:          8TK+rYdHq87mAUh/eXukPdZXx68Iky/fNKZ4bwBXZzE=
Subject key identifier:   93:2F:4E:31:F1:19:9B:B1:5D:48:1D:E8:10:B3:4D:01:6E:C2:26:84
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number:          0150
Signing time:             Mon 31 Aug 2026 05:58:37 +0000
Manifest this update:     Mon 31 Aug 2026 05:58:36 +0000
Manifest next update:     Mon 07 Sep 2026 05:58:36 +0000
Files and hashes:         1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: nvMZzFRgPyZfKjyAC6bK5yHajXSKlXrOyMhdiX/I0Eo=)
                          2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 05:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: Aug 31 05:58:36 2026 GMT
            Not After : Sep  7 05:58:36 2026 GMT
        Subject: CN=6a95180d-27ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:90:56:2b:b0:61:fa:78:ba:be:fe:51:a3:
                    7a:0b:80:70:4a:92:35:3d:51:3d:65:63:0f:66:d3:
                    37:92:59:9d:4f:38:fe:3f:9a:e2:b6:8d:c0:f8:fc:
                    4f:2f:3c:05:50:fa:1b:3b:e4:c4:0d:4a:8b:1e:85:
                    62:6e:fb:22:10:d5:8d:07:7b:4e:07:a7:25:35:a6:
                    29:9e:ef:e4:a2:30:dc:27:28:ce:29:8e:5a:00:0a:
                    3d:63:0b:48:45:ed:05:1b:47:72:eb:22:37:9d:2b:
                    69:45:63:0d:27:20:d3:2a:e4:f5:fe:20:17:fa:dc:
                    e8:db:37:27:fe:13:fb:5f:c3:06:94:d8:c3:27:02:
                    32:0e:ac:50:d8:6e:84:f6:29:e8:e2:57:3f:14:30:
                    e3:f1:b5:23:d1:2b:a6:ca:83:4b:48:6b:2f:f3:16:
                    19:67:1c:22:4f:b4:06:af:20:8a:0f:57:c8:04:ad:
                    34:e0:ea:b6:97:d8:05:d3:4b:06:1e:cf:5c:28:b6:
                    78:ea:b6:8e:6b:8c:9d:57:6c:bb:71:1e:1c:68:12:
                    52:79:74:1b:36:db:5e:e9:b3:fb:f6:01:13:47:1e:
                    4c:31:2c:74:e7:32:40:40:41:a5:c9:e7:3e:0b:1b:
                    ac:4f:e3:f5:ab:cc:1f:6c:6b:51:67:71:a9:7f:53:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2F:4E:31:F1:19:9B:B1:5D:48:1D:E8:10:B3:4D:01:6E:C2:26:84
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ed:b8:24:eb:39:77:d7:8b:aa:ff:cd:66:dc:9f:8d:8c:dc:
         96:57:5d:5a:c3:3d:e5:ba:05:5a:8c:79:cc:8c:94:52:7a:d3:
         ea:a7:36:61:56:20:98:90:2d:49:da:87:35:88:06:15:31:7b:
         fc:b5:bf:0f:8c:28:08:c3:9d:fb:2f:30:f0:46:51:e6:bc:08:
         fc:2e:eb:c0:a6:27:b3:68:43:05:9e:f3:23:f1:e9:05:20:da:
         18:88:0b:37:fb:32:28:14:64:4c:3b:8c:af:fb:a0:84:f1:d8:
         ad:f1:b0:ed:26:40:16:42:45:f1:56:20:b8:4d:29:da:f7:73:
         20:5e:6e:bb:4f:ec:73:11:65:b3:c3:d8:1a:9b:ea:b9:65:03:
         fb:60:42:40:05:b2:92:ea:2b:3d:7f:4f:e6:2a:9c:77:db:37:
         8c:25:39:8d:08:1d:9a:45:8c:94:a5:0e:ef:70:3a:38:38:c4:
         29:b9:b3:3e:a2:44:8f:ab:91:22:25:f8:d0:1e:14:ea:74:cf:
         2d:4b:4d:30:36:ce:20:85:fc:78:60:18:9d:04:73:f5:f6:f5:
         bc:55:a4:f9:08:86:d7:3e:56:60:d1:7e:3a:c3:44:f9:d6:f6:
         c1:19:d3:a5:20:10:8f:bb:82:ff:48:e1:0a:ca:d0:8a:2a:02:
         1a:18:cf:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:42:03 2026 by rpki-client