Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File:                     YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier:          MfAdzw4RmNMtv/U40nMEEO/G/qtftbUxuWgZJXQMuZg=
Subject key identifier:   A6:FA:D5:17:A3:22:47:B7:7B:31:2E:47:D1:D6:FA:CB:98:27:2D:77
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer:       /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number:          F3
Signing time:             Mon 05 Oct 2026 06:46:11 +0000
Manifest this update:     Mon 05 Oct 2026 06:46:10 +0000
Manifest next update:     Mon 12 Oct 2026 06:46:10 +0000
Files and hashes:         1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: hYoLJqc2DLDqGfi8tYV4NzJECZqJSIDBcRVZHOl/0Yo=)
                          2: 05939A1C554611F09F737331C4F9AE02.roa (hash: gUXNFVaxSQufYdqyGN4kaVGgCYgVtungC4DrMnEIpG0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
                          rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
        Validity
            Not Before: Oct  5 06:46:10 2026 GMT
            Not After : Oct 12 06:46:10 2026 GMT
        Subject: CN=6ac347b3-bc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:0f:05:b3:3a:ed:06:bd:4e:b6:31:9d:d5:
                    0f:ec:79:c4:43:b3:e6:db:8d:58:0c:5f:37:40:e9:
                    25:20:34:1d:49:78:6a:06:78:39:47:99:02:08:59:
                    ce:84:2e:d9:80:bc:be:8c:88:cc:e2:7a:ad:e0:ff:
                    4d:92:2b:3b:ec:94:f6:aa:b2:fc:a8:65:4d:8f:56:
                    c3:08:9c:e3:a6:8e:d9:28:88:04:68:9f:0c:1e:1d:
                    0d:4d:37:72:9b:45:dc:17:52:59:7d:60:18:cc:a6:
                    a0:82:9b:fd:16:67:c1:a1:12:c6:57:75:70:9d:c1:
                    0f:ef:0c:6c:3c:89:b8:9d:c8:92:c6:00:a8:9b:0b:
                    0c:5a:26:b9:15:38:df:4d:f6:a7:18:88:98:f5:a8:
                    fe:2b:19:ec:0a:a7:a7:5c:c2:62:c2:ec:85:bc:08:
                    6d:10:5a:87:03:1d:55:e2:64:c7:f8:ba:6d:0d:e6:
                    f2:3f:9e:0c:29:a7:58:31:c8:9b:5e:86:70:ed:28:
                    0c:37:4b:78:82:cf:91:c5:8c:71:a7:d1:88:bc:6d:
                    70:7b:13:d8:e2:96:a5:3f:5f:e5:02:d8:7b:0a:cd:
                    44:06:f4:af:aa:05:b3:b8:bd:36:9a:db:cf:b2:3d:
                    6d:c7:ec:62:13:cf:42:c2:74:aa:7d:6d:30:da:e8:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FA:D5:17:A3:22:47:B7:7B:31:2E:47:D1:D6:FA:CB:98:27:2D:77
            X509v3 Authority Key Identifier:
                keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a9:ad:39:1a:58:5b:fc:87:75:fe:d0:7b:75:c6:04:99:3a:
         d8:aa:2e:a8:3f:e8:65:a7:80:b2:ee:bd:2f:f8:13:72:40:a0:
         dc:db:7c:3b:9c:a6:8f:ab:9c:a5:e6:cd:3e:19:f6:5f:62:ba:
         8a:fd:e9:d9:99:5b:75:ee:2a:55:85:74:67:ad:87:f9:dd:95:
         31:e0:a1:5e:46:36:44:f9:e2:dd:0e:10:24:8c:8b:7a:9d:69:
         b6:6b:46:fd:91:e1:fa:05:aa:94:d9:69:cf:33:d1:4f:39:d5:
         7d:f6:a6:15:95:0a:4e:f3:19:f0:86:43:de:44:f5:c9:ce:58:
         08:2b:a5:c9:be:86:a0:c9:92:0a:0e:fd:4c:7e:16:9b:78:0e:
         e9:a8:15:c3:f6:9d:4b:24:8f:0d:59:3d:19:8e:a5:07:61:ab:
         a7:fb:83:98:1e:20:81:21:5a:3f:ed:a8:f0:27:35:98:73:68:
         a6:5c:ac:79:69:23:9e:df:ea:79:87:de:04:f0:fc:55:1f:87:
         0b:2d:4b:56:0c:77:91:0d:e0:a6:e6:71:2c:66:ab:1e:25:98:
         e0:af:47:3f:3d:49:df:ca:73:f8:b8:f6:c8:37:4e:ff:71:20:
         67:77:f2:4d:ef:0e:38:f0:1f:e4:c4:ba:c3:12:0f:80:42:69:
         0a:64:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:40:33 2026 by rpki-client