Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File:                     yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier:          QQ85EsM/9nMcXAJgWXW7cW7V+/WPyXrRGGNMn597sp8=
Subject key identifier:   26:C9:40:BF:D6:52:4F:0D:2B:53:C7:38:2D:55:54:4A:1D:16:48:5D
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer:       /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number:          0223
Signing time:             Mon 05 Oct 2026 03:08:32 +0000
Manifest this update:     Mon 05 Oct 2026 03:08:31 +0000
Manifest next update:     Mon 12 Oct 2026 03:08:31 +0000
Files and hashes:         1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: wJ6BEkgNZ3vEN4LI9jk3Jecl37XzDN75xQGIvxpe/Vk=)
                          2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: Bt9+mlwqAKzVL7tvX3gE+a0ovQgB4wNFaWaiaFG93oE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
                          rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
        Validity
            Not Before: Oct  5 03:08:31 2026 GMT
            Not After : Oct 12 03:08:31 2026 GMT
        Subject: CN=6ac314b0-cad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:01:19:8b:2c:ef:77:7e:0b:51:8f:93:28:
                    dd:f3:53:d0:c2:d6:11:c3:d8:64:97:d6:f5:64:5c:
                    9b:c0:62:65:1a:1d:0e:1e:3d:dc:1d:63:27:88:32:
                    72:e2:ee:e4:5d:37:5b:7d:fd:21:c7:60:8a:26:22:
                    36:1d:53:36:9d:9b:63:06:e9:93:51:69:7f:3b:8e:
                    2d:11:ca:08:e9:fa:6d:31:5c:cb:3d:8b:a9:0f:5d:
                    62:73:61:ea:23:e3:c9:0f:c7:23:62:90:04:f9:d2:
                    ff:82:86:f1:ac:91:f7:ef:c9:09:3f:86:27:67:77:
                    56:75:07:f1:fb:d1:d8:52:2c:56:31:5b:cc:1a:2e:
                    53:ca:c8:70:e6:79:c8:fb:40:53:41:15:f6:37:c3:
                    f2:b3:12:30:7d:4a:28:cb:58:10:62:78:b5:65:0e:
                    8a:a3:45:dd:00:8a:53:41:83:57:0b:32:90:61:0b:
                    d6:91:1d:c4:b8:a6:14:0f:4d:01:f8:93:d3:f1:ec:
                    77:2d:e6:ce:73:e0:01:ab:4c:a1:ce:37:d8:8c:8f:
                    3e:89:cc:ef:57:d4:a6:cf:2e:5a:0e:91:90:bf:5f:
                    c1:d0:c9:87:66:a8:2a:ed:e6:0f:f6:aa:4a:4b:35:
                    e3:64:d3:50:bc:bb:46:d6:66:b4:69:d0:7d:a2:b5:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C9:40:BF:D6:52:4F:0D:2B:53:C7:38:2D:55:54:4A:1D:16:48:5D
            X509v3 Authority Key Identifier:
                keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:a8:87:05:3a:c0:30:c8:0e:1d:3d:27:a5:c2:76:42:63:
         f1:a0:b4:e5:84:54:1b:d5:38:9e:30:b5:ad:15:dd:48:16:cd:
         8f:a0:30:7d:c0:da:63:4b:49:85:b7:49:e5:c4:03:b3:0f:99:
         52:6d:df:e4:f7:62:55:bf:1d:f1:ed:17:fa:f9:05:7d:a7:90:
         32:a6:b8:bf:46:94:ce:1b:68:7c:47:1d:86:76:48:30:3b:12:
         dd:fc:9b:89:97:84:76:7b:10:59:17:02:19:7a:7c:36:1f:9f:
         1c:11:2a:4b:72:31:91:bc:5c:45:85:3e:4d:13:46:c2:e6:dc:
         62:3a:8c:47:c5:dc:5f:06:41:54:87:f9:7a:d7:9b:66:79:82:
         0e:3c:b3:37:ea:fc:ff:b7:c4:54:88:f3:b2:cc:ff:e6:62:d8:
         0a:97:aa:85:1e:be:29:62:26:5d:d6:24:ef:55:ed:00:e8:ef:
         95:79:c6:2e:13:5d:d5:1e:6b:d2:3f:b7:af:99:45:12:57:4a:
         f3:e0:1c:cf:2e:26:b3:4f:d2:95:bb:5e:bd:50:4c:08:d1:c8:
         16:14:a0:e9:3d:c0:2e:45:f1:cc:78:70:e5:4a:82:d1:4a:e2:
         b3:b0:1f:6b:2d:1e:5b:38:82:b0:5f:07:96:aa:33:09:49:8c:
         70:5c:31:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:31:57 2026 by rpki-client