Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
File:                     y1LRcue7pSl4xAN0AnpNpseRZ9g.mft (raw, json)
Hash identifier:          5KFSK9Ai8oywbh2hg2epKslVYO4+wejisThzElPGDHs=
Subject key identifier:   22:9D:49:0E:C9:3F:CF:25:80:18:9D:9C:A6:33:F9:24:70:86:62:A2
Authority key identifier: CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8
Certificate issuer:       /CN=A9199606/serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
Manifest number:          8E
Signing time:             Wed 07 Oct 2026 08:01:37 +0000
Manifest this update:     Wed 07 Oct 2026 08:01:37 +0000
Manifest next update:     Wed 14 Oct 2026 08:01:37 +0000
Files and hashes:         1: y1LRcue7pSl4xAN0AnpNpseRZ9g.crl (hash: iZRmnoTJSby5e1gVvM4iN4y/1aykaXp6/JbbnIguCtk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl
                          rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199606, serialNumber=CB52D172E7BBA52978C40374027A4DA6C79167D8
        Validity
            Not Before: Oct  7 08:01:37 2026 GMT
            Not After : Oct 14 08:01:37 2026 GMT
        Subject: CN=6ac5fc61-ca25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:a6:05:f1:3f:4e:3d:20:1b:27:16:13:66:
                    8e:6c:eb:bf:29:f6:5c:1d:a1:57:70:d7:6c:c9:df:
                    29:04:a6:b2:cd:79:da:dd:55:6b:f8:70:66:20:c0:
                    90:4b:0a:72:1d:fc:90:85:71:b2:c4:93:f6:c4:c3:
                    ca:90:d8:42:b3:20:7b:21:17:c2:38:60:4e:a7:3a:
                    39:05:28:87:99:61:33:94:8a:a8:03:44:b2:03:e6:
                    43:ca:72:a3:23:71:3f:99:a4:d7:d4:a3:83:0c:48:
                    33:7d:8b:4d:de:af:02:49:56:78:45:a8:86:40:f0:
                    00:13:ea:c6:67:7c:67:e5:35:c3:6c:1e:15:e6:12:
                    42:16:50:30:a8:cc:75:7d:fa:a6:a7:41:84:65:8e:
                    77:49:b4:29:47:9b:4f:70:88:74:5d:7f:29:6e:9a:
                    49:bc:39:b1:66:f2:3c:6c:04:59:50:d6:32:a1:5a:
                    ad:47:e8:a2:7c:7e:06:65:ae:b8:d7:9e:15:b9:cb:
                    35:84:77:8c:e8:08:4d:6d:e1:c3:f9:86:a1:04:47:
                    7c:a8:77:da:35:9f:a8:50:6b:ce:d7:0e:6d:c9:fd:
                    b1:ee:f3:25:c6:03:64:43:d0:b2:ab:24:7c:ec:3e:
                    ea:6b:04:cf:64:a9:74:bd:e1:77:5e:aa:3b:e9:89:
                    81:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:49:0E:C9:3F:CF:25:80:18:9D:9C:A6:33:F9:24:70:86:62:A2
            X509v3 Authority Key Identifier:
                keyid:CB:52:D1:72:E7:BB:A5:29:78:C4:03:74:02:7A:4D:A6:C7:91:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1LRcue7pSl4xAN0AnpNpseRZ9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199606/0017ED98EBB111F089216E7C606F56BC/y1LRcue7pSl4xAN0AnpNpseRZ9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a5:19:f6:54:ef:34:97:af:95:8e:75:51:a4:ec:24:7a:f8:
         af:25:40:e2:5f:c7:b3:5b:5d:3c:2a:45:18:0d:ee:c3:72:2f:
         f0:be:22:2e:b3:74:5d:07:27:36:20:52:82:22:0f:88:6e:60:
         0e:64:0d:c1:42:bd:7a:19:a2:fd:11:ba:76:e1:a9:48:38:65:
         9d:23:d6:ca:3d:e4:b6:a3:f3:9d:77:64:22:fb:5f:fd:15:3b:
         cc:78:e6:91:ae:a0:5e:73:f2:4a:d2:83:84:54:02:9b:46:c5:
         0b:b0:c8:b7:cf:9a:af:62:0d:77:80:03:c5:58:4c:2b:4b:57:
         49:17:78:55:10:12:09:ee:b0:38:58:d1:be:2f:95:34:92:bd:
         88:94:bd:ca:b5:c7:e0:7f:d6:d8:74:0a:74:4f:83:6e:76:61:
         03:8b:63:b2:05:db:33:a4:e1:d4:81:02:a9:cb:2c:e2:12:83:
         97:62:5b:87:58:41:26:7c:59:9d:19:29:f1:61:55:ab:1d:c1:
         f9:50:0e:49:51:19:d9:d3:ae:6b:71:10:76:22:d8:19:4e:de:
         45:41:c3:e0:f3:17:a6:db:ba:9b:52:6f:36:b5:36:9e:b7:00:
         2e:d9:7d:d6:ba:49:e0:8d:de:6d:a9:44:a6:88:48:ca:bd:3c:
         de:e2:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:07:06 2026 by rpki-client