Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
File:                     ycf7MVXuXrRUGnY3mYlwgGpG878.mft (raw, json)
Hash identifier:          lOoGR1qWwiWlaiQ244sr+A5hYQ/tXRl5SaiYUNmeVYs=
Subject key identifier:   DF:F6:D4:7B:5B:86:63:3C:73:A5:11:6C:29:64:59:5B:6F:57:BA:EB
Authority key identifier: C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF
Certificate issuer:       /CN=A919AB96/serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
Certificate serial:       CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
Manifest number:          C7
Signing time:             Thu 03 Sep 2026 07:04:08 +0000
Manifest this update:     Thu 03 Sep 2026 07:04:08 +0000
Manifest next update:     Thu 10 Sep 2026 07:04:08 +0000
Files and hashes:         1: ycf7MVXuXrRUGnY3mYlwgGpG878.crl (hash: XfLZICOhyyRg1Eq9rUtjrpaDctqc4a1HgfLUJ/oQaDQ=)
                          2: CDD6FA7CAD8511F08C759F59C4F9AE02.roa (hash: ewnRiMOPo+aOlr8QNH9hjr9JP1rqiLhICSeWdO+Tu7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl
                          rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AB96, serialNumber=C9C7FB3155EE5EB4541A7637998970806A46F3BF
        Validity
            Not Before: Sep  3 07:04:08 2026 GMT
            Not After : Sep 10 07:04:08 2026 GMT
        Subject: CN=6a991be8-1647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:53:df:37:f8:d0:70:c9:ce:67:66:78:c2:
                    6b:b4:ba:6f:31:ba:01:18:98:74:7e:a1:e0:16:3c:
                    fe:24:65:69:c1:c4:d1:64:af:52:11:f2:0f:ed:80:
                    82:3b:0d:71:2f:49:d4:79:c1:1f:f4:89:52:b5:0c:
                    b9:7b:f3:54:47:41:5b:29:0d:49:28:6e:87:63:7c:
                    81:2d:46:11:3b:91:76:59:ad:61:43:40:93:04:a3:
                    8a:34:42:77:da:03:91:c6:0f:82:b4:1d:86:9b:6b:
                    ed:d2:9c:e3:77:3c:60:73:9e:cb:9a:1e:1b:fd:1a:
                    72:1b:47:70:41:b0:f8:21:dd:90:2a:d7:22:93:9f:
                    0e:b1:c4:2c:c6:cf:7c:a5:57:c8:db:15:8f:f4:64:
                    a5:ae:84:73:13:dc:73:44:30:79:0e:7b:6a:04:b8:
                    24:4d:f9:04:35:ee:0c:7a:e8:70:79:3f:c8:9f:d1:
                    14:26:19:84:d7:e8:86:3b:46:0b:c0:18:31:ac:a6:
                    8b:f3:52:f1:dd:fa:e9:90:fe:c7:0a:d9:3d:19:37:
                    dd:57:55:4a:c3:42:21:77:78:39:de:f2:36:b8:ef:
                    23:91:83:9e:62:e4:fd:dd:81:87:93:91:7d:12:fb:
                    21:e8:54:5b:c9:e4:e6:2b:68:14:0f:09:e0:27:71:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F6:D4:7B:5B:86:63:3C:73:A5:11:6C:29:64:59:5B:6F:57:BA:EB
            X509v3 Authority Key Identifier:
                keyid:C9:C7:FB:31:55:EE:5E:B4:54:1A:76:37:99:89:70:80:6A:46:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycf7MVXuXrRUGnY3mYlwgGpG878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AB96/116561327F7F11F08417593FC4F9AE02/ycf7MVXuXrRUGnY3mYlwgGpG878.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:1a:7b:44:20:23:d9:43:e1:7d:4c:d5:28:d0:bd:bf:3f:
         41:9b:9a:51:97:6b:dd:74:6b:f7:0c:5d:d6:27:77:88:06:e3:
         6f:69:67:7e:1f:f4:d2:fc:b7:1d:32:a9:4a:aa:3f:ad:87:82:
         14:fe:48:62:47:9b:c1:c8:0c:15:1b:8b:cd:c8:e6:37:30:35:
         12:e2:ad:09:07:7d:0e:2d:49:32:46:85:1a:2c:ba:4f:d0:03:
         ab:80:fc:a0:0c:05:74:3f:60:e4:47:4e:de:64:c2:b3:f1:e2:
         b3:96:bf:b0:e7:1c:bf:1c:d4:dc:40:7a:a9:64:de:42:ce:8d:
         db:94:79:c6:6e:b4:10:a8:16:f1:20:9a:ae:94:59:e0:80:4a:
         ab:df:2e:38:ed:d0:1c:9e:23:42:20:cd:88:02:74:4a:d1:81:
         51:1e:29:0c:d6:35:81:2c:db:88:91:74:c1:e4:3b:ce:94:32:
         ac:2b:9e:b4:b3:00:b9:94:33:c6:0a:c5:ac:86:88:5c:7b:a5:
         89:17:03:57:6e:29:d9:c8:49:a6:ee:bb:66:e3:e4:19:a6:93:
         35:5a:51:58:51:f0:82:ed:7e:c4:dc:1b:de:4a:8b:26:23:64:
         07:17:3b:c4:93:aa:8f:52:4d:66:8c:16:bb:64:90:71:77:1f:
         82:5d:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:50 2026 by rpki-client