Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File:                     yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier:          8Ec04Df+o1OiqqyzNtl2cALN779ciNTeLAFd89m2Fj4=
Subject key identifier:   9F:C6:4E:09:71:F0:C9:E0:F1:69:0A:8D:36:B4:96:1D:F4:6B:B6:80
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer:       /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial:       97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number:          8F
Signing time:             Thu 03 Sep 2026 07:50:27 +0000
Manifest this update:     Thu 03 Sep 2026 07:50:26 +0000
Manifest next update:     Thu 10 Sep 2026 07:50:26 +0000
Files and hashes:         1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: Yloa4GWg93c7FcwM41gtxK7NQqfkVAIZ6wXWjUioP84=)
                          2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: ZJFUNJfKnHjBTAeh2a4+XncnrcDN+/EtwP1+QA3vw0E=)
                          3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: 77vlGPsTBdhPDBopo52mzOrA60Cg+50amZ8+PMCNaP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
                          rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
        Validity
            Not Before: Sep  3 07:50:26 2026 GMT
            Not After : Sep 10 07:50:26 2026 GMT
        Subject: CN=6a9926c3-0b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:aa:ed:d9:eb:98:af:1e:25:e1:c2:b8:5f:
                    a1:9f:2a:0f:2c:53:ce:bf:6d:11:f5:ad:32:b9:5d:
                    0b:e2:87:13:a9:78:ec:38:e4:04:10:ca:32:d4:83:
                    bc:90:9e:8e:59:b2:cf:1d:e8:2c:65:24:0f:93:b5:
                    9a:32:93:23:b5:b5:27:c1:43:e5:9c:fb:b3:84:25:
                    24:69:71:f7:24:f8:88:a9:cf:63:e4:6d:32:77:51:
                    fa:3e:38:e6:84:ee:f8:67:ad:94:3c:2a:74:f9:d7:
                    70:cf:9c:36:fa:28:dd:d0:5f:ef:01:0f:09:04:fd:
                    c1:cf:6a:35:64:2f:62:80:b9:eb:6d:97:4b:ed:3d:
                    ec:c1:df:63:80:3c:7c:9a:71:71:80:d8:84:a0:e2:
                    92:7f:03:e0:84:c3:36:f8:af:67:b1:76:ca:73:df:
                    ac:e7:d3:19:eb:fd:32:fd:c1:96:7e:b7:a9:02:94:
                    2d:40:cb:4d:d0:6c:ac:4d:20:69:7b:84:a4:77:28:
                    0e:79:e3:0d:55:a5:42:db:98:f5:ec:ca:5e:87:af:
                    67:ad:55:cf:c1:db:4d:f0:00:1e:df:d6:26:88:73:
                    3e:1f:5a:2c:af:13:99:85:9e:00:20:13:96:e1:4d:
                    26:6a:01:47:27:cf:8f:82:55:56:ef:aa:cb:97:ec:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:4E:09:71:F0:C9:E0:F1:69:0A:8D:36:B4:96:1D:F4:6B:B6:80
            X509v3 Authority Key Identifier:
                keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ec:22:cd:51:58:1e:a8:01:66:42:d4:c3:5f:ba:36:74:da:
         59:74:60:12:4b:c1:08:b6:71:17:3e:bf:48:c3:52:d1:00:6f:
         03:cb:34:ac:96:64:59:7c:11:8b:2f:d4:9f:a9:5d:2c:27:b4:
         1e:28:a4:c2:96:bd:af:1f:56:3c:3d:bb:9a:ee:b9:0f:1d:26:
         ff:21:51:87:dc:2c:d9:fb:6b:7b:e1:0f:27:86:54:0a:3b:c0:
         72:f3:95:32:70:88:bd:e9:da:89:45:2a:6e:eb:cb:3e:35:f8:
         3b:c2:da:e1:29:ac:39:30:de:07:c2:aa:f6:67:f9:89:f0:ef:
         0d:e5:dc:69:e4:c2:4d:ec:41:80:5f:55:4e:43:d7:ed:f6:09:
         d0:6e:c8:a6:b1:ef:d6:1f:a1:89:b6:f5:5b:60:7d:74:5f:32:
         70:46:e0:be:b9:34:aa:c6:e8:72:b7:e5:a9:a4:24:4e:78:8c:
         da:1d:71:94:2a:4c:8d:fe:33:da:80:b9:6a:fe:3a:08:73:b0:
         7e:20:10:54:2b:b6:26:f1:10:8f:c2:8b:ec:d6:fa:cc:44:9a:
         3c:1c:80:62:a4:7e:ed:e3:db:12:6a:03:9c:57:f5:f1:15:ec:
         40:da:e3:98:15:be:9e:6f:12:fe:79:e7:d6:18:90:2b:bf:42:
         4d:1c:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:25:40 2026 by rpki-client