Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
File:                     YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft (raw, json)
Hash identifier:          pBeVZgAknN6+5O/Lr94jqxF276WmHOax/B6hnGVOvxw=
Subject key identifier:   4E:66:77:B6:F9:0E:A6:29:BC:6D:A8:83:41:9D:CD:D1:68:6A:82:AA
Authority key identifier: 61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1
Certificate issuer:       /CN=A91AE9CC/serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
Certificate serial:       25D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
Manifest number:          25BE
Signing time:             Mon 12 Oct 2026 15:45:41 +0000
Manifest this update:     Mon 12 Oct 2026 15:45:40 +0000
Manifest next update:     Mon 19 Oct 2026 15:45:40 +0000
Files and hashes:         1: YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl (hash: u465CnWEr36DSlLRRJR7a8OyV99/7ZtUBhlQSKOK1lA=)
                          2: 3A73B3A254EB11E7A50F9822C4F9AE02.roa (hash: rbb9vzT6ZdvpjVZ3GXOm6few5Y28G7tYzO6mN3D77lw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl
                          rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:45:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9682 (0x25d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE9CC, serialNumber=614D88C4318754EE33C012A64C542B39EA04D4E1
        Validity
            Not Before: Oct 12 15:45:40 2026 GMT
            Not After : Oct 19 15:45:40 2026 GMT
        Subject: CN=6acd00a5-9f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:d1:57:de:cf:a4:98:9e:fe:d5:b9:07:0c:
                    27:65:d1:be:6a:46:42:53:ba:90:da:00:3b:72:55:
                    92:f5:9e:48:d2:38:49:d3:30:42:03:5a:ab:be:e8:
                    7b:91:52:17:dc:6b:a7:03:a3:6a:5d:8b:a4:23:90:
                    e6:3c:06:03:4f:59:69:c5:19:92:87:36:75:ca:51:
                    43:4b:e0:73:e6:e5:15:ba:a7:2e:cf:c1:67:46:c3:
                    e8:bc:4c:73:eb:04:92:67:dd:f7:d6:83:66:55:5b:
                    2b:d4:fd:ec:b8:29:5c:a4:ee:19:c4:fd:60:f1:1b:
                    e8:d9:77:4c:31:59:87:3f:b2:e3:83:a6:6a:33:c0:
                    8f:b8:60:2d:d4:f2:cd:3b:7c:07:2f:25:e1:06:eb:
                    dc:ac:83:63:eb:19:6b:09:44:53:fb:70:95:55:5f:
                    e8:58:c7:2f:69:cf:b3:bd:4d:65:6e:17:05:6f:23:
                    75:e6:4a:e2:52:da:ee:5e:fe:31:40:0d:46:fb:4b:
                    bf:c1:e0:ac:d0:81:07:20:9f:1c:c6:37:00:64:ae:
                    21:73:99:bd:2d:8c:28:63:3f:0d:e4:06:52:ca:94:
                    0f:16:26:56:78:08:65:36:70:97:86:ee:22:0b:8e:
                    b2:5d:48:ff:7b:6e:8f:61:1a:98:f7:0e:65:7c:60:
                    20:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:77:B6:F9:0E:A6:29:BC:6D:A8:83:41:9D:CD:D1:68:6A:82:AA
            X509v3 Authority Key Identifier:
                keyid:61:4D:88:C4:31:87:54:EE:33:C0:12:A6:4C:54:2B:39:EA:04:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YU2IxDGHVO4zwBKmTFQrOeoE1OE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE9CC/140E527C3A8911E59E802362C4F9AE02/YU2IxDGHVO4zwBKmTFQrOeoE1OE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:74:8f:d2:e4:96:65:85:8e:35:e5:fc:20:64:7a:42:2b:94:
         c3:07:af:b0:94:74:93:2d:36:66:e3:1e:d2:33:ff:54:ae:db:
         82:bc:e0:ee:f5:05:7f:68:13:34:21:76:06:7f:4c:8f:bf:3c:
         58:2d:21:a4:2c:e4:69:99:9a:27:87:d3:b8:ce:ed:16:c6:b3:
         46:f9:31:ec:d6:5a:59:16:42:fd:ec:5a:79:ae:11:44:b5:45:
         db:64:6a:5d:62:10:b6:06:62:de:a9:67:f8:e7:eb:9d:75:03:
         c3:0a:75:59:5b:d7:c4:e3:51:23:0b:86:46:25:ad:af:ab:2b:
         12:17:2d:29:10:a6:1f:77:2e:92:37:80:6f:e0:b7:c0:f8:33:
         67:8c:40:5b:43:d7:f5:b6:cd:4d:5a:a7:2b:05:39:73:40:51:
         44:9f:fc:6b:04:ce:e2:7d:3e:7e:a4:72:a8:09:db:6c:3a:e5:
         a1:c8:10:6f:6f:80:d7:cc:0f:6e:46:76:43:de:a4:a2:67:dc:
         43:c0:19:5f:67:34:4d:f4:db:85:d7:86:6b:47:b7:d9:e0:42:
         5c:51:19:2c:1c:be:2f:39:82:1e:eb:7b:8b:23:ed:63:80:b6:
         e0:25:7a:98:7f:5d:b4:f5:dd:ca:c4:96:43:0a:22:ba:7b:7b:
         8b:8d:7d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:44:46 2026 by rpki-client