Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
File:                     ygziy6mc3g2QJ_zkhk8myRPUGeM.mft (raw, json)
Hash identifier:          95moLtY2K5Env74x+OBhFDNC5PZ0lfx9tYgOR7x5QIc=
Subject key identifier:   FE:49:63:28:F3:B7:34:23:F5:86:EA:FD:CF:C0:E9:23:E7:80:B4:A0
Authority key identifier: CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3
Certificate issuer:       /CN=A91B2C43/serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
Certificate serial:       0C7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
Manifest number:          0C5D
Signing time:             Wed 28 Oct 2026 18:54:45 +0000
Manifest this update:     Wed 28 Oct 2026 18:54:44 +0000
Manifest next update:     Wed 04 Nov 2026 18:54:44 +0000
Files and hashes:         1: ygziy6mc3g2QJ_zkhk8myRPUGeM.crl (hash: hZ8v9kZBVI5juQI6UWETwqfb8H2wSd8PHwq8KGXeR5Q=)
                          2: 6AC5AB5CEAB811F088FEC0005D6F56BC.roa (hash: GCpn4gmc0QpPSz7cXybRJq63rDVbixPSMbZl0hH07Xg=)
                          3: bKnpCri-YSdZASOy0WKcpBfEeZk.asa (hash: TNZwdInhbGHNiiADvGjpB/81CQBS5ZmdHONVFxKEc8w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 18:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3197 (0xc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C43, serialNumber=CA0CE2CBA99CDE0D9027FCE4864F26C913D419E3
        Validity
            Not Before: Oct 28 18:54:44 2026 GMT
            Not After : Nov  4 18:54:44 2026 GMT
        Subject: CN=6ae244f5-95d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:1c:6c:9a:a5:8a:59:6d:01:1e:c5:82:9a:
                    c1:36:cc:c2:13:22:12:94:c9:07:60:43:69:31:e3:
                    1d:60:b8:5b:7f:fd:d9:a7:a8:7c:1c:07:41:9f:b9:
                    52:ef:03:51:dc:7e:76:bd:b8:c0:34:d9:4d:87:c9:
                    68:b5:39:66:6d:5a:e8:09:f5:5a:52:24:da:41:09:
                    83:11:cd:64:69:9e:be:c0:d4:97:5e:ca:18:35:42:
                    da:2d:c7:ba:bd:f1:3b:0a:af:be:7a:42:5d:b0:db:
                    43:89:ff:ff:53:fe:34:1c:9e:76:e3:4c:7b:eb:bf:
                    90:c5:18:7c:05:c1:59:71:2f:ec:e4:85:df:9d:11:
                    de:f7:96:62:99:0a:e3:94:ab:55:de:5c:0a:e6:6c:
                    69:1b:01:8d:42:ee:d3:26:7a:05:c4:97:2b:02:d9:
                    ed:c3:6e:74:d2:a0:ba:3d:fd:a0:00:c4:2b:27:b9:
                    60:c0:6a:4b:d0:d1:28:a4:ed:2b:78:58:e7:89:08:
                    04:f3:c7:4b:00:24:65:9f:dd:93:50:4c:44:20:32:
                    db:8e:be:a0:60:36:f8:82:f8:be:52:2f:59:3b:0d:
                    79:36:40:e4:a2:4c:87:88:2c:e7:83:e6:87:b5:dd:
                    3a:e9:54:4d:58:0d:ce:c8:de:cc:72:e0:4d:b2:3c:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:63:28:F3:B7:34:23:F5:86:EA:FD:CF:C0:E9:23:E7:80:B4:A0
            X509v3 Authority Key Identifier:
                keyid:CA:0C:E2:CB:A9:9C:DE:0D:90:27:FC:E4:86:4F:26:C9:13:D4:19:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygziy6mc3g2QJ_zkhk8myRPUGeM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C43/DC2F546839E411EA96173374C4F9AE02/ygziy6mc3g2QJ_zkhk8myRPUGeM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:db:7f:ef:c9:d8:21:ca:5c:5b:bb:1f:70:02:05:57:ec:52:
         9e:bc:91:21:d4:e5:67:d4:1e:9e:ce:28:1c:05:57:74:ca:16:
         5c:d4:60:3f:5d:1e:90:c9:09:e4:a0:7d:bf:89:c2:01:dc:82:
         44:70:1c:6b:e6:e1:dd:e7:ca:6d:df:c0:04:d5:e0:30:f3:e3:
         92:65:c9:22:d0:7f:96:6b:0f:ed:47:ad:67:21:0c:89:4f:64:
         d0:64:a8:e0:29:2b:9f:37:56:d6:4b:44:e0:c5:70:b1:ac:13:
         7d:63:0e:6d:5a:5c:8c:5c:33:51:db:f4:40:4b:52:78:d0:3c:
         44:d5:7f:d5:f1:78:03:66:ee:3e:9f:2c:b7:ac:79:24:0f:ae:
         58:a6:66:55:1e:54:40:33:f5:d4:fe:92:f6:7c:54:86:f9:4d:
         2f:74:d9:de:a9:54:33:13:aa:ab:10:43:1f:6b:38:23:78:e0:
         14:53:da:ab:e8:95:64:22:fe:2b:60:58:e5:66:e1:8d:c1:d8:
         45:b7:2b:6d:50:90:76:a2:9c:dd:43:8b:2b:ef:43:f6:e8:d5:
         aa:a6:dc:a0:5f:70:43:57:53:6d:3a:c7:39:01:95:db:11:9a:
         ea:eb:0d:a5:c2:ea:88:44:6f:70:e5:ad:f9:4b:65:91:a7:8c:
         70:5f:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:29:55 2026 by rpki-client