Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File:                     YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier:          Iw7tSxNFyt87hjbm3vG8uuu5qMlm9FR2pqQ3w0Mv69c=
Subject key identifier:   63:3E:CD:6E:FE:CC:58:23:6D:CD:9E:36:E7:35:5B:81:DA:A1:09:DD
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       069A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number:          0689
Signing time:             Fri 04 Sep 2026 22:18:34 +0000
Manifest this update:     Fri 04 Sep 2026 22:18:34 +0000
Manifest next update:     Fri 11 Sep 2026 22:18:34 +0000
Files and hashes:         1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: UKP+hZVlSipnqqUXCVJtWVB7CEU+AHWkSGiHqshauF4=)
                          2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: z3K78kKecVQMmJ50EY3GJXcrFCdRmrLxw9yA8ww2hMY=)
                          3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: 1uRa9qCZnC1NyVtsdBrtA6UVUVTLZi1rR+2Ai/+6L3o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Sep  4 22:18:34 2026 GMT
            Not After : Sep 11 22:18:34 2026 GMT
        Subject: CN=6a9b43ba-18d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e1:d8:41:80:e7:56:20:38:ff:70:b9:bd:42:
                    05:ff:32:52:69:a8:d0:64:7c:b1:84:d2:20:06:7d:
                    7f:24:9b:49:98:c5:7e:9f:cb:7a:79:0b:79:ac:bf:
                    56:ad:68:f2:f6:44:89:78:3d:c0:c1:37:16:8f:e8:
                    7b:fc:aa:5e:b0:1f:0b:0b:74:c8:2e:ed:ff:c1:2c:
                    cd:d0:18:d1:41:e1:af:f1:40:9e:5e:2c:b1:4a:84:
                    4e:10:26:94:e3:b9:07:b2:6a:8f:b9:47:04:23:1c:
                    93:25:0e:75:5b:3c:d6:c5:b4:ab:af:11:5e:4f:3b:
                    bb:a2:31:03:7e:b2:0d:7b:71:71:b3:69:a8:37:bd:
                    f8:18:da:b7:19:ec:0b:d8:b6:b5:4c:da:b1:89:b5:
                    44:6d:18:db:a3:84:84:93:12:4e:11:a8:81:c9:b0:
                    8a:71:f4:f2:2b:b8:4d:94:76:1e:d0:77:1d:0d:ae:
                    99:92:37:1b:5f:c4:53:45:cd:12:0f:9b:27:69:07:
                    03:0d:e4:ac:9a:85:52:8a:c1:bd:4c:44:d0:94:cb:
                    bb:81:5d:2f:04:da:6c:83:14:54:26:12:af:10:56:
                    e2:ff:fd:0d:aa:7e:d9:45:01:c7:18:72:a3:e2:9f:
                    1a:fc:9f:ac:f1:ee:8a:05:8e:0b:03:dd:e2:fe:b2:
                    22:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:CD:6E:FE:CC:58:23:6D:CD:9E:36:E7:35:5B:81:DA:A1:09:DD
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:92:58:c8:8c:ec:a1:a5:f1:ad:56:9e:cf:75:01:83:04:5d:
         7e:53:47:d1:8d:ed:8e:55:66:63:fc:b5:70:b9:69:86:77:39:
         1c:65:53:61:68:09:7d:37:98:08:f0:16:06:ac:11:d4:77:88:
         ed:80:50:86:15:89:2f:1b:cc:d8:90:c1:0c:35:bf:fb:3a:d5:
         38:b6:f9:81:8d:84:76:5b:10:e0:9a:34:6f:e7:48:b6:89:8e:
         a3:d5:c5:08:26:53:e1:9e:49:48:ba:cd:46:a5:94:e1:30:f0:
         33:cb:07:11:15:b3:00:17:c2:ab:7f:03:3f:b8:1e:9d:7e:20:
         1a:5c:5a:f3:b3:a8:22:cc:4e:bc:f5:d1:72:74:8d:95:12:c4:
         f0:71:1f:f6:c8:72:07:03:95:65:92:32:02:80:c7:2e:7b:28:
         50:14:b3:af:28:ac:e5:c9:39:9f:ef:12:82:73:4b:69:6d:2d:
         68:bc:b6:71:8c:c2:b0:cb:84:ab:a4:be:ca:b5:ae:f4:07:a5:
         39:a0:0d:21:a8:21:ec:d3:70:49:23:e6:9e:c3:0d:aa:85:06:
         c9:96:a7:91:f9:42:dc:a5:db:f8:92:62:3f:de:2e:d8:97:a5:
         e5:9c:55:01:c4:6b:e4:2a:51:28:18:b8:77:36:d4:69:e3:5d:
         77:58:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:20:24 2026 by rpki-client