Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
File:                     yZBd5SSGuexO-HmgJkRccLD9lQU.mft (raw, json)
Hash identifier:          e9aWQ3z/sEFLQ2MvZnuqPbwevMvxetuawreE0tOWmAk=
Subject key identifier:   3A:DD:5A:0E:C1:3E:E8:3D:59:21:9C:EA:DA:F0:B1:49:21:FC:E0:ED
Authority key identifier: C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05
Certificate issuer:       /CN=A91E0C5F/serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
Certificate serial:       07C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
Manifest number:          181B
Signing time:             Fri 02 Oct 2026 17:33:59 +0000
Manifest this update:     Fri 02 Oct 2026 17:33:59 +0000
Manifest next update:     Fri 09 Oct 2026 17:33:59 +0000
Files and hashes:         1: yZBd5SSGuexO-HmgJkRccLD9lQU.crl (hash: wQglMP5kPL7R+58rACP6PG6pJUymPzomicgHkp3/av0=)
                          2: 039F32B465C411EBA408403CC4F9AE02.roa (hash: 9Zoz24dEkJzt6FtyKQFuBZJoAm4QCrA8VXW1adYN8sc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl
                          rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 17:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0C5F, serialNumber=C9905DE52486B9EC4EF879A026445C70B0FD9505
        Validity
            Not Before: Oct  2 17:33:59 2026 GMT
            Not After : Oct  9 17:33:59 2026 GMT
        Subject: CN=6abfeb07-5135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:62:99:f4:38:54:53:ec:87:a8:25:94:20:
                    e6:64:34:ea:f4:89:50:40:4c:f8:82:4b:e1:ca:6f:
                    8d:39:f0:03:7c:a7:d4:d6:81:43:83:f0:60:25:0d:
                    ba:82:89:d0:70:d9:66:7d:b8:07:69:67:0c:95:aa:
                    e9:ca:07:3a:36:7e:52:08:7b:a8:a8:43:23:df:72:
                    63:29:0a:9c:db:dc:47:3e:2c:c3:d2:5f:20:cf:81:
                    fa:0c:7e:a7:8c:2d:6f:a9:e7:25:31:84:64:5c:49:
                    d3:9c:f4:15:67:5e:88:65:48:6d:ce:de:0e:d5:a1:
                    cc:a4:e5:41:f6:6d:44:0d:4c:20:e7:45:36:a4:4a:
                    fa:0c:c4:e7:a0:6f:ed:4b:ac:55:28:f5:d6:64:49:
                    a1:0c:5e:92:7c:d3:60:f8:c7:9a:a7:3f:59:ec:d9:
                    3b:bf:05:d4:12:4a:e3:e4:f0:6a:d0:95:99:8f:49:
                    37:fb:52:23:e3:cf:78:c3:57:ba:d2:7d:86:a6:57:
                    0f:51:d7:dc:fa:66:61:cb:4f:28:9d:23:a6:8c:32:
                    90:f9:72:69:41:e9:ab:f2:59:17:27:3f:69:88:31:
                    ae:3a:26:40:90:a2:95:ca:3c:79:41:2c:75:43:dc:
                    b3:0f:c7:67:86:fc:a0:cf:ea:78:98:00:55:92:a1:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:5A:0E:C1:3E:E8:3D:59:21:9C:EA:DA:F0:B1:49:21:FC:E0:ED
            X509v3 Authority Key Identifier:
                keyid:C9:90:5D:E5:24:86:B9:EC:4E:F8:79:A0:26:44:5C:70:B0:FD:95:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZBd5SSGuexO-HmgJkRccLD9lQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0C5F/8B547A72666411E982D05974C4F9AE02/yZBd5SSGuexO-HmgJkRccLD9lQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:e9:02:c5:01:57:b6:f4:b0:93:33:4c:8e:5a:35:cf:4d:
         83:b2:0e:7b:ed:b0:bd:e1:7e:9d:0c:8c:ce:a1:04:61:47:32:
         8c:1b:b7:8c:9b:d5:a7:7f:c0:91:25:b8:9a:02:cd:82:b2:d0:
         ae:e7:d8:e8:4b:44:43:43:a9:f6:af:ff:5c:2e:e6:5e:15:96:
         be:cd:6f:80:90:c6:37:54:c8:9b:d7:47:49:a9:07:cd:1d:00:
         94:16:91:39:97:24:c2:f0:b0:d6:a0:a7:2d:1c:9e:68:9d:80:
         8b:71:e7:71:60:30:da:5b:3d:43:bf:f5:3b:71:c0:5a:53:15:
         45:8d:a0:9e:2b:91:7f:49:de:2c:64:cf:2f:7f:cd:5a:df:14:
         50:9a:13:08:1c:b4:c7:26:26:cd:1d:ed:36:03:52:47:39:31:
         c3:31:30:aa:4c:a5:e1:ad:01:10:ea:14:6d:3d:20:6f:20:79:
         50:65:4f:34:60:1f:5d:60:be:4d:13:89:23:5c:98:76:08:b8:
         7c:b4:e8:54:08:2a:e8:46:31:2d:dc:09:4f:96:2a:d1:2f:40:
         52:81:28:19:27:bb:af:5a:47:0f:28:80:f6:45:26:2e:06:eb:
         fb:47:60:5f:b1:12:67:87:df:84:9c:ae:76:3c:37:c2:aa:28:
         62:3c:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:19:33 2026 by rpki-client