Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
File:                     yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json)
Hash identifier:          PLoIS42hPX0Fl5pDKgcfE+aNhRvCGazfGz4MuJtnt3U=
Subject key identifier:   D2:A2:57:58:8A:CA:10:AF:91:8B:8C:2C:31:40:9A:24:18:1B:C1:03
Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44
Certificate issuer:       /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
Certificate serial:       0B61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
Manifest number:          1345
Signing time:             Sun 04 Oct 2026 19:13:33 +0000
Manifest this update:     Sun 04 Oct 2026 19:13:32 +0000
Manifest next update:     Sun 11 Oct 2026 19:13:32 +0000
Files and hashes:         1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: yYn11ZtGghjm9ssj5h4kRu0tOEztITyGUYxJI7NTmm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644
        Validity
            Not Before: Oct  4 19:13:32 2026 GMT
            Not After : Oct 11 19:13:32 2026 GMT
        Subject: CN=6ac2a55d-9193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:c5:7f:86:2b:11:ff:3d:96:67:c0:41:97:
                    ac:1d:24:e8:8d:5e:5b:83:35:a3:44:ef:cf:48:31:
                    03:30:8c:db:f6:6a:c2:9a:40:5f:16:56:40:b7:e1:
                    d1:55:de:48:7f:14:4f:df:b8:7e:c1:af:bc:7e:3e:
                    01:ea:7b:46:34:b7:f4:3e:6e:ba:55:75:2f:68:40:
                    9f:c3:12:0a:0b:22:c3:e0:9b:0f:02:18:13:5c:f0:
                    70:2b:ae:17:87:49:a0:40:bc:43:1e:1d:65:6f:40:
                    72:2d:84:fb:3d:88:68:09:6c:b3:65:4a:3c:6f:37:
                    57:7a:1c:76:76:1c:1a:2f:b5:42:25:f2:a9:6d:f9:
                    2d:de:f4:f1:06:95:51:b3:41:34:cc:ee:e3:3c:e6:
                    c3:4d:75:1a:4d:b0:21:3c:6d:52:9c:81:3b:f8:1c:
                    12:97:d4:bd:9a:6d:6c:7d:45:02:18:6f:94:92:1f:
                    55:63:2c:af:0d:bd:25:49:f6:5f:a8:d6:61:ba:35:
                    fa:f5:27:03:0c:5c:2a:5d:92:d8:1e:c7:8f:62:2d:
                    d3:ab:cb:94:f5:f0:8f:b7:b1:3f:f5:42:45:48:34:
                    bc:76:be:ef:be:72:30:a6:4f:a1:39:e5:b6:34:14:
                    58:87:00:2b:8a:0b:dd:f7:86:5a:98:a1:fe:ad:55:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A2:57:58:8A:CA:10:AF:91:8B:8C:2C:31:40:9A:24:18:1B:C1:03
            X509v3 Authority Key Identifier:
                keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:b5:f8:a1:c3:2b:1d:a3:55:7b:56:df:97:04:8d:69:33:
         72:f3:53:24:99:3f:9f:48:ec:b4:d2:d8:46:27:e3:0b:82:6f:
         be:80:a2:a0:f9:ad:85:36:e4:d4:90:ce:4c:9d:46:d3:10:fd:
         55:c7:d5:04:51:ef:db:e2:a3:ff:ea:ce:3e:f2:24:7c:ee:34:
         b8:0f:ec:8e:e6:b3:8e:01:c2:ee:5c:bc:1a:f6:4a:e1:fb:7d:
         bd:51:25:8f:20:4b:bf:e9:76:00:c4:b5:0d:40:83:73:36:21:
         b4:fb:14:4f:64:04:ce:02:77:c7:40:93:78:5c:be:9b:f6:f4:
         76:96:95:fe:14:46:33:8b:7b:00:b9:b6:71:e0:4e:02:87:07:
         f5:d7:6c:f5:4e:b8:32:7d:bf:73:3d:dc:0a:f5:1b:85:18:0f:
         97:f8:75:87:8c:90:f8:11:9c:2c:2b:15:f0:eb:1b:ef:6b:e3:
         e5:ab:08:2c:f2:76:52:b2:23:11:0b:6e:6b:c4:f1:af:f9:a4:
         c6:31:da:d7:e2:b5:86:b1:d5:3d:f5:70:4e:c0:54:65:b2:1c:
         94:54:b9:85:30:1b:4f:d7:1d:52:7a:b9:b2:4a:d2:b9:39:a7:
         6d:79:de:d6:c7:7d:ed:3f:44:7b:2e:99:cc:72:e4:76:be:12:
         26:54:6f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:05:36 2026 by rpki-client