Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File:                     Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier:          GrclWZcuj4kxdqp8JBY12C6eYvxlfS0yReg7/oWdOgI=
Subject key identifier:   77:81:E9:73:C7:D2:54:17:AD:A0:97:00:65:F7:B8:01:44:A8:4D:84
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer:       /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial:       0D6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number:          0D5B
Signing time:             Thu 10 Sep 2026 18:02:45 +0000
Manifest this update:     Thu 10 Sep 2026 18:02:44 +0000
Manifest next update:     Thu 17 Sep 2026 18:02:44 +0000
Files and hashes:         1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: g83VLT7OBQDRpLIcb5gY4RxBelNXAesn+oRCOkTLdrU=)
                          2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: r6NMGYsxb0CTrW+33MllDccXL4xyxMC+FjKpakw8GUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 18:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3437 (0xd6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
        Validity
            Not Before: Sep 10 18:02:44 2026 GMT
            Not After : Sep 17 18:02:44 2026 GMT
        Subject: CN=6aa2f0c5-25ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ff:9a:ea:22:37:ef:a6:19:30:48:50:be:7f:
                    7c:8c:43:ee:6f:2e:f0:cd:b9:fc:59:ac:24:da:0c:
                    e4:a7:d9:90:91:6e:16:e6:12:fa:34:60:76:1c:32:
                    a2:b6:03:61:2d:83:b7:b0:66:00:55:31:75:bc:3e:
                    6c:45:02:aa:b4:8f:07:c7:08:32:26:b2:f5:de:7f:
                    86:3c:c7:09:5b:3b:11:19:f9:83:fc:84:d9:ef:74:
                    76:0a:6b:55:63:6c:33:a2:8b:63:b4:8d:cb:18:6b:
                    8e:31:38:d3:4d:ec:fb:70:df:38:cc:bd:a3:25:0a:
                    5e:81:5a:f8:b6:10:53:2a:94:4d:05:4f:4d:5b:9e:
                    5a:b7:78:d1:de:25:36:8c:cb:bf:70:4b:2d:1a:1f:
                    b4:f4:53:6e:8f:8d:a1:23:fb:07:b3:29:af:a8:f4:
                    42:16:04:e9:e9:ae:e8:a1:6c:e2:94:e4:c9:cb:74:
                    60:fe:d2:3d:63:af:4d:1c:4c:ca:ee:56:63:68:47:
                    bc:a5:29:2f:cc:54:85:de:33:76:13:7c:7b:b2:5a:
                    b1:dc:71:7f:22:84:c8:a7:69:60:ff:68:ab:ac:65:
                    69:f8:33:ce:c3:51:04:5a:6c:1c:a4:3a:39:3d:51:
                    5f:98:75:3d:03:63:bb:96:86:2a:d6:6e:64:69:3a:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:81:E9:73:C7:D2:54:17:AD:A0:97:00:65:F7:B8:01:44:A8:4D:84
            X509v3 Authority Key Identifier:
                keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c3:71:33:a1:80:25:53:fd:cd:cb:62:a1:24:96:00:39:ce:
         1d:9a:ad:7a:1e:53:19:5c:13:72:84:6b:01:f8:ea:f9:94:a0:
         9b:93:eb:1a:84:d8:7e:c8:cd:5d:c9:82:5b:3a:68:8a:9c:ae:
         5a:4d:36:f8:5f:c4:61:50:31:e6:62:f3:e1:77:fc:9b:74:86:
         38:4e:54:8d:4f:cc:8f:df:1b:e9:f7:68:f3:bb:c9:99:3d:e4:
         86:ef:43:d1:ba:80:41:6c:c4:52:dc:bc:c8:14:f3:2c:e1:56:
         1d:62:bd:1b:26:47:1a:ef:de:3b:f3:18:8b:79:fb:76:5c:dc:
         e7:f6:08:b7:ec:e5:c6:7c:1b:47:4d:68:51:1a:66:4b:43:95:
         08:54:3b:b2:c0:33:b2:95:7b:fc:19:c2:18:2b:cd:86:5c:33:
         dd:53:aa:3b:98:89:64:21:ff:8b:e2:b4:01:f2:4e:ef:91:fa:
         59:03:2a:c5:f0:c5:8e:d1:6b:10:03:36:c5:75:d0:a4:dd:23:
         aa:c1:75:9a:1e:b6:c7:1b:05:f1:17:05:13:33:a3:25:32:ac:
         79:7d:81:76:8a:f7:58:7e:97:d7:d3:c9:f4:63:b1:75:e0:16:
         80:ac:16:d9:e2:73:63:9a:72:45:d5:41:e9:22:e7:f6:ec:b3:
         8e:eb:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:02 2026 by rpki-client