Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
File:                     yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft (raw, json)
Hash identifier:          5fMWH0LdHcatQ798vrXHr4voTPdagXDrfuleRUZpE4o=
Subject key identifier:   81:A8:2A:E7:25:A5:83:40:0B:F5:B0:E6:CF:A8:88:2C:EF:DC:27:96
Authority key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Certificate issuer:       /CN=A9115A7C/serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
Manifest number:          07
Signing time:             Wed 19 Aug 2026 09:55:41 +0000
Manifest this update:     Wed 19 Aug 2026 09:55:40 +0000
Manifest next update:     Wed 26 Aug 2026 09:55:40 +0000
Files and hashes:         1: yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl (hash: Kd0qxckKjprB9KSYRLTdTlgGBo4PUm8C/+4BTy8RY7g=)
                          2: 36E2673093A511F1A63A7D946011F970.roa (hash: YQjNMHo8sTM3LQcrU6VgB0vtk3GGCVQb//8/KSSTf30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
                          rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
        Validity
            Not Before: Aug 19 09:55:40 2026 GMT
            Not After : Aug 26 09:55:40 2026 GMT
        Subject: CN=6a857d9d-32a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:16:50:dd:b4:aa:2f:06:29:de:01:77:be:
                    cb:11:69:f7:80:4e:ff:97:de:42:5f:14:94:19:89:
                    7a:48:f3:8e:70:8f:50:4d:8d:8e:7f:80:28:00:a0:
                    b2:1a:37:30:80:bb:eb:81:ee:0f:ef:c6:30:fe:cb:
                    a4:b6:53:dd:42:d0:56:e0:44:4f:87:b8:bd:a3:4c:
                    32:ad:6d:36:a0:c4:22:56:3b:70:c5:c2:fe:3f:ee:
                    91:7e:93:2f:2a:15:bc:d2:56:d1:e0:e9:c0:9d:e1:
                    a3:dc:8b:34:57:00:00:74:d1:75:15:22:b9:36:1b:
                    c4:94:aa:d8:be:92:93:20:8f:57:e1:dc:b4:51:1d:
                    1e:6c:bf:54:a2:47:32:3a:4c:bf:41:2e:a8:2c:c7:
                    0f:94:6d:cd:f2:da:6d:25:b9:d4:7d:1c:8d:39:b8:
                    cd:8d:ec:a7:c3:d2:99:b1:c0:97:02:07:ae:2c:de:
                    41:ab:50:e4:f9:b9:a5:c4:9e:5c:c6:81:09:af:66:
                    50:1a:5c:f3:ab:aa:e2:8b:61:5a:0c:b6:67:ed:e7:
                    1e:61:f4:33:71:bd:e0:26:0f:a9:6d:5c:e2:61:4b:
                    8e:8e:16:12:25:bf:64:b2:2b:ae:bd:f2:4d:e0:f0:
                    41:5a:51:95:d4:f3:07:64:3f:6b:a3:18:18:5c:a8:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A8:2A:E7:25:A5:83:40:0B:F5:B0:E6:CF:A8:88:2C:EF:DC:27:96
            X509v3 Authority Key Identifier:
                keyid:C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dc:d6:a2:5a:c3:cd:7a:2f:9f:cf:a7:6c:29:7d:eb:51:29:
         ed:9c:7d:45:1d:a3:56:32:28:dc:8d:e4:78:b3:b0:04:e3:40:
         e4:8a:1a:53:1a:b0:d8:45:a0:37:8c:b3:c8:b7:d3:6e:69:d1:
         ef:fb:10:84:50:72:8d:d8:20:dd:87:a1:21:64:cd:e1:49:a8:
         8e:2a:80:4f:b9:5c:25:b7:de:44:f6:40:45:ef:5e:99:4f:b0:
         12:dc:dd:2d:22:d9:7d:e6:4c:d1:e8:ef:3d:56:04:bb:bd:f9:
         3a:7f:f1:bc:a0:0a:8f:58:33:63:76:46:0b:10:8c:fd:e3:4c:
         d3:93:26:72:3f:62:48:08:36:c0:4b:1d:49:ec:03:81:e7:cb:
         87:35:83:e4:c9:b0:86:b5:94:76:1c:87:94:ed:58:10:ac:00:
         58:59:15:d0:da:41:48:b1:1b:ca:37:da:4c:da:ad:54:42:9e:
         d2:e1:be:c7:1c:43:9c:bc:29:5d:25:05:36:8c:d7:00:21:56:
         db:e2:7d:24:45:cd:74:2a:41:1c:82:9e:03:25:3a:d0:23:19:
         71:a7:10:63:0f:76:18:a3:2b:e3:76:55:e4:12:97:30:5b:9f:
         1b:91:86:ba:ea:8c:52:33:a6:1a:3e:09:9b:37:f7:61:53:18:
         66:83:77:d0
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NUE3QzExMC8GA1UEBRMoQzg1RTE2REQ3QjQ5NzVFMzVGNkNCODNBQUY4RjgzRjhB
OTFCN0FERDAeFw0yNjA4MTkwOTU1NDBaFw0yNjA4MjYwOTU1NDBaMBgxFjAUBgNV
BAMTDTZhODU3ZDlkLTMyYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjlRZQ3bSqLwYp3gF3vssRafeATv+X3kJfFJQZiXpI845wj1BNjY5/gCgAoLIa
NzCAu+uB7g/vxjD+y6S2U91C0FbgRE+HuL2jTDKtbTagxCJWO3DFwv4/7pF+ky8q
FbzSVtHg6cCd4aPcizRXAAB00XUVIrk2G8SUqti+kpMgj1fh3LRRHR5sv1SiRzI6
TL9BLqgsxw+Ubc3y2m0ludR9HI05uM2N7KfD0pmxwJcCB64s3kGrUOT5uaXEnlzG
gQmvZlAaXPOrquKLYVoMtmft5x5h9DNxveAmD6ltXOJhS46OFhIlv2SyK6698k3g
8EFaUZXU8wdkP2ujGBhcqHw/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUgagq5yWl
g0AL9bDmz6iILO/cJ5YwHwYDVR0jBBgwFoAUyF4W3XtJdeNfbLg6r4+D+Kkbet0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1QTdDLzNFMEZFNDNFOTNB
NDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVOZmJMZzZyNC1ELUtrYmV0
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveUY0VzNYdEpkZU5mYkxnNnI0LUQtS2tiZXQwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1
QTdDLzNFMEZFNDNFOTNBNDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVO
ZmJMZzZyNC1ELUtrYmV0MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA83NaiWsPNei+fz6dsKX3rUSntnH1FHaNWMijcjeR4s7AE40DkihpTGrDYRaA3
jLPIt9NuadHv+xCEUHKN2CDdh6EhZM3hSaiOKoBPuVwlt95E9kBF716ZT7AS3N0t
Itl95kzR6O89VgS7vfk6f/G8oAqPWDNjdkYLEIz940zTkyZyP2JICDbASx1J7AOB
58uHNYPkybCGtZR2HIeU7VgQrABYWRXQ2kFIsRvKN9pM2q1UQp7S4b7HHEOcvCld
JQU2jNcAIVbb4n0kRc10KkEcgp4DJTrQIxlxpxBjD3YYoyvjdlXkEpcwW58bkYa6
6oxSM6YaPgmbN/dhUxhmg3fQ
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:41:53 2026 by rpki-client