Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
File:                     y3nZvhDc9wJG_GlGNFiuyiQly44.mft (raw, json)
Hash identifier:          7WILf29C9Eqp1fIrYLYDVS1aj29rsxZ9AnQUEqqgC0A=
Subject key identifier:   26:32:57:30:43:2E:C4:4F:D0:B0:CC:C0:44:23:D9:D0:77:BA:8C:93
Authority key identifier: CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E
Certificate issuer:       /CN=A912756D/serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
Manifest number:          016D
Signing time:             Wed 19 Aug 2026 05:26:05 +0000
Manifest this update:     Wed 19 Aug 2026 05:26:05 +0000
Manifest next update:     Wed 26 Aug 2026 05:26:05 +0000
Files and hashes:         1: y3nZvhDc9wJG_GlGNFiuyiQly44.crl (hash: tyCDIk3/h8eWyzuV1BOGUTeirBwDa5u2iQapO99B98o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl
                          rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912756D, serialNumber=CB79D9BE10DCF70246FC69463458AECA2425CB8E
        Validity
            Not Before: Aug 19 05:26:05 2026 GMT
            Not After : Aug 26 05:26:05 2026 GMT
        Subject: CN=6a853e6d-ba56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:50:95:b9:53:4f:60:ff:0e:fe:73:60:11:
                    23:4d:e5:8b:fd:35:60:ba:78:79:33:3e:df:7e:c3:
                    0d:24:c5:55:5b:ae:69:0f:f1:27:fe:f3:32:65:62:
                    cc:0c:aa:c2:38:b4:87:43:21:b7:9c:68:de:60:da:
                    43:2d:37:44:03:a6:44:83:ee:e8:a0:42:d0:eb:53:
                    59:cd:39:16:26:c2:42:33:2c:a3:bc:ec:65:32:3d:
                    18:9a:cd:35:9e:fc:6d:7a:bd:84:cc:37:bb:94:13:
                    8d:e8:10:d8:ae:22:be:30:bb:ba:6f:4a:43:e6:c7:
                    a4:41:5a:04:eb:71:05:00:2a:31:5e:97:0d:10:ff:
                    0a:3f:92:df:ea:64:3b:a3:bf:0a:5f:1d:ab:c4:64:
                    29:22:9f:ac:47:e1:5b:a8:a7:8b:74:37:45:07:07:
                    83:3a:a8:a9:3a:be:89:d4:15:42:e9:c1:79:50:59:
                    c0:72:93:4b:8b:eb:23:8d:f0:6d:0c:cd:1d:77:fa:
                    7d:17:3c:94:2e:3e:47:19:ac:b0:ef:66:b5:5a:92:
                    af:be:4a:7f:20:ca:af:1b:2f:bb:f4:f7:28:f5:60:
                    2b:ae:75:11:09:e3:8b:74:06:31:52:c0:1d:8e:c1:
                    82:62:09:af:3f:93:a8:4c:54:83:bb:5e:5c:33:ac:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:57:30:43:2E:C4:4F:D0:B0:CC:C0:44:23:D9:D0:77:BA:8C:93
            X509v3 Authority Key Identifier:
                keyid:CB:79:D9:BE:10:DC:F7:02:46:FC:69:46:34:58:AE:CA:24:25:CB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y3nZvhDc9wJG_GlGNFiuyiQly44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912756D/8DCA32CE6B5411EFB8A8A61AC4F9AE02/y3nZvhDc9wJG_GlGNFiuyiQly44.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8b:0d:cf:8a:f3:51:45:c0:57:a5:08:98:23:26:dd:fd:3b:
         ab:ea:e6:a8:ea:55:ba:3b:86:12:22:6b:b8:70:05:52:80:8d:
         66:bd:c4:1e:ec:14:3f:33:e8:48:c2:57:1d:b1:52:89:42:53:
         b9:a2:b2:ea:32:53:c7:fd:8d:04:9d:1a:ea:42:a6:66:8c:af:
         c3:b0:b7:1c:27:24:4e:8b:01:9c:c6:50:4e:43:8f:f2:dd:dc:
         43:45:ee:d3:a4:67:d9:07:02:fa:1d:84:5f:d2:32:dc:65:40:
         c8:77:c4:2a:e9:0a:a4:2d:ae:a8:f1:5f:84:ff:96:f2:80:4c:
         f6:29:b8:c7:cb:3f:22:7e:fd:0f:8c:f6:27:aa:54:77:ba:58:
         59:a9:25:3b:b8:f0:e5:87:a1:e5:8b:c8:3a:cd:29:21:05:2e:
         7c:c6:cf:7e:5c:53:67:cd:52:b7:83:37:62:66:c7:cf:9e:3f:
         78:9e:0f:4b:19:7a:82:48:6c:6b:fd:74:e9:1a:f1:6b:3b:56:
         c9:48:52:cb:cb:c3:9c:c8:42:e8:a6:29:21:31:d9:9d:bc:d6:
         84:13:19:a6:47:eb:77:aa:b2:c5:a0:2e:23:07:7e:a5:c7:55:
         81:2e:a8:8e:3e:ed:45:24:ed:18:03:37:6e:84:4a:f0:9a:ba:
         17:51:b9:4b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1NkQxMTAvBgNVBAUTKENCNzlEOUJFMTBEQ0Y3MDI0NkZDNjk0NjM0NThBRUNB
MjQyNUNCOEUwHhcNMjYwODE5MDUyNjA1WhcNMjYwODI2MDUyNjA1WjAYMRYwFAYD
VQQDEw02YTg1M2U2ZC1iYTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyZ9QlblTT2D/Dv5zYBEjTeWL/TVgunh5Mz7ffsMNJMVVW65pD/En/vMyZWLM
DKrCOLSHQyG3nGjeYNpDLTdEA6ZEg+7ooELQ61NZzTkWJsJCMyyjvOxlMj0Yms01
nvxter2EzDe7lBON6BDYriK+MLu6b0pD5sekQVoE63EFACoxXpcNEP8KP5Lf6mQ7
o78KXx2rxGQpIp+sR+FbqKeLdDdFBweDOqipOr6J1BVC6cF5UFnAcpNLi+sjjfBt
DM0dd/p9FzyULj5HGayw72a1WpKvvkp/IMqvGy+79Pco9WArrnURCeOLdAYxUsAd
jsGCYgmvP5OoTFSDu15cM6y6MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCYyVzBD
LsRP0LDMwEQj2dB3uoyTMB8GA1UdIwQYMBaAFMt52b4Q3PcCRvxpRjRYrsokJcuO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzU2RC84RENBMzJDRTZC
NTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3SkdfR2xHTkZpdXlpUWx5
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kzblp2aERjOXdKR19HbEdORml1eWlRbHk0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzU2RC84RENBMzJDRTZCNTQxMUVGQjhBOEE2MUFDNEY5QUUwMi95M25admhEYzl3
SkdfR2xHTkZpdXlpUWx5NDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkYsNz4rzUUXAV6UImCMm3f07q+rmqOpVujuGEiJruHAFUoCNZr3EHuwUPzPo
SMJXHbFSiUJTuaKy6jJTx/2NBJ0a6kKmZoyvw7C3HCckTosBnMZQTkOP8t3cQ0Xu
06Rn2QcC+h2EX9Iy3GVAyHfEKukKpC2uqPFfhP+W8oBM9im4x8s/In79D4z2J6pU
d7pYWaklO7jw5Yeh5YvIOs0pIQUufMbPflxTZ81St4M3YmbHz54/eJ4PSxl6gkhs
a/106RrxaztWyUhSy8vDnMhC6KYpITHZnbzWhBMZpkfrd6qyxaAuIwd+pcdVgS6o
jj7tRSTtGAM3boRK8Jq6F1G5Sw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:37 2026 by rpki-client