Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
File:                     YG8zS36AA6PIIdDJhBmzFDqaPks.mft (raw, json)
Hash identifier:          AMI7fOBlWsvgMWU0ikqcSpkJ3Y6hM2o7q4LVBnbjf4U=
Subject key identifier:   3B:06:6A:06:AB:AB:6C:CA:94:D5:DE:39:40:4A:A3:52:9A:44:0E:0B
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       07BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
Manifest number:          07A9
Signing time:             Sat 04 Apr 2026 21:16:36 +0000
Manifest this update:     Sat 04 Apr 2026 21:16:36 +0000
Manifest next update:     Sat 11 Apr 2026 21:16:36 +0000
Files and hashes:         1: YG8zS36AA6PIIdDJhBmzFDqaPks.crl (hash: d6lj6fychxM5tb68ar6wF4vYi5nq54OSXj/5A7Wf5r8=)
                          2: B5A6B25A429411EB9D08C02FC4F9AE02.roa (hash: 6eb0nEsPYVrqJ2wcbhkcoiDXoGo8q5W0OLRrGCG5dLY=)
                          3: B63DEA3A429411EB9D08C02FC4F9AE02.roa (hash: Crdi+zKRWevIXp0SsgooUD494qosGjHbDXZ9Zp1sgkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
                          rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D, serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
        Validity
            Not Before: Apr  4 21:16:36 2026 GMT
            Not After : Apr 11 21:16:36 2026 GMT
        Subject: CN=69d17fb4-df8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:ed:54:69:12:3e:13:36:7a:48:36:82:cd:
                    0a:83:88:d2:d1:47:41:44:e6:27:1c:d9:cd:46:c5:
                    ef:8a:7a:68:96:b6:fe:04:7e:f9:df:0c:df:3d:d2:
                    d4:48:ce:a8:bb:cf:ce:8a:44:49:14:5f:0f:37:b9:
                    e6:2c:f8:12:f7:a4:cd:fc:e4:d2:4c:65:77:2e:ca:
                    5d:ee:92:77:35:47:8d:2a:af:24:67:d3:e2:bc:4d:
                    0f:e7:e8:c9:0e:6e:60:d8:66:15:d8:ee:a0:ce:b5:
                    7b:2f:94:35:c8:4f:fe:c9:f0:5c:e3:b6:07:c8:9d:
                    b9:86:38:24:72:9a:66:69:90:fb:5c:49:bd:03:05:
                    df:2f:53:7c:cd:ed:0b:27:ff:08:a4:c7:94:af:88:
                    86:84:10:b9:68:53:c4:90:0c:22:96:2e:05:64:96:
                    9a:0b:0d:15:f8:4c:e6:76:0d:60:67:93:fa:a2:8b:
                    d4:ce:4c:36:be:7a:a4:a5:15:63:e9:df:b7:8a:8e:
                    96:fe:55:33:32:99:1f:d0:78:67:34:dd:f5:d0:2c:
                    83:80:7e:d1:aa:5e:88:ab:94:88:66:7f:17:90:b2:
                    69:ee:35:65:e3:14:55:eb:79:47:72:72:c7:cc:47:
                    d1:79:a4:74:15:eb:c4:4f:9d:bd:12:13:e6:36:44:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:6A:06:AB:AB:6C:CA:94:D5:DE:39:40:4A:A3:52:9A:44:0E:0B
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cf:33:ca:92:7b:b7:99:08:b3:80:0e:d9:e0:87:ec:4c:4f:
         95:c7:9c:bb:a9:fb:16:65:7a:e8:b3:3c:32:21:63:cc:43:d1:
         ff:c9:62:88:6d:3e:fb:3c:cc:37:d8:ff:23:97:4d:e9:fb:85:
         8e:9f:ac:7d:80:31:e3:49:2a:02:e4:38:e0:3f:f3:a4:f4:00:
         7a:06:c2:66:cd:0e:38:69:8c:13:92:ec:32:46:17:75:20:fc:
         b4:70:11:8b:e3:8e:af:84:c0:25:36:f3:2f:53:b5:6e:62:4b:
         53:4b:43:8e:00:c6:b6:e5:cb:04:32:66:11:b6:b4:1c:05:02:
         6a:a1:c4:0a:d9:d0:0c:5f:d9:97:37:cb:ec:d9:79:e6:fd:ed:
         ef:ab:15:7c:95:0d:bc:89:fc:be:1d:e7:97:4c:f8:8e:fd:0d:
         94:08:50:f1:b8:5f:66:9e:b0:2b:b3:7e:60:b7:34:85:9c:43:
         d5:88:1e:51:7e:37:89:75:6f:b9:54:d3:31:a0:d2:b3:ea:6b:
         81:2c:96:13:a5:19:b9:84:b5:31:1b:ff:dd:45:80:8c:ce:58:
         17:4a:44:31:38:ba:a5:5c:53:4d:bd:42:ac:15:b4:5b:53:82:
         bd:48:55:15:54:a6:5e:14:29:a1:1b:50:52:ad:b9:e4:37:42:
         c0:1b:71:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE4OEQxMTAvBgNVBAUTKDYwNkYzMzRCN0U4MDAzQTNDODIxRDBDOTg0MTlCMzE0
M0E5QTNFNEIwHhcNMjYwNDA0MjExNjM2WhcNMjYwNDExMjExNjM2WjAYMRYwFAYD
VQQDEw02OWQxN2ZiNC1kZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3wftVGkSPhM2ekg2gs0Kg4jS0UdBROYnHNnNRsXvinpolrb+BH753wzfPdLU
SM6ou8/OikRJFF8PN7nmLPgS96TN/OTSTGV3Lspd7pJ3NUeNKq8kZ9PivE0P5+jJ
Dm5g2GYV2O6gzrV7L5Q1yE/+yfBc47YHyJ25hjgkcppmaZD7XEm9AwXfL1N8ze0L
J/8IpMeUr4iGhBC5aFPEkAwili4FZJaaCw0V+Ezmdg1gZ5P6oovUzkw2vnqkpRVj
6d+3io6W/lUzMpkf0HhnNN310CyDgH7Rql6Iq5SIZn8XkLJp7jVl4xRV63lHcnLH
zEfReaR0FevET529EhPmNkSwEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsGagar
q2zKlNXeOUBKo1KaRA4LMB8GA1UdIwQYMBaAFGBvM0t+gAOjyCHQyYQZsxQ6mj5L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTg4RC9GMEYxOUYyMDQy
OTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2UElJZERKaEJtekZEcWFQ
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHOHpTMzZBQTZQSUlkREpoQm16RkRxYVBrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTg4RC9GMEYxOUYyMDQyOTIxMUVCOEQ5RkRFMkRDNEY5QUUwMi9ZRzh6UzM2QUE2
UElJZERKaEJtekZEcWFQa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiM8zypJ7t5kIs4AO2eCH7ExPlcecu6n7FmV66LM8MiFjzEPR/8liiG0++zzM
N9j/I5dN6fuFjp+sfYAx40kqAuQ44D/zpPQAegbCZs0OOGmME5LsMkYXdSD8tHAR
i+OOr4TAJTbzL1O1bmJLU0tDjgDGtuXLBDJmEba0HAUCaqHECtnQDF/ZlzfL7Nl5
5v3t76sVfJUNvIn8vh3nl0z4jv0NlAhQ8bhfZp6wK7N+YLc0hZxD1YgeUX43iXVv
uVTTMaDSs+prgSyWE6UZuYS1MRv/3UWAjM5YF0pEMTi6pVxTTb1CrBW0W1OCvUhV
FVSmXhQpoRtQUq255DdCwBtx8w==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:08 2026 by rpki-client