Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
File:                     yGngpTh1_BJZeGtSfmeEy_H4m0A.mft (raw, json)
Hash identifier:          A9I6US6nmlAXy8D6my7sBpX7MUW5xhY/hHXA5CZt8Rg=
Subject key identifier:   D1:39:20:FB:4F:2B:52:ED:D1:78:34:1B:A4:08:9C:85:F5:08:A7:43
Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40
Certificate issuer:       /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
Certificate serial:       0C76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
Manifest number:          0C58
Signing time:             Thu 10 Sep 2026 18:41:58 +0000
Manifest this update:     Thu 10 Sep 2026 18:41:57 +0000
Manifest next update:     Thu 17 Sep 2026 18:41:57 +0000
Files and hashes:         1: yGngpTh1_BJZeGtSfmeEy_H4m0A.crl (hash: IAlsb1lBEVHx1k2Lh67A5XTv7pbyNfAAY5dh637zIuc=)
                          2: 736F8DBA819311EB8964C17EC4F9AE02.roa (hash: iYKsxDWu3S2WTBmkPPCzWiLUj+VpiqqOdy4MbHyYgYs=)
                          3: 72CF780C819311EB8964C17EC4F9AE02.roa (hash: ltYps8if0G6nvc97HNna0dOwk3QKPLcJcqz29XZNF8A=)
                          4: B81176247CC811EBAAFADC27C4F9AE02.roa (hash: NNkPApcMl17Fe2ICzZKJl1AOkbO+YYiI8uoP32kJG3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl
                          rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 15:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3190 (0xc76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC3E, serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40
        Validity
            Not Before: Sep 10 18:41:57 2026 GMT
            Not After : Sep 17 18:41:57 2026 GMT
        Subject: CN=6aa2f9f6-3ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:03:ba:69:2d:73:11:77:e8:3e:db:c0:fb:
                    66:14:f6:13:98:9c:c9:76:1a:fe:34:9c:fb:25:91:
                    b3:03:3f:46:06:12:bb:9a:e5:2f:59:bc:b1:0e:6b:
                    ec:00:a7:b3:a4:b6:b0:a0:8e:46:f1:8f:eb:5d:f9:
                    9a:af:de:e5:61:4b:85:ef:35:0f:72:d6:a8:f0:62:
                    65:27:88:d2:62:d8:fa:e7:70:ef:8e:35:4d:f6:03:
                    29:4e:87:7e:a7:e8:0a:4e:9d:3d:e1:0d:3f:ec:4e:
                    78:d8:cb:89:8b:fb:0c:3c:fa:ea:f5:4b:29:b7:de:
                    64:29:dc:7c:1b:e8:a5:17:3c:bd:a9:32:5d:75:97:
                    07:0b:db:ed:42:b5:4b:27:35:e8:6d:19:ad:2a:85:
                    df:4b:21:62:cc:0a:a5:1f:34:f9:5c:8b:72:18:b3:
                    68:41:44:ff:9b:06:3f:28:ae:8d:f7:de:7b:f1:28:
                    3e:68:f1:56:53:7f:c1:c7:0b:89:31:9a:d2:19:f1:
                    3b:53:c9:3f:25:24:b7:e0:11:00:7b:85:e1:36:ef:
                    ba:a3:f1:f7:c2:98:d7:c4:a3:79:92:7c:19:12:4b:
                    e4:60:86:9c:c3:b7:62:cd:11:d8:df:bc:33:66:e1:
                    b8:c6:f8:44:aa:e4:b0:e4:99:94:42:1d:09:fe:24:
                    f8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:20:FB:4F:2B:52:ED:D1:78:34:1B:A4:08:9C:85:F5:08:A7:43
            X509v3 Authority Key Identifier:
                keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:bf:54:12:f6:c4:18:bf:44:c1:ab:23:b3:c9:bc:0e:5c:
         02:2a:d3:73:54:d4:9d:c3:a6:84:9f:99:e1:81:1b:52:4d:a3:
         d1:0a:71:62:f5:0a:20:8d:d1:6f:47:6e:8b:64:a4:98:64:e9:
         4a:e1:cc:b7:e1:4a:13:14:b3:78:8f:e8:29:aa:d1:b4:b0:64:
         78:e9:f3:0d:f7:c6:e9:7c:ee:b1:a2:43:21:90:93:01:8d:c3:
         28:89:73:06:cc:b8:14:10:72:08:08:68:1e:27:4f:08:dc:57:
         cb:db:fb:26:26:fc:b6:33:f1:97:50:72:fc:27:15:11:ea:9f:
         bb:45:9a:aa:ee:68:b2:13:c9:c6:88:07:f0:82:e1:3e:df:c1:
         b4:b9:8d:dc:ac:8b:fc:62:80:59:63:95:ca:43:7d:98:24:46:
         24:cf:0e:6d:a7:79:ed:6c:b6:81:c7:34:c6:87:9a:b3:e7:5e:
         88:5f:6d:eb:90:9b:7a:0e:2f:a0:b0:5f:07:80:ed:32:86:4a:
         4f:5c:a8:b3:86:9c:49:4d:0e:e4:a5:33:4e:6f:c8:08:0b:ea:
         91:fd:48:0e:5a:66:a0:70:3b:d1:4c:a1:7f:68:8f:71:05:15:
         b0:b1:b8:0e:03:95:7a:b6:33:75:7b:53:7e:97:e1:69:38:75:
         bd:62:f6:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC
RjFGODlCNDAwHhcNMjYwOTEwMTg0MTU3WhcNMjYwOTE3MTg0MTU3WjAYMRYwFAYD
VQQDEw02YWEyZjlmNi0zZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMEDumktcxF36D7bwPtmFPYTmJzJdhr+NJz7JZGzAz9GBhK7muUvWbyxDmvs
AKezpLawoI5G8Y/rXfmar97lYUuF7zUPctao8GJlJ4jSYtj653DvjjVN9gMpTod+
p+gKTp094Q0/7E542MuJi/sMPPrq9Uspt95kKdx8G+ilFzy9qTJddZcHC9vtQrVL
JzXobRmtKoXfSyFizAqlHzT5XItyGLNoQUT/mwY/KK6N99578Sg+aPFWU3/BxwuJ
MZrSGfE7U8k/JSS34BEAe4XhNu+6o/H3wpjXxKN5knwZEkvkYIacw7dizRHY37wz
ZuG4xvhEquSw5JmUQh0J/iT4fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNE5IPtP
K1Lt0Xg0G6QInIX1CKdDMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz
QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUMzRS8wRjUwRTAzNjMzQkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9C
SlplR3RTZm1lRXlfSDRtMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANQ6/VBL2xBi/RMGrI7PJvA5cAirTc1TUncOmhJ+Z4YEbUk2j0QpxYvUKII3R
b0dui2SkmGTpSuHMt+FKExSzeI/oKarRtLBkeOnzDffG6XzusaJDIZCTAY3DKIlz
Bsy4FBByCAhoHidPCNxXy9v7Jib8tjPxl1By/CcVEeqfu0Waqu5oshPJxogH8ILh
Pt/BtLmN3KyL/GKAWWOVykN9mCRGJM8Obad57Wy2gcc0xoeas+deiF9t65Cbeg4v
oLBfB4DtMoZKT1yos4acSU0O5KUzTm/ICAvqkf1IDlpmoHA70Uyhf2iPcQUVsLG4
DgOVerYzdXtTfpfhaTh1vWL2BQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:25 2026 by rpki-client