Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
File:                     y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft (raw, json)
Hash identifier:          HwrMmw9rVnT/W2gmfSmH/tvew9gxF4K0Ik5BfJ4DNrE=
Subject key identifier:   BD:BF:AE:96:1C:C5:E8:C2:78:58:24:8B:09:1D:69:8B:99:C4:1B:7B
Authority key identifier: CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47
Certificate issuer:       /CN=A913406B/serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
Certificate serial:       04EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
Manifest number:          04E2
Signing time:             Thu 10 Sep 2026 23:35:33 +0000
Manifest this update:     Thu 10 Sep 2026 23:35:33 +0000
Manifest next update:     Thu 17 Sep 2026 23:35:33 +0000
Files and hashes:         1: y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl (hash: c/2PGUX7y3FCvko7EHAfeVQbGEGqaSkUpEnYzdS8Lps=)
                          2: ECE5D72C7C2D11EC8CAD9662C4F9AE02.roa (hash: m8HrRpjyvQWeBhp94E8HFgt5mQuokJM0t43Pm2rxy7M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl
                          rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913406B, serialNumber=CB93F599B05E3FCB7B2124B6FC3F99CC3620F847
        Validity
            Not Before: Sep 10 23:35:33 2026 GMT
            Not After : Sep 17 23:35:33 2026 GMT
        Subject: CN=6aa33ec5-cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:40:17:d6:55:31:c5:3a:8c:0b:76:2f:a9:e4:
                    76:74:c7:36:78:be:92:31:26:a4:3e:f1:f3:34:99:
                    24:3f:e5:6e:bf:1b:65:2e:a7:8d:6d:77:04:24:c1:
                    59:38:72:35:13:60:1a:59:52:0d:c5:3b:22:9f:a1:
                    51:17:66:c7:10:82:06:8b:e6:39:36:cb:57:63:7e:
                    60:39:aa:8a:2c:20:a1:9e:29:00:19:6e:fd:c8:e8:
                    11:4b:af:39:65:5a:8a:b4:a5:8b:0c:3a:ce:e0:b9:
                    fc:6b:18:fb:57:21:8a:e0:3b:51:3b:92:cf:6b:57:
                    2a:30:91:18:51:8c:3a:d1:14:d4:2c:42:40:bc:5e:
                    c0:f5:98:31:8f:f7:a0:1b:65:7f:54:39:49:86:b6:
                    a2:05:f2:35:d5:8a:22:4f:0f:0d:a7:f6:00:9d:83:
                    e4:f2:4a:69:fd:5e:d6:26:a9:b4:c1:6b:1f:5f:1b:
                    f1:1a:e1:d7:46:cb:4f:6f:8c:1e:2b:52:a2:66:a9:
                    75:e9:4e:16:47:fa:93:16:0c:24:b4:15:c2:98:b8:
                    64:51:9a:7d:bb:aa:fe:7d:e9:48:1e:da:16:32:e8:
                    4e:d6:d9:d9:ab:fa:96:0d:e6:67:51:ac:0b:43:d9:
                    5a:30:74:20:ed:df:cb:f7:a7:86:ee:66:d9:50:77:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BF:AE:96:1C:C5:E8:C2:78:58:24:8B:09:1D:69:8B:99:C4:1B:7B
            X509v3 Authority Key Identifier:
                keyid:CB:93:F5:99:B0:5E:3F:CB:7B:21:24:B6:FC:3F:99:CC:36:20:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913406B/D63827AE7C2911EC8EE3610DC4F9AE02/y5P1mbBeP8t7ISS2_D-ZzDYg-Ec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:0b:02:d8:d5:41:dd:d1:a4:76:fe:15:52:38:7c:81:f7:
         c9:4d:07:a0:8a:91:24:0e:e5:e1:d7:7b:47:d0:ed:0e:1c:50:
         f7:46:3d:c4:3f:6d:17:4f:5c:c5:86:9a:54:bd:bc:90:62:4d:
         95:0f:c9:2d:00:de:6c:62:9b:ea:af:4b:68:2d:d2:ce:18:f0:
         7b:66:45:c8:b4:12:ba:39:cc:97:68:a6:5a:35:ed:cb:49:a8:
         19:7a:ed:2d:03:0e:ba:fc:ec:ac:1d:ac:f0:10:5f:c1:c7:a7:
         b9:39:20:96:4b:54:f2:5b:08:e1:7c:18:e9:dd:ae:82:ba:64:
         82:e9:c4:06:19:19:47:41:21:c3:28:19:48:75:d4:00:e4:af:
         43:d2:ef:65:2b:bf:9d:27:11:45:f1:f2:11:88:14:0e:65:a0:
         fe:32:9f:12:92:4c:90:79:4b:57:05:41:9d:39:2f:33:41:22:
         3d:5c:82:54:de:45:2f:48:b9:4a:30:59:e9:5d:97:14:06:65:
         a6:d1:a7:4c:b7:5c:2d:11:af:0c:df:d3:dc:62:b5:c5:d2:8b:
         4e:7a:8c:cc:ca:14:23:46:eb:fd:52:3a:14:00:e2:01:b8:47:
         cc:56:77:b0:43:2d:1d:de:35:1a:86:f2:87:89:0b:c1:a6:a6:
         09:e5:49:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQwNkIxMTAvBgNVBAUTKENCOTNGNTk5QjA1RTNGQ0I3QjIxMjRCNkZDM0Y5OUND
MzYyMEY4NDcwHhcNMjYwOTEwMjMzNTMzWhcNMjYwOTE3MjMzNTMzWjAYMRYwFAYD
VQQDEw02YWEzM2VjNS1jYzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk0AX1lUxxTqMC3YvqeR2dMc2eL6SMSakPvHzNJkkP+VuvxtlLqeNbXcEJMFZ
OHI1E2AaWVINxTsin6FRF2bHEIIGi+Y5NstXY35gOaqKLCChnikAGW79yOgRS685
ZVqKtKWLDDrO4Ln8axj7VyGK4DtRO5LPa1cqMJEYUYw60RTULEJAvF7A9Zgxj/eg
G2V/VDlJhraiBfI11YoiTw8Np/YAnYPk8kpp/V7WJqm0wWsfXxvxGuHXRstPb4we
K1KiZql16U4WR/qTFgwktBXCmLhkUZp9u6r+felIHtoWMuhO1tnZq/qWDeZnUawL
Q9laMHQg7d/L96eG7mbZUHfvtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2/rpYc
xejCeFgkiwkdaYuZxBt7MB8GA1UdIwQYMBaAFMuT9ZmwXj/LeyEktvw/mcw2IPhH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDA2Qi9ENjM4MjdBRTdD
MjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4dDdJU1MyX0QtWnpEWWct
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k1UDFtYkJlUDh0N0lTUzJfRC1aekRZZy1FYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDA2Qi9ENjM4MjdBRTdDMjkxMUVDOEVFMzYxMERDNEY5QUUwMi95NVAxbWJCZVA4
dDdJU1MyX0QtWnpEWWctRWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjFALAtjVQd3RpHb+FVI4fIH3yU0HoIqRJA7l4dd7R9DtDhxQ90Y9xD9tF09c
xYaaVL28kGJNlQ/JLQDebGKb6q9LaC3Szhjwe2ZFyLQSujnMl2imWjXty0moGXrt
LQMOuvzsrB2s8BBfwcenuTkglktU8lsI4XwY6d2ugrpkgunEBhkZR0EhwygZSHXU
AOSvQ9LvZSu/nScRRfHyEYgUDmWg/jKfEpJMkHlLVwVBnTkvM0EiPVyCVN5FL0i5
SjBZ6V2XFAZlptGnTLdcLRGvDN/T3GK1xdKLTnqMzMoUI0br/VI6FADiAbhHzFZ3
sEMtHd41Gobyh4kLwaamCeVJlw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 06:16:05 2026 by rpki-client