Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File:                     Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier:          TlwIyq+FKG162J573zxqYeN3jPukBzRd1lXNPio5b2I=
Subject key identifier:   11:4E:4E:DA:63:FA:75:C6:AF:1A:77:2F:80:9D:9B:96:4B:55:31:3D
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer:       /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial:       06A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number:          069A
Signing time:             Mon 31 Aug 2026 22:24:57 +0000
Manifest this update:     Mon 31 Aug 2026 22:24:57 +0000
Manifest next update:     Mon 07 Sep 2026 22:24:57 +0000
Files and hashes:         1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: wH783CDZqb1cpXt5d9Tw8AbWGgDNzEYFYPCCv6ykbHs=)
                          2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
                          rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 22:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699 (0x6a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
        Validity
            Not Before: Aug 31 22:24:57 2026 GMT
            Not After : Sep  7 22:24:57 2026 GMT
        Subject: CN=6a95ff39-a0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:63:b4:a5:bf:91:9d:a6:98:20:7f:62:30:
                    b0:2e:4c:8b:dc:06:03:1e:02:26:33:19:a7:ed:9e:
                    ce:35:92:66:7e:43:ab:65:eb:ee:6b:b3:c0:f3:51:
                    2f:aa:04:3e:05:dc:3f:d1:ad:82:f4:da:e1:25:81:
                    e5:0d:a6:bc:30:da:7e:b9:94:8c:af:b3:17:29:d3:
                    1a:23:03:35:87:b5:b4:37:4a:94:a1:1c:46:f7:bf:
                    a5:8f:df:55:74:83:67:28:20:7b:bf:e1:a1:94:a7:
                    2f:e7:a9:e1:bc:15:e3:d0:64:ce:b4:a3:0b:5c:0e:
                    19:1b:6d:9c:d4:4b:69:fd:e4:12:d3:05:15:1b:18:
                    e8:ed:3d:ec:c9:a5:c8:39:eb:f9:28:26:c2:e0:66:
                    d7:21:c0:2f:89:66:e3:0b:90:8d:fc:2c:ec:85:88:
                    e3:63:fa:13:65:04:c8:36:c4:19:a7:72:31:df:8d:
                    20:e0:09:ad:a4:63:4f:30:64:bd:eb:27:1e:9c:a7:
                    81:54:52:9a:5c:2e:f5:73:46:8a:2f:f5:05:6c:2c:
                    38:d0:b9:c7:9d:59:fd:d2:e5:f2:ef:b9:07:8a:e5:
                    d3:42:a3:01:2a:0d:a8:1c:4a:b6:33:7c:37:78:f3:
                    62:37:57:e4:47:b6:74:be:09:b4:ac:26:c8:a5:66:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:4E:DA:63:FA:75:C6:AF:1A:77:2F:80:9D:9B:96:4B:55:31:3D
            X509v3 Authority Key Identifier:
                keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:96:28:4d:5b:78:cd:2e:f5:f5:b9:46:4a:ac:56:3a:53:78:
         f9:85:8a:9c:9c:3f:82:08:ad:4a:73:a2:7f:a3:7c:4a:b1:12:
         e6:eb:6d:45:f6:be:c2:20:d9:77:c3:01:bc:51:fc:02:ea:38:
         aa:a9:f8:3a:eb:dd:43:e0:b8:0a:94:4f:ed:45:40:e1:f6:a0:
         e2:51:2b:56:fc:48:9e:44:20:d2:31:c9:c0:0d:a4:52:8e:0d:
         3f:fe:de:a2:bc:bd:dc:0b:6e:9f:17:ff:7d:ca:6f:08:6c:8d:
         21:44:63:45:27:7f:8a:2e:88:d1:19:ea:65:96:8c:6e:97:58:
         8c:55:f2:f6:4a:df:83:1a:44:95:28:d8:56:29:0b:50:e0:9c:
         19:c2:d8:e4:24:76:fb:68:bb:1d:88:f8:27:17:b7:e2:ec:65:
         a3:bf:86:59:80:eb:3f:43:09:f9:d8:a1:78:7c:d2:03:a6:e8:
         75:3e:ed:84:75:fc:ba:f0:30:7a:7d:92:5e:8c:75:6c:e7:35:
         d2:e1:49:46:a9:68:e9:20:12:58:2a:28:7b:40:98:6d:3a:18:
         e5:6c:78:79:31:76:b4:60:a4:7a:84:36:4f:d6:86:11:ad:3c:
         67:a1:c4:3c:31:83:14:ad:3f:ac:63:8e:77:7d:6b:6b:f1:c3:
         d2:ff:bc:0a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCNTgxMTAvBgNVBAUTKDYzRTQ4NzYyQTg5MzA4MDk2NzczRDlFMUM5RDFBOTk5
ODAzNTY3MEQwHhcNMjYwODMxMjIyNDU3WhcNMjYwOTA3MjIyNDU3WjAYMRYwFAYD
VQQDEw02YTk1ZmYzOS1hMGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArexjtKW/kZ2mmCB/YjCwLkyL3AYDHgImMxmn7Z7ONZJmfkOrZevua7PA81Ev
qgQ+Bdw/0a2C9NrhJYHlDaa8MNp+uZSMr7MXKdMaIwM1h7W0N0qUoRxG97+lj99V
dINnKCB7v+GhlKcv56nhvBXj0GTOtKMLXA4ZG22c1Etp/eQS0wUVGxjo7T3syaXI
Oev5KCbC4GbXIcAviWbjC5CN/CzshYjjY/oTZQTINsQZp3Ix340g4AmtpGNPMGS9
6ycenKeBVFKaXC71c0aKL/UFbCw40LnHnVn90uXy77kHiuXTQqMBKg2oHEq2M3w3
ePNiN1fkR7Z0vgm0rCbIpWZEJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFOTtpj
+nXGrxp3L4Cdm5ZLVTE9MB8GA1UdIwQYMBaAFGPkh2KokwgJZ3PZ4cnRqZmANWcN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I1OC9BQUMyMUM3RUNB
QjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENBbG5jOW5oeWRHcG1ZQTFa
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ktU0hZcWlUQ0FsbmM5bmh5ZEdwbVlBMVp3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0I1OC9BQUMyMUM3RUNBQjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENB
bG5jOW5oeWRHcG1ZQTFadzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhJYoTVt4zS719blGSqxWOlN4+YWKnJw/ggitSnOif6N8SrES5uttRfa+wiDZ
d8MBvFH8Auo4qqn4OuvdQ+C4CpRP7UVA4fag4lErVvxInkQg0jHJwA2kUo4NP/7e
ory93Atunxf/fcpvCGyNIURjRSd/ii6I0RnqZZaMbpdYjFXy9krfgxpElSjYVikL
UOCcGcLY5CR2+2i7HYj4Jxe34uxlo7+GWYDrP0MJ+diheHzSA6bodT7thHX8uvAw
en2SXox1bOc10uFJRqlo6SASWCooe0CYbToY5Wx4eTF2tGCkeoQ2T9aGEa08Z6HE
PDGDFK0/rGOOd31ra/HD0v+8Cg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:23 2026 by rpki-client