Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          d1/CXMrWjafeX759yHlFKUIK0rE3fdqv/ZQKWqXh2rY=
Subject key identifier:   FD:D3:2E:B0:58:75:6E:3B:3D:01:35:D7:2A:B4:E8:4D:8C:1C:C1:D5
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0725
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0663
Signing time:             Mon 14 Sep 2026 22:36:12 +0000
Manifest this update:     Mon 14 Sep 2026 22:36:12 +0000
Manifest next update:     Mon 21 Sep 2026 22:36:12 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: 3SXtvlynzZQflf75B02x0qvrjNJU/CAYkvNG1tzpqlo=)
                          2: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: yDyFhacoRHxiPGknJ0mgO/37kULvXy/vpyy7xuwfubc=)
                          3: 0BE2C2AE36D111F1B4901F67AE833773.roa (hash: /OgpFRh5NEAU3z4wwECmDgcOT565YH6iPJyK+iNYSGM=)
                          4: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: CQrq+NiLvVYKAgaoEAHrvb21lZZoBmbhEQ+h41OOoGc=)
                          5: 3B398B8A178411EC83735974C4F9AE02.roa (hash: VpETKfJnCy8IjWBOd18JxClx6aJBFefNpsEPuTPhgK8=)
                          6: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: QfgNIRVotvzOl/OtkhG76+nsJvG/v20On9wM86renGQ=)
                          7: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: +DF99Ubi5p18DFX3fy9zXroAvqR+SzPVZSDJ6eGx684=)
                          8: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: Y/kcRh9cdh4fRkGWFjsevbts3BzCqCsOpihXsbd47mU=)
                          9: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: eNh6GSQojSwJZWNPuyTqjhXY4Z0HAmSbKzGnoY8nD7A=)
                          10: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: E2OVt2t2RwL7eW2IIag4jKtOfPTzQfuNebzivsrFSS4=)
                          11: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: +IL/6i7R12qOZpauH7RSFncfC8CSU6slGsg4NRFUeQk=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: Aiyh5u8GDVLoN3Fgru0NzcB9kxObiOTjfl6VZSmSgGQ=)
                          13: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: qz8JxNgXuDID5Fu8pAdCqUZ2ItHDzr2G2xNt310Kyxo=)
                          14: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: P3doc8TT7mhfzcSps7B9O0W5pUgwSQGVyt8vLzQ3gnQ=)
                          15: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: lHkuWmke07Q2mFWhxNC8gJVF88cEoSJsFIhxbtoDZqI=)
                          16: DA504F0E175911EC87322F85C4F9AE02.roa (hash: fBWTjHPBb9W8ORcqqmeo2+AlFAMHhNrE1/hdXfgEV54=)
                          17: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: BEIgK3O7SaFfmvnXuudxvNqnEJFGtTYbWVAvUD/sJ80=)
                          18: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: w37EL0tDFGT/iQwVZqrRmtYEMaPOpCjLT7Den89y7yk=)
                          19: 3BE907D6178411EC83735974C4F9AE02.roa (hash: LapSxfvv7t72TR7bD/JuXkQOXoQJku5oYR+x3zF+4Gk=)
                          20: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: 76lRYOMfjkUMm+Un1zeocycozFiB0INpBONXd9P7hPY=)
                          21: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: was++B3SwvJo/jYlrUZOE1nul8ZmbRH0XpfbBmWRHUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Sep 14 22:36:12 2026 GMT
            Not After : Sep 21 22:36:12 2026 GMT
        Subject: CN=6aa876dc-8b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:89:23:82:6d:05:54:25:03:af:4d:89:66:
                    a1:b3:61:88:f1:ad:f2:29:0c:40:a8:ca:e7:52:a5:
                    6a:2a:d4:10:50:a5:de:9d:2b:ac:da:7c:4d:01:20:
                    26:d7:f2:4e:b2:2c:7a:fd:87:d9:48:85:3f:0a:fd:
                    3f:f3:d3:2a:9a:6a:2f:a7:2e:da:3e:53:3c:70:23:
                    e5:c1:97:a7:54:fa:1c:fd:84:6d:99:a1:c0:07:0a:
                    72:f9:7f:e6:e8:93:53:74:82:5a:49:1d:1e:98:09:
                    51:99:85:23:43:aa:96:4c:63:30:34:b9:73:3e:8e:
                    d4:34:76:8b:96:ea:a0:73:7b:b0:3b:d5:dd:59:25:
                    41:d6:59:96:38:de:f5:e7:c3:9d:b0:92:05:f6:2f:
                    fc:48:c5:60:7b:a0:07:6e:59:d5:68:ba:8e:70:b3:
                    80:02:3c:a6:06:2f:68:8a:f4:fd:6a:39:d8:e9:db:
                    80:a4:cf:32:a5:2b:56:56:e4:80:2f:62:e5:f3:4a:
                    22:65:a6:c3:66:ee:1c:3d:53:d6:d4:75:fc:e6:33:
                    35:40:4b:31:c9:95:51:c8:3e:25:a3:8a:ef:d0:1b:
                    9a:d4:9f:7e:75:bf:e6:47:93:4a:a5:a4:6c:5c:ac:
                    bf:52:e2:fa:f5:dd:ff:75:d3:9f:43:c5:ba:2c:d4:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D3:2E:B0:58:75:6E:3B:3D:01:35:D7:2A:B4:E8:4D:8C:1C:C1:D5
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:08:4c:c3:88:4b:69:18:84:2f:39:ce:cd:ce:1b:cb:b5:71:
         63:d9:2f:e7:5d:86:32:48:cf:e5:e8:4a:22:b8:8a:99:e8:e6:
         8d:98:55:34:79:40:97:67:21:f4:a9:05:10:99:4c:ec:de:41:
         65:23:49:8b:7a:3b:2d:9a:90:77:63:8f:e1:94:77:8a:15:b2:
         db:1c:03:6e:92:ac:47:a7:9a:17:7c:e5:ab:ff:4a:31:c0:1f:
         26:1a:23:4b:60:15:2e:60:a8:78:d3:74:b0:95:13:d0:64:49:
         20:59:a0:21:0c:3e:7d:c1:ac:1d:b3:c0:8a:60:16:6a:7d:9e:
         63:7f:4a:8e:b5:d6:d0:52:3a:9a:4b:31:71:ab:b9:20:e0:03:
         84:d3:65:b6:ac:03:ee:cc:7e:0b:ef:45:a1:a4:42:7d:e6:c6:
         bf:3b:07:86:d7:25:46:5e:2f:ca:c7:c8:05:bf:e1:a4:05:50:
         11:3e:aa:5e:41:79:61:d8:ee:40:db:f6:cc:e9:00:5f:87:35:
         47:b0:85:fb:2b:ff:57:73:d3:2a:17:29:e2:12:bc:b0:78:67:
         4b:01:44:8a:d5:9c:7a:a9:60:aa:27:3a:55:11:57:c5:33:fd:
         41:20:85:9b:5b:50:54:27:44:6b:3b:09:8d:ba:bb:2b:eb:00:
         6b:98:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 08:10:12 2026 by rpki-client