Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
File:                     YGtPQu6X90iOwgtj2LGq9tQtnKc.mft (raw, json)
Hash identifier:          yPiyn2R00zZZIs+Gp00ARy8y/3Jvj07Z8O6NFEYBqQs=
Subject key identifier:   C7:28:8B:0C:21:DB:55:71:F9:86:CA:DA:91:43:CB:C2:57:C4:BE:91
Authority key identifier: 60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7
Certificate issuer:       /CN=A91523FF/serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
Manifest number:          BB
Signing time:             Thu 03 Sep 2026 07:06:49 +0000
Manifest this update:     Thu 03 Sep 2026 07:06:49 +0000
Manifest next update:     Thu 10 Sep 2026 07:06:49 +0000
Files and hashes:         1: YGtPQu6X90iOwgtj2LGq9tQtnKc.crl (hash: Tzd/F/YE2V6Y7H0XH2V0ziY1Pk60tdc4jzgigC/+14w=)
                          2: 720ED6F487CB11F0B605C67DC4F9AE02.roa (hash: DkL8mKFGzHdVRylK1rD4tLxN/q/oxjuNdQSmCvoiiL8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl
                          rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 07:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91523FF, serialNumber=606B4F42EE97F7488EC20B63D8B1AAF6D42D9CA7
        Validity
            Not Before: Sep  3 07:06:49 2026 GMT
            Not After : Sep 10 07:06:49 2026 GMT
        Subject: CN=6a991c89-acb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:d8:b4:05:6d:1f:86:eb:0e:f3:0b:84:6d:
                    d0:fa:d6:2c:92:87:e0:0e:ee:64:97:0d:3d:2c:96:
                    19:9c:17:18:80:21:47:6d:c4:a2:8b:25:c7:42:1c:
                    69:fe:75:57:8d:49:14:36:a6:37:a5:a0:5d:f5:c0:
                    09:df:b9:e8:5f:31:9a:72:a0:f0:60:b9:1d:39:e9:
                    eb:e6:4f:c0:09:07:25:d1:7f:3c:d0:45:6e:d0:1b:
                    f7:d6:79:32:ec:1d:16:39:1a:51:ce:c2:52:e4:dc:
                    37:35:b7:39:69:eb:f7:ca:fe:59:b0:6e:3c:d7:9e:
                    7c:b5:1a:a8:e3:3d:a6:71:9f:00:50:b6:a6:d7:84:
                    ea:c9:60:e8:41:43:15:a2:44:d3:d7:a9:41:fa:66:
                    8b:92:79:71:03:8b:0e:c9:a7:fb:e7:f8:69:2b:22:
                    7a:37:ea:90:b8:27:cb:a9:e7:58:4a:a1:55:f2:c3:
                    48:07:f9:70:a7:08:ef:36:d0:93:2d:61:a4:0e:b3:
                    98:21:c9:5e:24:c4:c9:df:51:58:6b:ae:3f:1f:01:
                    3e:de:60:4a:2c:62:df:c7:d4:93:19:a0:2a:91:fc:
                    5d:90:74:d4:e1:f0:f2:16:60:2e:f9:01:46:45:58:
                    44:94:ef:3b:6e:d5:4c:5c:f7:19:2e:4d:a5:e8:86:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:28:8B:0C:21:DB:55:71:F9:86:CA:DA:91:43:CB:C2:57:C4:BE:91
            X509v3 Authority Key Identifier:
                keyid:60:6B:4F:42:EE:97:F7:48:8E:C2:0B:63:D8:B1:AA:F6:D4:2D:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGtPQu6X90iOwgtj2LGq9tQtnKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523FF/200C377A87CB11F0802B227DC4F9AE02/YGtPQu6X90iOwgtj2LGq9tQtnKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:53:ee:30:42:0a:ca:bb:59:09:c8:92:02:44:ca:66:0b:05:
         23:5b:c7:bf:62:c2:4e:c7:7a:48:7b:5c:91:bc:0e:c6:3f:ae:
         68:78:bd:3b:fa:b7:b9:ba:8f:1e:89:c0:4d:26:bc:18:ed:16:
         7a:69:3a:5c:d4:9c:9a:96:11:e4:2a:73:eb:c5:3f:ac:d3:cd:
         c2:3d:4a:e1:30:46:ec:77:83:7d:48:1d:1b:82:4f:7c:6c:d6:
         51:1a:d9:05:c6:e6:44:e0:95:c3:92:82:0f:82:33:5f:b3:ae:
         cb:f7:8a:c3:71:c6:f6:0c:56:bf:24:4b:a4:36:ef:f1:f2:e1:
         92:3a:8b:36:ab:54:6b:60:7a:c7:a6:d5:ff:f1:4b:a0:68:87:
         5a:94:05:49:8f:f1:09:f5:7f:62:08:d2:fe:56:59:6d:67:dd:
         a6:de:11:5c:8a:80:b5:af:16:1b:9a:57:7a:7b:a2:38:da:1e:
         24:08:5e:c2:3e:97:51:84:32:0c:1e:be:e5:e1:4c:05:9f:b6:
         2a:db:ad:13:25:1c:0f:50:9c:cf:49:fd:a3:9c:aa:4e:46:6b:
         a1:c0:3e:36:f8:53:67:10:a5:f8:aa:ba:3c:ed:d0:a6:09:f8:
         ae:3e:c3:b5:40:78:95:fc:e4:fe:f5:1c:8a:c3:1a:c9:6e:6a:
         21:5e:a3:5a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIzRkYxMTAvBgNVBAUTKDYwNkI0RjQyRUU5N0Y3NDg4RUMyMEI2M0Q4QjFBQUY2
RDQyRDlDQTcwHhcNMjYwOTAzMDcwNjQ5WhcNMjYwOTEwMDcwNjQ5WjAYMRYwFAYD
VQQDEw02YTk5MWM4OS1hY2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2abYtAVtH4brDvMLhG3Q+tYskofgDu5klw09LJYZnBcYgCFHbcSiiyXHQhxp
/nVXjUkUNqY3paBd9cAJ37noXzGacqDwYLkdOenr5k/ACQcl0X880EVu0Bv31nky
7B0WORpRzsJS5Nw3Nbc5aev3yv5ZsG481558tRqo4z2mcZ8AULam14TqyWDoQUMV
okTT16lB+maLknlxA4sOyaf75/hpKyJ6N+qQuCfLqedYSqFV8sNIB/lwpwjvNtCT
LWGkDrOYIcleJMTJ31FYa64/HwE+3mBKLGLfx9STGaAqkfxdkHTU4fDyFmAu+QFG
RVhElO87btVMXPcZLk2l6IZIGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcoiwwh
21Vx+YbK2pFDy8JXxL6RMB8GA1UdIwQYMBaAFGBrT0Lul/dIjsILY9ixqvbULZyn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNGRi8yMDBDMzc3QTg3
Q0IxMUYwODAyQjIyN0RDNEY5QUUwMi9ZR3RQUXU2WDkwaU93Z3RqMkxHcTl0UXRu
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHdFBRdTZYOTBpT3dndGoyTEdxOXRRdG5LYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjNGRi8yMDBDMzc3QTg3Q0IxMUYwODAyQjIyN0RDNEY5QUUwMi9ZR3RQUXU2WDkw
aU93Z3RqMkxHcTl0UXRuS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAx1PuMEIKyrtZCciSAkTKZgsFI1vHv2LCTsd6SHtckbwOxj+uaHi9O/q3ubqP
HonATSa8GO0Wemk6XNScmpYR5Cpz68U/rNPNwj1K4TBG7HeDfUgdG4JPfGzWURrZ
BcbmROCVw5KCD4IzX7Ouy/eKw3HG9gxWvyRLpDbv8fLhkjqLNqtUa2B6x6bV//FL
oGiHWpQFSY/xCfV/YgjS/lZZbWfdpt4RXIqAta8WG5pXenuiONoeJAhewj6XUYQy
DB6+5eFMBZ+2KtutEyUcD1Ccz0n9o5yqTkZrocA+NvhTZxCl+Kq6PO3Qpgn4rj7D
tUB4lfzk/vUcisMayW5qIV6jWg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:31:51 2026 by rpki-client