Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
File:                     Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft (raw, json)
Hash identifier:          DzjkmHC9ybcLZpuzXOf+y8dpqkq4uuCo2ADcVkOfgXQ=
Subject key identifier:   A8:39:07:7C:9C:42:9C:7E:C3:E4:40:20:80:1A:7E:BB:D8:D0:C3:1F
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
Manifest number:          35C2
Signing time:             Sat 22 Aug 2026 15:15:53 +0000
Manifest this update:     Sat 22 Aug 2026 15:15:52 +0000
Manifest next update:     Sat 29 Aug 2026 15:15:52 +0000
Files and hashes:         1: Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl (hash: 5H4/JXj7CzZ4BZedC6iIYHyupZdS6tETJfaNMgLyPXM=)
                          2: EA6E0AAC50D411F18B34A857BE833773.roa (hash: OEoll2QdrXXA0K9ht1DiuZRtdqA89xzzL49jYr5VTFI=)
                          3: 93441F8211CB11EEB8151734C4F9AE02.roa (hash: CujlrPZRzwdLdoypUA6XG0sSyWx22QqMi3Wunv/TANU=)
                          4: 7BAC7A5621D411F199DF6C46233D8C67.roa (hash: /mDg6LUZzeHlaNJOXKegHskznJoBNs4nZJuthgsnsWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
                          rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13864 (0x3628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76, serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: Aug 22 15:15:52 2026 GMT
            Not After : Aug 29 15:15:52 2026 GMT
        Subject: CN=6a89bd28-8319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:d5:15:15:ae:fc:2a:c7:b2:ed:26:39:e8:
                    bf:ff:22:51:7e:76:7c:41:f7:a1:5d:5a:01:f7:0f:
                    a1:7a:01:2c:4e:57:10:38:64:fd:8a:7f:1f:59:47:
                    2c:59:69:4d:48:41:0d:8b:6e:86:1f:81:19:44:40:
                    0c:a9:60:34:6f:ff:bf:2e:b5:18:03:7e:f2:e1:e8:
                    03:49:fd:11:f9:57:6b:6c:4c:d0:0f:34:81:d1:ef:
                    6c:d0:58:c8:c7:13:ee:1a:78:d7:9e:c5:c3:24:25:
                    8d:ca:c9:7b:d5:80:31:cf:65:3a:68:c7:1e:ed:bb:
                    a7:22:cd:b7:67:13:8b:7a:60:14:92:c2:68:f3:a8:
                    1c:6a:ed:81:41:be:5e:0c:34:28:bc:bf:14:f3:3c:
                    fd:b4:3e:fc:29:c1:6a:90:3d:18:cd:ad:9d:45:0f:
                    51:01:ff:d6:a2:db:fb:c9:19:1e:13:a0:35:03:e1:
                    8d:05:fc:b3:f2:57:21:0b:09:f9:2f:a0:41:f1:d8:
                    87:90:d6:29:eb:29:1f:74:53:98:4f:70:1c:df:21:
                    91:1a:cd:d6:73:ce:de:c4:9b:b2:6c:83:d6:a8:c6:
                    60:a0:6d:12:59:07:25:97:28:1c:a0:88:4a:31:84:
                    eb:e3:7e:ef:ea:6b:a2:3c:77:d3:66:2a:7a:b6:47:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:07:7C:9C:42:9C:7E:C3:E4:40:20:80:1A:7E:BB:D8:D0:C3:1F
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5a:1d:b9:8a:35:c4:95:07:20:23:50:25:50:dc:03:1a:30:
         e4:cc:da:81:ba:7a:5f:c2:d3:72:e6:b0:5a:d5:38:cd:f6:5c:
         7b:f2:ef:8c:03:99:5b:3d:b4:d4:f2:21:9b:77:3a:02:99:f4:
         a5:d4:9d:c2:08:17:58:cb:3b:89:e4:6b:c5:b7:28:96:df:b6:
         79:e8:c0:7d:93:7a:92:76:82:ee:52:80:9c:45:5d:1b:a2:71:
         79:5a:b8:2d:d2:af:c4:8f:cb:6f:ab:59:f4:21:0d:a4:53:f8:
         1c:2f:6b:c3:ba:c6:8c:50:62:92:21:e9:be:21:79:42:5c:bc:
         4c:57:ee:4b:fa:4c:2b:6c:fe:37:f9:50:f9:b0:bd:81:77:4a:
         da:37:1a:23:70:da:d6:2c:b6:37:d2:f5:d9:65:2c:f5:ca:71:
         7e:57:0f:f7:a6:95:c5:71:96:ae:b5:4b:f7:46:44:f1:9a:f4:
         09:fb:5a:d9:cf:74:3d:1e:ef:bb:b4:53:38:08:ae:31:6c:b8:
         59:0b:65:71:0f:f8:bb:f7:52:80:32:96:68:56:91:a1:65:8e:
         46:4b:9a:8e:d0:90:3f:09:27:d2:24:d9:51:9f:00:44:8c:91:
         95:97:92:72:8c:1b:5f:35:ad:c6:45:bf:21:1c:10:a3:95:31:
         bf:c5:21:1d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjYwODIyMTUxNTUyWhcNMjYwODI5MTUxNTUyWjAYMRYwFAYD
VQQDEw02YTg5YmQyOC04MzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA41/VFRWu/CrHsu0mOei//yJRfnZ8QfehXVoB9w+hegEsTlcQOGT9in8fWUcs
WWlNSEENi26GH4EZREAMqWA0b/+/LrUYA37y4egDSf0R+VdrbEzQDzSB0e9s0FjI
xxPuGnjXnsXDJCWNysl71YAxz2U6aMce7bunIs23ZxOLemAUksJo86gcau2BQb5e
DDQovL8U8zz9tD78KcFqkD0Yza2dRQ9RAf/Wotv7yRkeE6A1A+GNBfyz8lchCwn5
L6BB8diHkNYp6ykfdFOYT3Ac3yGRGs3Wc87exJuybIPWqMZgoG0SWQcllygcoIhK
MYTr437v6muiPHfTZip6tkdovwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKg5B3yc
Qpx+w+RAIIAafrvY0MMfMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkY3Ni85NDRFMzg5MjFEQUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJx
VVJCLW5FREM4UVdPQ1BoVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcloduYo1xJUHICNQJVDcAxow5Mzagbp6X8LTcuawWtU4zfZce/LvjAOZWz20
1PIhm3c6Apn0pdSdwggXWMs7ieRrxbcolt+2eejAfZN6knaC7lKAnEVdG6JxeVq4
LdKvxI/Lb6tZ9CENpFP4HC9rw7rGjFBikiHpviF5Qly8TFfuS/pMK2z+N/lQ+bC9
gXdK2jcaI3Da1iy2N9L12WUs9cpxflcP96aVxXGWrrVL90ZE8Zr0Cfta2c90PR7v
u7RTOAiuMWy4WQtlcQ/4u/dSgDKWaFaRoWWORkuajtCQPwkn0iTZUZ8ARIyRlZeS
cowbXzWtxkW/IRwQo5Uxv8UhHQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 00:20:20 2026 by rpki-client