Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File:                     Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier:          33uIcDaFaeIc38/d5l3rRjVZP2m26hzGUTDc3/ABvSI=
Subject key identifier:   D1:B5:C1:52:13:0D:6F:2C:70:94:ED:85:C3:C9:02:B0:89:ED:5A:4B
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer:       /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number:          04B5
Signing time:             Wed 19 Aug 2026 00:14:42 +0000
Manifest this update:     Wed 19 Aug 2026 00:14:42 +0000
Manifest next update:     Wed 26 Aug 2026 00:14:42 +0000
Files and hashes:         1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: 0lfJ5NxFuqx2rBwitCrPNn/PmO0xkxd6wOXhEULeYg0=)
                          2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: UJpA5zEw7YjHmI7sbnVaspAGcZB71kOVdtEMUuEsETo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
                          rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
        Validity
            Not Before: Aug 19 00:14:42 2026 GMT
            Not After : Aug 26 00:14:42 2026 GMT
        Subject: CN=6a84f572-548a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:5a:11:52:10:69:49:d7:46:cc:c2:40:6b:
                    f4:f8:3e:44:fc:5b:62:a9:c4:a6:c8:4a:66:70:db:
                    6e:67:31:d2:be:0f:ab:39:00:a2:ce:44:f8:bf:c3:
                    bd:7f:ad:94:a0:c9:bb:b4:d1:04:eb:3f:f8:e9:52:
                    28:d4:10:20:33:49:3d:da:49:83:c6:b7:af:9e:5a:
                    74:1f:5a:b0:d3:4d:e1:27:b7:f4:ba:4f:e9:c2:88:
                    a5:94:00:26:57:39:7e:4b:d5:79:2b:a9:79:8d:83:
                    eb:3b:d4:f4:cc:4b:e0:b9:82:f4:82:bd:09:22:aa:
                    29:cc:af:cb:97:82:96:2f:d6:90:6e:02:de:a7:25:
                    78:b1:df:05:cd:57:97:ab:4e:ad:0f:b6:88:90:5f:
                    00:2c:b0:53:69:48:16:10:1e:47:81:b1:9d:5e:a1:
                    1e:6a:cd:ff:65:5f:8d:71:18:4a:28:2d:67:c7:0a:
                    92:cb:a4:8e:3d:21:5a:81:58:06:21:cc:ad:cf:c0:
                    c7:95:11:f8:bc:df:ed:1a:89:63:86:1a:70:64:4b:
                    da:be:e1:c1:89:12:ac:32:79:0c:53:71:51:76:3a:
                    fc:e9:68:64:06:67:62:a2:8b:b5:ef:b8:f4:eb:1e:
                    18:20:79:e1:57:86:59:01:1c:c0:ac:8e:28:4b:47:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:C1:52:13:0D:6F:2C:70:94:ED:85:C3:C9:02:B0:89:ED:5A:4B
            X509v3 Authority Key Identifier:
                keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:37:e5:1f:5f:22:77:1e:8d:b4:17:50:5f:8f:82:c4:9a:
         d5:22:c7:dc:70:54:f6:5a:c8:6a:a8:82:47:3d:34:31:71:0d:
         19:69:22:8a:91:9a:1d:a1:f6:1a:0a:ff:26:67:80:18:2c:0c:
         d6:09:2b:0c:b5:df:ca:65:32:38:b9:a9:b3:01:38:2d:f0:ef:
         11:95:be:4e:05:eb:c1:a0:cb:e3:8d:db:67:b7:29:09:ec:91:
         80:ce:fd:bd:46:97:ec:1a:54:1c:63:20:24:f9:86:00:27:6f:
         2d:b4:f0:3f:fb:53:82:16:80:60:b0:2c:f6:ba:69:f1:34:32:
         4c:eb:01:3b:1b:5c:92:71:de:63:24:a4:e4:ec:4b:4d:e8:5e:
         68:fc:43:72:85:8d:62:08:28:92:37:e0:91:13:ea:4a:f7:9a:
         69:3d:e3:ea:5a:dc:23:8c:24:8d:35:63:4d:0c:dc:75:34:58:
         ff:d4:f7:ae:db:90:4f:99:fd:ed:a1:bb:5b:5c:26:c0:51:ba:
         a4:ed:39:1a:9e:e8:86:7e:fb:44:e9:4d:45:a3:f0:e5:a4:ad:
         6c:47:d9:99:27:2e:d6:7c:7b:e0:d6:6d:39:90:fd:de:67:b0:
         2d:24:fb:b5:f2:14:00:95:21:d3:19:59:19:04:28:08:c9:04:
         7f:1a:e5:e0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2
RkU2RDFGNTYwHhcNMjYwODE5MDAxNDQyWhcNMjYwODI2MDAxNDQyWjAYMRYwFAYD
VQQDEw02YTg0ZjU3Mi01NDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzbZaEVIQaUnXRszCQGv0+D5E/FtiqcSmyEpmcNtuZzHSvg+rOQCizkT4v8O9
f62UoMm7tNEE6z/46VIo1BAgM0k92kmDxrevnlp0H1qw003hJ7f0uk/pwoillAAm
Vzl+S9V5K6l5jYPrO9T0zEvguYL0gr0JIqopzK/Ll4KWL9aQbgLepyV4sd8FzVeX
q06tD7aIkF8ALLBTaUgWEB5HgbGdXqEeas3/ZV+NcRhKKC1nxwqSy6SOPSFagVgG
Icytz8DHlRH4vN/tGoljhhpwZEvavuHBiRKsMnkMU3FRdjr86WhkBmdioou177j0
6x4YIHnhV4ZZARzArI4oS0f4nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNG1wVIT
DW8scJTthcPJArCJ7VpLMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3
QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD
YXBUT2FtbERJNDV2NXRIMVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMG035R9fIncejbQXUF+PgsSa1SLH3HBU9lrIaqiCRz00MXENGWkiipGaHaH2
Ggr/JmeAGCwM1gkrDLXfymUyOLmpswE4LfDvEZW+TgXrwaDL443bZ7cpCeyRgM79
vUaX7BpUHGMgJPmGACdvLbTwP/tTghaAYLAs9rpp8TQyTOsBOxtcknHeYySk5OxL
TeheaPxDcoWNYggokjfgkRPqSveaaT3j6lrcI4wkjTVjTQzcdTRY/9T3rtuQT5n9
7aG7W1wmwFG6pO05Gp7ohn77ROlNRaPw5aStbEfZmScu1nx74NZtOZD93mewLST7
tfIUAJUh0xlZGQQoCMkEfxrl4A==
-----END CERTIFICATE-----
Generated at Wed Aug 19 14:27:59 2026 by rpki-client