Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          9+hkcV8wpt2i0eeqE4Cv/cPuJbeMwZWxUIfs0MEKiyA=
Subject key identifier:   5A:CD:2B:97:A9:1A:FE:E7:3A:8E:33:F9:A5:E4:5A:83:C5:37:E4:13
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          024A
Signing time:             Wed 19 Aug 2026 02:59:55 +0000
Manifest this update:     Wed 19 Aug 2026 02:59:55 +0000
Manifest next update:     Wed 26 Aug 2026 02:59:55 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: dJBMYGKSCfQrrRP68RjHe/OXlTvosPxbEP7tV9Q66oI=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: 15WGBFrkvbF112N17TZbEn3QLHKHPudaip07MTNu5gQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Aug 19 02:59:55 2026 GMT
            Not After : Aug 26 02:59:55 2026 GMT
        Subject: CN=6a851c2b-37e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:88:b8:52:6c:28:35:72:90:87:3d:01:e6:
                    dc:5e:58:1b:ca:f1:26:30:c2:26:1a:16:21:90:01:
                    43:4a:37:21:f9:96:e1:6e:81:74:92:87:a0:fd:18:
                    3a:e8:d9:66:36:c1:ef:11:e4:9c:27:21:c9:4f:ac:
                    7d:49:03:75:0e:21:91:b2:a9:9d:a4:eb:2e:84:e6:
                    1d:ff:d5:55:bd:50:20:95:42:b0:62:93:a9:ff:c5:
                    39:09:33:54:69:5f:b1:48:c6:3a:b2:9e:2b:80:42:
                    ee:d9:dc:f1:cd:b8:83:da:f2:55:00:4b:5e:52:cc:
                    58:b3:1c:ed:00:15:09:d0:3f:c4:e0:81:ee:c3:d2:
                    26:18:45:9b:4b:e6:cd:36:ae:5a:14:49:d9:98:c2:
                    28:1b:cd:d0:95:be:0f:7c:24:46:dc:1b:4c:17:8f:
                    1b:e5:00:fa:4c:fb:7d:ef:c3:2b:24:f5:23:89:56:
                    ec:e7:97:08:7b:fa:8e:04:aa:29:b4:58:17:22:ed:
                    75:ff:ad:16:f3:bc:8e:04:cb:ea:a5:58:98:24:64:
                    30:5e:7d:7d:9a:d1:5b:1f:a2:53:e2:27:af:ab:8c:
                    5d:34:16:5b:91:87:8b:25:9c:49:72:95:67:76:61:
                    3d:00:69:9b:a7:05:9a:bc:7c:3a:79:12:01:fb:a1:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:CD:2B:97:A9:1A:FE:E7:3A:8E:33:F9:A5:E4:5A:83:C5:37:E4:13
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6b:e2:f8:d5:ab:0b:8b:f4:db:c8:81:b8:41:e0:70:b2:34:
         b6:57:a5:c9:b7:41:d7:97:10:70:23:92:4f:83:03:b4:6e:74:
         bd:46:a4:b2:54:e9:f6:0b:86:fc:6a:19:22:3d:ce:98:78:80:
         9c:33:f0:33:ca:65:94:8e:8d:83:91:88:7d:59:1b:61:36:90:
         46:16:1b:b5:f4:b3:f3:33:08:9d:14:bc:a9:21:8e:37:1f:05:
         b5:d9:2b:22:f6:26:37:c4:ec:9e:dc:bc:0f:7f:1c:97:67:1e:
         02:2d:68:0e:f5:00:8b:c4:be:ea:a7:d5:b0:83:0d:2e:c9:53:
         70:ab:a5:9a:ef:b4:64:ee:dc:8b:6b:aa:0a:20:b1:45:56:cf:
         7f:68:18:6c:9c:c9:3a:03:57:9c:14:12:8d:9a:1e:6e:86:07:
         33:d7:d7:9a:2e:4b:28:34:55:5f:49:3e:05:6b:d9:e1:6c:41:
         b5:32:47:38:09:5e:58:5d:74:62:a6:c8:30:c6:32:95:f7:f3:
         62:81:60:69:25:93:3a:44:af:7b:de:81:01:84:74:47:0b:23:
         5f:c4:2a:92:87:68:4c:bc:89:14:f8:15:43:70:31:e5:35:2c:
         2d:53:86:f5:8b:7a:4d:4d:17:10:b1:c6:8e:09:75:c1:16:19:
         17:fa:98:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw
NkRGNDdFOTEwHhcNMjYwODE5MDI1OTU1WhcNMjYwODI2MDI1OTU1WjAYMRYwFAYD
VQQDEw02YTg1MWMyYi0zN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4miIuFJsKDVykIc9AebcXlgbyvEmMMImGhYhkAFDSjch+ZbhboF0koeg/Rg6
6NlmNsHvEeScJyHJT6x9SQN1DiGRsqmdpOsuhOYd/9VVvVAglUKwYpOp/8U5CTNU
aV+xSMY6sp4rgELu2dzxzbiD2vJVAEteUsxYsxztABUJ0D/E4IHuw9ImGEWbS+bN
Nq5aFEnZmMIoG83Qlb4PfCRG3BtMF48b5QD6TPt978MrJPUjiVbs55cIe/qOBKop
tFgXIu11/60W87yOBMvqpViYJGQwXn19mtFbH6JT4ievq4xdNBZbkYeLJZxJcpVn
dmE9AGmbpwWavHw6eRIB+6EeywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrNK5ep
Gv7nOo4z+aXkWoPFN+QTMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2
MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU
OVdtRFVfeUZzTWtHMzBmcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAQWvi+NWrC4v028iBuEHgcLI0tlelybdB15cQcCOST4MDtG50vUakslTp9guG
/GoZIj3OmHiAnDPwM8pllI6Ng5GIfVkbYTaQRhYbtfSz8zMInRS8qSGONx8Ftdkr
IvYmN8Tsnty8D38cl2ceAi1oDvUAi8S+6qfVsIMNLslTcKulmu+0ZO7ci2uqCiCx
RVbPf2gYbJzJOgNXnBQSjZoeboYHM9fXmi5LKDRVX0k+BWvZ4WxBtTJHOAleWF10
YqbIMMYylffzYoFgaSWTOkSve96BAYR0RwsjX8QqkodoTLyJFPgVQ3Ax5TUsLVOG
9Yt6TU0XELHGjgl1wRYZF/qYcA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:56 2026 by rpki-client