Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
File:                     yY7yKt__YT9WmDU_yFsMkG30fpE.mft (raw, json)
Hash identifier:          4FR1GBhN2IqlGiGCw3yWhwCn4mB3Qjsh3G78ZDj9Ork=
Subject key identifier:   06:0E:D2:02:57:5C:4F:F3:5D:25:40:57:65:07:6E:19:CE:3E:45:69
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       0225
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
Manifest number:          021B
Signing time:             Thu 21 May 2026 02:55:44 +0000
Manifest this update:     Thu 21 May 2026 02:55:43 +0000
Manifest next update:     Thu 28 May 2026 02:55:43 +0000
Files and hashes:         1: yY7yKt__YT9WmDU_yFsMkG30fpE.crl (hash: GD16cWCk9cq69wJ/iUjjs5ANVNPNLE4eKES81eMbfaI=)
                          2: A7B015CEF1DC11EEA578C27DC4F9AE02.roa (hash: rQ+1OcyjHezWFqWYZ65A+pce2X8sBRkVZ+HRYo38KSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969, serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: May 21 02:55:43 2026 GMT
            Not After : May 28 02:55:43 2026 GMT
        Subject: CN=6a0e742f-8b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:42:76:64:78:b3:d3:a8:88:dd:f1:55:d6:5f:
                    8a:ba:84:95:26:ce:5d:08:d7:dc:69:ab:57:1b:28:
                    62:54:46:30:b4:c1:99:c7:6d:2b:05:35:c7:f6:8a:
                    7c:ec:d8:e1:25:e9:ef:84:e1:76:99:04:ef:24:8d:
                    1a:59:b4:dd:bd:a6:0e:b9:fe:99:97:8d:4e:41:3a:
                    ee:66:3e:a9:85:96:68:d0:b6:bb:45:e0:af:a2:4c:
                    c7:d8:6a:1f:56:85:ec:7b:aa:47:ba:a7:52:9f:10:
                    c7:63:7c:ac:c7:43:6e:e8:b7:9a:b0:1b:b6:5d:44:
                    ea:1a:30:d8:d8:16:32:ad:3b:d8:fe:95:cb:1e:e3:
                    0d:be:2a:68:0a:9b:7e:0c:3a:3d:e1:cc:b9:78:25:
                    2b:6d:85:86:d1:01:b4:1d:cf:86:a3:e2:56:ef:36:
                    24:11:c2:59:29:69:60:26:4f:a1:3f:15:40:7e:db:
                    60:ca:c2:bb:a0:b0:90:15:df:f5:08:fc:28:ab:eb:
                    4f:b7:1e:7d:54:f2:5e:6a:53:29:18:52:b7:e1:bd:
                    11:12:84:ee:37:60:5a:a0:b6:91:c2:7e:ad:b3:e2:
                    d8:81:88:5a:b2:ac:03:71:6a:b9:fd:3d:18:c9:db:
                    7b:6e:ba:d7:9e:4e:68:e6:15:17:f2:f7:ea:c4:29:
                    32:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0E:D2:02:57:5C:4F:F3:5D:25:40:57:65:07:6E:19:CE:3E:45:69
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:da:45:12:78:68:4b:5c:3b:37:40:d3:5d:54:70:95:e4:4f:
         a8:35:d7:bd:73:c4:8d:1e:0d:94:24:c4:f2:0f:7d:0c:d2:af:
         32:16:77:d4:7d:3b:57:ca:7a:12:73:7f:40:84:38:10:f9:98:
         f3:ba:75:8a:1a:49:9b:f7:83:9b:3c:de:e0:fc:43:6d:f6:9c:
         35:52:86:0c:59:07:4f:42:bd:30:13:38:09:a4:da:1e:68:df:
         08:79:d5:b1:4a:18:a9:6d:2e:c4:24:8e:59:70:49:71:c3:fc:
         c2:f1:2f:db:ee:5c:7c:36:6d:b8:d2:e1:3f:9c:72:35:63:8d:
         3a:11:08:d9:85:fe:b0:78:45:f5:90:bc:b7:96:9c:3a:2d:72:
         00:f4:20:b2:75:07:7a:7e:bd:2c:ec:ae:94:08:68:a1:10:0e:
         ad:1b:86:a7:0c:4a:c1:82:61:76:a0:3a:8a:87:c4:2a:da:ab:
         7d:e5:f8:2d:7e:f6:b8:13:10:95:d9:ba:ff:39:01:ee:04:cc:
         77:eb:c5:45:e8:8c:b5:0a:5e:fe:6e:1f:c6:82:c0:d9:bd:ca:
         46:24:a4:93:12:44:7e:eb:65:6c:8d:62:92:00:ba:e3:69:d6:
         ce:d6:2f:26:91:af:b0:21:8b:c6:9b:7d:4d:3e:a6:1c:f6:a5:
         26:20:ff:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI5NjkxMTAvBgNVBAUTKEM5OEVGMjJBREZGRjYxM0Y1Njk4MzUzRkM4NUIwQzkw
NkRGNDdFOTEwHhcNMjYwNTIxMDI1NTQzWhcNMjYwNTI4MDI1NTQzWjAYMRYwFAYD
VQQDEw02YTBlNzQyZi04YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UJ2ZHiz06iI3fFV1l+KuoSVJs5dCNfcaatXGyhiVEYwtMGZx20rBTXH9op8
7NjhJenvhOF2mQTvJI0aWbTdvaYOuf6Zl41OQTruZj6phZZo0La7ReCvokzH2Gof
VoXse6pHuqdSnxDHY3ysx0Nu6LeasBu2XUTqGjDY2BYyrTvY/pXLHuMNvipoCpt+
DDo94cy5eCUrbYWG0QG0Hc+Go+JW7zYkEcJZKWlgJk+hPxVAfttgysK7oLCQFd/1
CPwoq+tPtx59VPJealMpGFK34b0REoTuN2BaoLaRwn6ts+LYgYhasqwDcWq5/T0Y
ydt7brrXnk5o5hUX8vfqxCkyxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAYO0gJX
XE/zXSVAV2UHbhnOPkVpMB8GA1UdIwQYMBaAFMmO8irf/2E/Vpg1P8hbDJBt9H6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mjk2OS8wREIzNDQzMjI2
MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lUOVdtRFVfeUZzTWtHMzBm
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZN3lLdF9fWVQ5V21EVV95RnNNa0czMGZwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mjk2OS8wREIzNDQzMjI2MjExMUVFQTRERUU1NEZDNEY5QUUwMi95WTd5S3RfX1lU
OVdtRFVfeUZzTWtHMzBmcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwNpFEnhoS1w7N0DTXVRwleRPqDXXvXPEjR4NlCTE8g99DNKvMhZ31H07V8p6
EnN/QIQ4EPmY87p1ihpJm/eDmzze4PxDbfacNVKGDFkHT0K9MBM4CaTaHmjfCHnV
sUoYqW0uxCSOWXBJccP8wvEv2+5cfDZtuNLhP5xyNWONOhEI2YX+sHhF9ZC8t5ac
Oi1yAPQgsnUHen69LOyulAhooRAOrRuGpwxKwYJhdqA6iofEKtqrfeX4LX72uBMQ
ldm6/zkB7gTMd+vFReiMtQpe/m4fxoLA2b3KRiSkkxJEfutlbI1ikgC642nWztYv
JpGvsCGLxpt9TT6mHPalJiD/qA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:09 2026 by rpki-client