Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
File:                     y70GgkBePlkg8UsDghSUjF410cM.mft (raw, json)
Hash identifier:          kLF9pDvUemeftTxez889MQER069Oo7jo7szoLA+o3bA=
Subject key identifier:   19:33:9E:DE:81:BC:96:7F:4E:48:EC:E7:12:E2:13:47:3E:71:5E:DC
Authority key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Certificate issuer:       /CN=A916D4BE/serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
Manifest number:          0588
Signing time:             Thu 08 Oct 2026 23:47:08 +0000
Manifest this update:     Thu 08 Oct 2026 23:47:08 +0000
Manifest next update:     Thu 15 Oct 2026 23:47:08 +0000
Files and hashes:         1: y70GgkBePlkg8UsDghSUjF410cM.crl (hash: sPksCwsdG5NOMcywttEshdnwnp5C8tMj9EfCHhMb3Ik=)
                          2: 6B6833B43D3211F180C94A7884EE528E.roa (hash: gzQgQxyi1t7zAFl1L1PXe5vPjsPRekeb+UDdZ8X5gRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 23:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
        Validity
            Not Before: Oct  8 23:47:08 2026 GMT
            Not After : Oct 15 23:47:08 2026 GMT
        Subject: CN=6ac82b7c-afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:5d:9c:a4:5c:e2:62:f4:f4:11:2e:fb:43:
                    97:a8:ca:bf:65:3f:48:9a:0c:53:a2:9b:ec:11:1f:
                    b9:d3:06:94:d1:89:33:15:f2:21:30:25:37:b2:ea:
                    be:e2:d9:09:0c:87:ea:9a:2b:df:21:8f:6f:85:b6:
                    de:5c:b1:99:c9:fc:8b:8e:0a:f0:89:b4:24:03:4d:
                    34:a4:c0:00:af:e1:4a:04:9a:51:a2:07:ce:ad:81:
                    50:5f:2b:bc:d0:a2:04:3a:04:fa:5d:ea:f6:f2:e9:
                    b5:71:b3:4d:b4:81:20:8c:47:6d:46:a8:aa:25:ce:
                    73:c4:55:2e:83:41:c9:6c:d4:49:72:10:f2:48:a2:
                    b2:42:7c:7c:bc:04:cb:41:2f:61:4c:b6:cd:32:ae:
                    54:f2:e4:53:b1:ed:fa:2e:ff:d3:62:0d:72:0b:69:
                    03:e5:af:e5:73:f1:ef:98:49:15:e8:4f:0e:50:9e:
                    86:94:f8:e7:c5:f9:d2:1e:96:85:23:77:f8:42:eb:
                    ab:56:38:61:d4:3e:85:72:0f:5e:f8:b6:53:52:7f:
                    ba:4c:6c:4c:24:bf:78:1a:bb:8f:bc:74:cd:1c:fd:
                    c6:c5:fe:d0:d1:ac:24:ee:9b:f0:27:4d:e4:4c:f6:
                    18:96:3f:3b:f6:14:71:39:61:8e:57:d6:89:68:66:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:9E:DE:81:BC:96:7F:4E:48:EC:E7:12:E2:13:47:3E:71:5E:DC
            X509v3 Authority Key Identifier:
                keyid:CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:db:01:34:9a:0f:66:98:1c:46:28:19:7a:65:63:c1:bb:7e:
         5c:06:aa:5a:a3:be:e2:42:ab:2c:b4:49:d0:3b:63:7b:0e:3a:
         d6:a5:b2:fb:fd:a4:ee:1a:8e:7d:3c:61:63:33:74:2c:be:1e:
         06:89:d8:1c:1c:37:67:61:4a:fe:6e:06:c0:f7:de:b0:88:90:
         33:a3:4d:92:1d:7f:42:d7:dd:f5:94:6b:a2:aa:a3:77:c3:d9:
         6d:a9:2a:c6:cc:d1:ba:62:fe:4b:42:47:07:7b:af:af:a9:91:
         f8:a4:0e:f9:96:33:da:32:8c:7d:ab:b4:6b:0b:28:1f:94:f4:
         5c:2b:ff:b0:3b:31:44:3b:de:c3:04:c6:a3:97:25:61:07:fe:
         4c:14:03:e4:7c:ac:56:dc:75:e8:6a:ee:ca:40:28:e4:05:3b:
         ad:d7:14:09:3f:c8:a0:5b:36:26:bd:91:91:79:86:a0:d6:14:
         98:a6:e8:60:b9:d3:a9:4f:29:cf:63:5c:83:84:aa:f8:d3:bd:
         41:d7:b2:ad:83:90:c9:af:47:3d:87:12:31:79:5c:49:50:46:
         06:3e:65:f3:f0:13:1c:b6:e4:54:f2:99:b6:bc:20:f8:47:ff:
         c6:60:52:54:d7:79:43:91:df:a4:fc:d8:ef:89:66:00:ae:48:
         1b:01:11:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 11:40:15 2026 by rpki-client