Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
File:                     yzfWw1ER6SWyUY8r7WTyMlRT92w.mft (raw, json)
Hash identifier:          m2NdePoHasLXs/lb2cSWP+saMhu/3Nqogw+SGrh6a+8=
Subject key identifier:   B4:71:90:EA:75:9D:A7:9D:70:61:77:60:A4:BB:3B:0B:E1:FB:9C:83
Authority key identifier: CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C
Certificate issuer:       /CN=A9177353/serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
Manifest number:          1B
Signing time:             Wed 19 Aug 2026 09:44:52 +0000
Manifest this update:     Wed 19 Aug 2026 09:44:51 +0000
Manifest next update:     Wed 26 Aug 2026 09:44:51 +0000
Files and hashes:         1: yzfWw1ER6SWyUY8r7WTyMlRT92w.crl (hash: UEROwrK60kesS4HtltpSYGVfdSExIHfN7tHQhIhLY1k=)
                          2: ABC9FB4A7BC611F1B6642EA77EA30FBC.roa (hash: bjBcaS1aZD+XT+DjWQMaLZSJ7vj69FeLT/r28SNzPfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl
                          rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:44:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177353, serialNumber=CB37D6C35111E925B2518F2BED64F2325453F76C
        Validity
            Not Before: Aug 19 09:44:51 2026 GMT
            Not After : Aug 26 09:44:51 2026 GMT
        Subject: CN=6a857b14-0913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:d9:ca:c8:4e:47:2a:fc:4e:ac:87:09:f7:
                    47:d5:6e:f6:55:e7:85:6a:02:c8:ab:90:16:5b:68:
                    ac:2f:64:c8:e1:93:d8:87:97:89:00:45:f1:7a:17:
                    e8:86:95:02:11:db:9d:b5:44:c2:4f:94:7c:17:17:
                    aa:af:92:27:d2:8e:3f:19:20:4d:32:55:fb:ef:fa:
                    63:de:9a:48:f3:0e:e3:2b:fd:dd:fd:50:97:d1:2b:
                    75:3c:14:29:d6:30:43:2c:67:51:88:7e:da:ed:4f:
                    30:d8:19:52:88:f2:23:c0:a2:ed:18:69:78:a7:99:
                    97:0b:a1:a0:36:aa:85:73:c3:7d:ab:25:a0:ce:d0:
                    ad:78:7e:05:e3:57:49:a8:9e:30:0c:34:c4:d3:52:
                    22:b9:5b:f5:db:0a:a4:5e:9e:53:14:52:4a:3a:d1:
                    5a:f1:72:ce:4e:34:de:f8:3f:28:c7:4a:36:b3:28:
                    53:05:69:48:4b:c8:ee:ae:46:70:e8:2a:45:47:31:
                    62:cf:68:c0:d1:a6:a6:94:07:17:1e:c0:b1:62:4f:
                    2a:ab:71:0e:b3:b5:f3:f3:23:6d:fa:ec:e5:ce:91:
                    cc:bb:28:30:8c:7c:b6:c2:f3:7f:2e:00:af:f2:dd:
                    c2:25:04:19:c2:b6:03:83:bd:22:5c:d7:ae:fb:6d:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:71:90:EA:75:9D:A7:9D:70:61:77:60:A4:BB:3B:0B:E1:FB:9C:83
            X509v3 Authority Key Identifier:
                keyid:CB:37:D6:C3:51:11:E9:25:B2:51:8F:2B:ED:64:F2:32:54:53:F7:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzfWw1ER6SWyUY8r7WTyMlRT92w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177353/B5B18AD87BB211F1AD6FA39778A30FBC/yzfWw1ER6SWyUY8r7WTyMlRT92w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:3a:bd:6c:4c:c4:64:89:92:bc:94:8a:59:e8:a4:58:31:
         5f:ab:2c:79:fa:d0:98:22:8e:4c:ba:84:86:db:c6:e7:f6:12:
         97:f9:2b:42:6a:56:cd:6b:6f:9f:71:08:7e:41:1d:79:97:27:
         59:7b:1d:f0:a1:1e:fd:3d:d2:31:dd:ba:50:d2:2c:8f:b9:db:
         d8:3a:60:bf:b6:29:09:4e:42:be:c5:06:fa:15:58:cb:9c:42:
         a5:70:0e:13:d9:54:db:18:6e:ef:0c:65:f7:72:3b:6d:07:57:
         16:10:f4:48:65:7c:89:7e:0a:13:ba:27:90:61:82:ff:77:a6:
         ca:aa:3c:6b:cd:da:1e:7a:3c:7c:7f:a8:1a:f4:33:b9:55:80:
         c2:03:e2:1f:81:dd:c7:79:bb:27:55:cd:a0:2d:10:d3:ea:b8:
         d4:3c:df:e6:47:20:53:2d:01:8f:e9:29:a2:59:9f:53:07:32:
         f6:b8:13:a9:92:00:bb:5a:c6:bc:3e:3e:e6:89:ac:60:dc:12:
         33:77:86:b4:10:64:f1:60:f0:c3:f5:8e:a9:3a:ca:ed:f8:06:
         ce:45:da:96:e8:e9:ae:21:c9:5e:f6:1b:e2:d6:47:ff:c6:f2:
         a4:ee:ef:ae:66:1a:b4:95:b6:fe:38:1e:e1:0d:35:fa:6a:99:
         ef:c5:a4:14
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NzM1MzExMC8GA1UEBRMoQ0IzN0Q2QzM1MTExRTkyNUIyNTE4RjJCRUQ2NEYyMzI1
NDUzRjc2QzAeFw0yNjA4MTkwOTQ0NTFaFw0yNjA4MjYwOTQ0NTFaMBgxFjAUBgNV
BAMTDTZhODU3YjE0LTA5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2dNnKyE5HKvxOrIcJ90fVbvZV54VqAsirkBZbaKwvZMjhk9iHl4kARfF6F+iG
lQIR2521RMJPlHwXF6qvkifSjj8ZIE0yVfvv+mPemkjzDuMr/d39UJfRK3U8FCnW
MEMsZ1GIftrtTzDYGVKI8iPAou0YaXinmZcLoaA2qoVzw32rJaDO0K14fgXjV0mo
njAMNMTTUiK5W/XbCqRenlMUUko60Vrxcs5ONN74PyjHSjazKFMFaUhLyO6uRnDo
KkVHMWLPaMDRpqaUBxcewLFiTyqrcQ6ztfPzI2367OXOkcy7KDCMfLbC838uAK/y
3cIlBBnCtgODvSJc1677bXVpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtHGQ6nWd
p51wYXdgpLs7C+H7nIMwHwYDVR0jBBgwFoAUyzfWw1ER6SWyUY8r7WTyMlRT92ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3MzUzL0I1QjE4QUQ4N0JC
MjExRjFBRDZGQTM5Nzc4QTMwRkJDL3l6Zld3MUVSNlNXeVVZOHI3V1R5TWxSVDky
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveXpmV3cxRVI2U1d5VVk4cjdXVHlNbFJUOTJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
MzUzL0I1QjE4QUQ4N0JCMjExRjFBRDZGQTM5Nzc4QTMwRkJDL3l6Zld3MUVSNlNX
eVVZOHI3V1R5TWxSVDkydy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAtdjq9bEzEZImSvJSKWeikWDFfqyx5+tCYIo5MuoSG28bn9hKX+StCalbNa2+f
cQh+QR15lydZex3woR79PdIx3bpQ0iyPudvYOmC/tikJTkK+xQb6FVjLnEKlcA4T
2VTbGG7vDGX3cjttB1cWEPRIZXyJfgoTuieQYYL/d6bKqjxrzdoeejx8f6ga9DO5
VYDCA+Ifgd3HebsnVc2gLRDT6rjUPN/mRyBTLQGP6SmiWZ9TBzL2uBOpkgC7Wsa8
Pj7miaxg3BIzd4a0EGTxYPDD9Y6pOsrt+AbORdqW6OmuIcle9hvi1kf/xvKk7u+u
Zhq0lbb+OB7hDTX6apnvxaQU
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:40 2026 by rpki-client