Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
File:                     yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft (raw, json)
Hash identifier:          sVYgIKaPbj7s9cC4mNIeLRg7RLIBai4az3yNvOUFjE8=
Subject key identifier:   C1:26:F1:9D:2C:9C:49:96:52:91:C2:9A:6C:8D:72:DF:5E:88:BC:74
Authority key identifier: C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0
Certificate issuer:       /CN=A917E1FA/serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
Manifest number:          BE
Signing time:             Mon 01 Jun 2026 07:48:20 +0000
Manifest this update:     Mon 01 Jun 2026 07:48:20 +0000
Manifest next update:     Mon 08 Jun 2026 07:48:20 +0000
Files and hashes:         1: yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl (hash: sxzrJ8NrwL5tgZRCLKj5AkhBgDWQ024vCY1Jnwymr3U=)
                          2: 7354ACC0472811F0ADE2D44BC4F9AE02.roa (hash: znoNuAslfVcaeYT9Qtb9J+D936zhsxuFnvCQ4z32+wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl
                          rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E1FA, serialNumber=C912B054CA43A934C1775733D84BF16E4856BEF0
        Validity
            Not Before: Jun  1 07:48:20 2026 GMT
            Not After : Jun  8 07:48:20 2026 GMT
        Subject: CN=6a1d3944-1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:3f:19:e9:21:a1:24:ae:88:94:fd:21:f1:
                    c9:8d:33:1f:ef:d9:31:c4:16:5d:a4:15:a0:66:5e:
                    a6:56:38:ad:08:c5:ae:95:cc:15:7a:12:ab:e0:5e:
                    5a:b0:62:ab:b6:b6:07:1d:f4:24:6f:e3:f8:92:cc:
                    41:90:61:43:bd:21:ae:a7:88:47:f8:25:99:9d:1a:
                    33:5b:5d:ff:d8:45:9c:5d:ae:20:6f:5c:59:e9:a5:
                    64:53:50:bc:04:e9:e5:ad:3c:d1:46:48:4e:49:e1:
                    7e:88:3a:97:66:76:54:06:71:24:8e:33:48:72:b5:
                    44:4f:02:1e:59:b6:94:f3:1b:5a:48:8f:2a:59:72:
                    3b:03:97:6c:0d:8d:77:75:97:1c:74:dd:46:de:62:
                    07:7f:3a:a6:0f:87:60:c0:99:3d:b0:b0:a3:0f:76:
                    45:c5:c3:62:02:b8:0f:f8:68:11:8c:b9:df:70:15:
                    d9:36:84:40:2f:ee:0f:52:fc:0a:49:57:ae:c6:e5:
                    51:29:08:d5:61:eb:f3:92:80:b9:5c:63:09:8e:30:
                    13:88:84:d5:35:d4:b8:af:01:17:5f:07:d0:a2:e5:
                    aa:a2:62:65:37:5e:ab:d8:37:3e:d2:46:cc:be:97:
                    68:40:30:ed:75:59:77:d4:af:8a:bd:39:91:03:b8:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:26:F1:9D:2C:9C:49:96:52:91:C2:9A:6C:8D:72:DF:5E:88:BC:74
            X509v3 Authority Key Identifier:
                keyid:C9:12:B0:54:CA:43:A9:34:C1:77:57:33:D8:4B:F1:6E:48:56:BE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRKwVMpDqTTBd1cz2EvxbkhWvvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/A2D5EE5E45A311F095EFFD48C4F9AE02/yRKwVMpDqTTBd1cz2EvxbkhWvvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:54:cc:9c:e4:ed:f1:39:31:08:90:4f:38:56:b6:d4:35:
         46:e2:2b:4d:96:3c:2c:d9:d2:4e:d8:6a:8a:59:17:c6:9a:17:
         a6:7e:ed:0f:d8:c5:dd:41:b1:b0:50:01:ca:98:dd:5c:e8:91:
         72:d2:3f:0a:2d:4e:7d:02:4a:eb:d5:86:46:bd:74:ff:5a:26:
         0d:c9:47:bf:6b:81:8d:d5:c8:bb:ff:07:3f:e3:3e:41:00:40:
         7f:26:96:49:0c:5b:34:bc:60:0f:c3:a6:88:6e:3a:79:d2:8b:
         55:2e:0a:49:2e:82:f1:77:b7:b5:08:0e:4a:87:5d:3b:a5:c1:
         29:95:17:6d:44:20:5a:84:35:7c:09:c6:ea:71:ca:ff:9e:97:
         09:d9:f7:99:cf:85:e2:57:aa:6d:b1:4c:f9:fd:7e:c0:d7:ca:
         2a:8c:07:01:7d:c6:ac:20:fd:bb:8b:6c:b8:d9:1b:3c:37:9c:
         29:9c:64:8f:83:37:73:67:fd:30:cc:5c:ec:59:cc:c6:c0:df:
         64:12:d2:25:04:f7:45:0c:59:5e:82:50:41:1a:ac:05:56:93:
         56:68:e8:b0:b6:4a:55:61:72:11:1e:49:24:39:27:1a:6c:3a:
         8a:b6:a8:4a:c6:96:bf:c6:7b:6f:6d:5e:d4:c5:35:2b:92:b8:
         3a:81:a3:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UxRkExMTAvBgNVBAUTKEM5MTJCMDU0Q0E0M0E5MzRDMTc3NTczM0Q4NEJGMTZF
NDg1NkJFRjAwHhcNMjYwNjAxMDc0ODIwWhcNMjYwNjA4MDc0ODIwWjAYMRYwFAYD
VQQDEw02YTFkMzk0NC0xODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5I/GekhoSSuiJT9IfHJjTMf79kxxBZdpBWgZl6mVjitCMWulcwVehKr4F5a
sGKrtrYHHfQkb+P4ksxBkGFDvSGup4hH+CWZnRozW13/2EWcXa4gb1xZ6aVkU1C8
BOnlrTzRRkhOSeF+iDqXZnZUBnEkjjNIcrVETwIeWbaU8xtaSI8qWXI7A5dsDY13
dZccdN1G3mIHfzqmD4dgwJk9sLCjD3ZFxcNiArgP+GgRjLnfcBXZNoRAL+4PUvwK
SVeuxuVRKQjVYevzkoC5XGMJjjATiITVNdS4rwEXXwfQouWqomJlN16r2Dc+0kbM
vpdoQDDtdVl31K+KvTmRA7g3ewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEm8Z0s
nEmWUpHCmmyNct9eiLx0MB8GA1UdIwQYMBaAFMkSsFTKQ6k0wXdXM9hL8W5IVr7w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTFGQS9BMkQ1RUU1RTQ1
QTMxMUYwOTVFRkZENDhDNEY5QUUwMi95Ukt3Vk1wRHFUVEJkMWN6MkV2eGJraFd2
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lSS3dWTXBEcVRUQmQxY3oyRXZ4YmtoV3Z2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTFGQS9BMkQ1RUU1RTQ1QTMxMUYwOTVFRkZENDhDNEY5QUUwMi95Ukt3Vk1wRHFU
VEJkMWN6MkV2eGJraFd2dkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATR1UzJzk7fE5MQiQTzhWttQ1RuIrTZY8LNnSTthqilkXxpoXpn7tD9jF3UGx
sFABypjdXOiRctI/Ci1OfQJK69WGRr10/1omDclHv2uBjdXIu/8HP+M+QQBAfyaW
SQxbNLxgD8OmiG46edKLVS4KSS6C8Xe3tQgOSoddO6XBKZUXbUQgWoQ1fAnG6nHK
/56XCdn3mc+F4leqbbFM+f1+wNfKKowHAX3GrCD9u4tsuNkbPDecKZxkj4M3c2f9
MMxc7FnMxsDfZBLSJQT3RQxZXoJQQRqsBVaTVmjosLZKVWFyER5JJDknGmw6irao
SsaWv8Z7b21e1MU1K5K4OoGj/g==
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:32:06 2026 by rpki-client