Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
File:                     2y3U_v83CRJX9gGdUKI5MOxG4fs.mft (raw, json)
Hash identifier:          XMUV9XmT4rNM4XFS+B6Lx7wjX3aT2G7DMZRPV4802GM=
Subject key identifier:   73:23:22:83:C7:A5:C1:D0:CF:99:DC:F3:38:89:D4:64:4F:C7:FE:B4
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
Manifest number:          D6
Signing time:             Tue 21 Jul 2026 08:47:36 +0000
Manifest this update:     Tue 21 Jul 2026 08:47:36 +0000
Manifest next update:     Tue 28 Jul 2026 08:47:36 +0000
Files and hashes:         1: 2y3U_v83CRJX9gGdUKI5MOxG4fs.crl (hash: psZf1jLW4IdKwJZ4M1Mt9MYSMDM2CPw8z7ilANd3H7E=)
                          2: 029780A8791D11F08A28C96CC4F9AE02.roa (hash: EvnupFOZS9saBqM7mIs3MvjaMbJtIFIC/WVZZVoBHUA=)
                          3: 5747D682B8C611F085BFD10DC4F9AE02.roa (hash: e/nGF9gabnytD0nDQ8tiyYbCWD4pMyOmMIQ/tzUfKDM=)
                          4: 3E9B5E9C791511F09DD1364EC4F9AE02.roa (hash: ZCsqysIZa7spZRDM5FKGh48jQ/BUyE3DwkRZdcL8PRg=)
                          5: 1210E96E791511F08360054EC4F9AE02.roa (hash: ULmaEbsCt8jx5VNQEK4A/L6Td+dmpFbzrt4LFjox2QU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Jul 21 08:47:36 2026 GMT
            Not After : Jul 28 08:47:36 2026 GMT
        Subject: CN=6a5f3228-3858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:32:2a:2c:0a:6c:2b:dd:c3:bb:7f:2a:7f:
                    4d:3d:ee:cc:42:02:ba:c9:3f:aa:fe:24:67:29:5f:
                    1b:8f:33:34:27:f1:3c:9f:a6:96:9b:db:26:e8:ed:
                    a2:1f:cc:62:cf:c4:1d:63:39:a1:49:9e:eb:00:98:
                    c1:2d:71:15:0e:68:fe:d7:72:d7:45:39:f7:d2:f8:
                    20:1b:08:ae:90:d7:28:a9:6c:c3:78:96:6c:ec:f6:
                    5c:db:08:a5:c4:01:fc:81:c2:a4:6e:95:9c:d9:ff:
                    3c:21:21:52:c5:1a:7f:83:f1:04:7e:6b:4b:93:10:
                    a3:dd:09:06:55:c1:98:fe:cc:6c:92:c5:07:09:68:
                    17:08:03:e4:79:01:2b:2d:95:b6:cf:ec:a4:d1:45:
                    35:7c:8a:81:f8:11:cf:43:d5:b2:c6:1e:c9:bf:72:
                    05:34:7f:dc:55:24:c9:b8:c6:53:87:c6:65:ef:f4:
                    db:b9:21:53:4b:00:14:39:a0:60:1b:ca:0e:59:1d:
                    bb:9d:a0:31:f8:01:b5:42:80:a1:43:a5:11:f0:6f:
                    33:21:e9:93:72:2b:d1:30:8a:99:21:1c:f0:41:56:
                    2c:6e:d3:3c:43:c1:de:ec:ee:e1:0e:8e:c3:0c:4d:
                    0b:3d:80:1a:c6:9f:11:e5:3e:d2:1e:17:f6:c2:05:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:23:22:83:C7:A5:C1:D0:CF:99:DC:F3:38:89:D4:64:4F:C7:FE:B4
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:2b:2a:43:62:34:40:9e:0f:6d:2a:bb:fe:de:1f:ba:d4:2d:
         00:80:1c:e2:ed:e6:d0:ce:c9:b6:1d:93:f0:a5:16:35:e9:b0:
         20:75:fe:2c:db:a7:da:cc:b4:c8:51:a3:74:bd:3f:8d:75:16:
         64:ae:30:69:a6:8b:08:53:e5:b3:bd:58:d1:23:0d:67:f3:0e:
         06:16:8c:3f:fb:c7:66:73:b7:35:21:55:f1:6f:e4:3e:26:f3:
         a2:99:4c:45:20:ac:d6:a2:89:53:da:29:d0:10:0f:cb:c2:15:
         27:27:43:2f:35:7a:43:bd:04:9a:b2:06:f5:9e:14:c0:a7:30:
         75:8c:84:b6:e0:d4:8c:69:2b:3c:01:62:7d:f9:6d:55:94:41:
         e5:e1:d1:34:a4:a0:f0:59:65:ad:4c:7f:1e:bf:d6:46:8d:a2:
         95:87:e6:6f:2e:b3:db:39:02:83:6a:4e:a1:19:c3:8b:46:bc:
         99:96:82:01:75:8e:91:6c:64:c8:de:7c:76:3f:fb:af:de:78:
         6c:40:dd:fb:60:80:34:51:8e:84:53:fb:0f:8a:71:11:ed:76:
         18:1e:0c:7f:fd:f7:e5:7f:7e:89:48:45:53:69:69:81:12:d4:
         d0:8b:36:a0:8b:c8:2f:96:31:c5:a6:86:cd:45:98:4b:82:38:
         36:5f:00:96
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YxMTYxMTAvBgNVBAUTKERCMkRENEZFRkYzNzA5MTI1N0Y2MDE5RDUwQTIzOTMw
RUM0NkUxRkIwHhcNMjYwNzIxMDg0NzM2WhcNMjYwNzI4MDg0NzM2WjAYMRYwFAYD
VQQDEw02YTVmMzIyOC0zODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9AyKiwKbCvdw7t/Kn9NPe7MQgK6yT+q/iRnKV8bjzM0J/E8n6aWm9sm6O2i
H8xiz8QdYzmhSZ7rAJjBLXEVDmj+13LXRTn30vggGwiukNcoqWzDeJZs7PZc2wil
xAH8gcKkbpWc2f88ISFSxRp/g/EEfmtLkxCj3QkGVcGY/sxsksUHCWgXCAPkeQEr
LZW2z+yk0UU1fIqB+BHPQ9Wyxh7Jv3IFNH/cVSTJuMZTh8Zl7/TbuSFTSwAUOaBg
G8oOWR27naAx+AG1QoChQ6UR8G8zIemTcivRMIqZIRzwQVYsbtM8Q8He7O7hDo7D
DE0LPYAaxp8R5T7SHhf2wgX92wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMjIoPH
pcHQz5nc8ziJ1GRPx/60MB8GA1UdIwQYMBaAFNst1P7/NwkSV/YBnVCiOTDsRuH7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjExNi84QkNGRkYwNjZF
REUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NSSlg5Z0dkVUtJNU1PeEc0
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ5M1VfdjgzQ1JKWDlnR2RVS0k1TU94RzRmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjExNi84QkNGRkYwNjZFREUxMUYwOTFFMDJBMjFDNEY5QUUwMi8yeTNVX3Y4M0NS
Slg5Z0dkVUtJNU1PeEc0ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2CsqQ2I0QJ4PbSq7/t4futQtAIAc4u3m0M7Jth2T8KUWNemwIHX+LNun2sy0
yFGjdL0/jXUWZK4waaaLCFPls71Y0SMNZ/MOBhaMP/vHZnO3NSFV8W/kPibzoplM
RSCs1qKJU9op0BAPy8IVJydDLzV6Q70EmrIG9Z4UwKcwdYyEtuDUjGkrPAFifflt
VZRB5eHRNKSg8FllrUx/Hr/WRo2ilYfmby6z2zkCg2pOoRnDi0a8mZaCAXWOkWxk
yN58dj/7r954bEDd+2CANFGOhFP7D4pxEe12GB4Mf/335X9+iUhFU2lpgRLU0Is2
oIvIL5YxxaaGzUWYS4I4Nl8Alg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:52 2026 by rpki-client