Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File:                     Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier:          I/5K3dzs5fNs2b3e1k7TvTyeOgaey46IY45Y48dTvYc=
Subject key identifier:   02:8B:BC:C9:24:10:74:C4:22:D0:61:7C:01:46:75:19:D8:13:C3:E6
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer:       /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number:          026A
Signing time:             Sun 25 Oct 2026 02:47:42 +0000
Manifest this update:     Sun 25 Oct 2026 02:47:41 +0000
Manifest next update:     Sun 01 Nov 2026 02:47:41 +0000
Files and hashes:         1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: woD1Qyl1QxHxA3xqGBRscQ9PxMNoUChBlWSvKGUuM8s=)
                          2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: qTVWaderqtgmeERdTaRyOlJrOlJ96wy4uZtKdMBbwhk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 02:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
        Validity
            Not Before: Oct 25 02:47:41 2026 GMT
            Not After : Nov  1 02:47:41 2026 GMT
        Subject: CN=6add6dce-6129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f5:69:52:de:a8:f5:cc:a4:ae:a0:6e:7f:db:
                    cd:29:f6:a1:67:ce:90:8a:2c:1a:e5:a1:b5:5a:90:
                    96:cc:b2:2c:75:b3:0b:dc:5b:40:d7:e2:a2:8f:3f:
                    4b:4a:43:b7:79:7e:50:f9:15:3d:cc:87:96:d7:8e:
                    3e:f3:4b:e2:91:88:39:26:bb:ed:62:ad:cd:74:29:
                    00:a4:27:c4:a9:5e:f0:7b:a7:06:0a:6d:5e:88:1c:
                    34:83:fb:2e:83:22:b6:a4:7a:00:06:d4:82:eb:22:
                    00:28:15:ee:d9:61:8c:da:c0:67:30:77:4d:47:6f:
                    67:11:18:8b:90:e9:87:7e:50:10:5f:63:61:88:fa:
                    e8:c8:a2:a0:66:41:0c:f5:42:0c:40:9b:90:d0:1e:
                    c3:34:c6:64:01:bf:df:c5:e2:a2:69:53:01:a6:cc:
                    5d:d2:7b:c9:2a:90:62:48:5f:ec:73:d2:ae:6a:cb:
                    09:0f:cf:74:d9:33:35:83:61:16:9a:d6:04:7e:2d:
                    cc:d9:d5:15:1e:75:9c:53:63:5b:c7:78:64:c3:26:
                    e6:c7:0d:78:e1:a1:ac:56:f6:d1:e6:0a:a5:49:ff:
                    73:91:ca:0a:09:1b:e0:71:87:ac:17:82:e1:bb:bf:
                    d2:25:08:36:30:df:43:64:66:33:30:9e:a1:d0:2d:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8B:BC:C9:24:10:74:C4:22:D0:61:7C:01:46:75:19:D8:13:C3:E6
            X509v3 Authority Key Identifier:
                keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:db:b4:3e:be:5d:36:0b:d4:67:98:61:ac:c6:3a:36:c2:c1:
         77:08:ab:33:c5:d4:89:ad:3a:57:7a:b5:6e:3a:b2:96:ca:43:
         ab:ea:76:55:67:c6:d1:91:fd:eb:71:ca:a1:7a:b3:0c:40:7d:
         6c:7e:3f:5c:e7:bb:21:98:ad:16:63:10:a8:d5:41:c3:4e:8b:
         80:4d:1a:fa:72:bf:41:ad:a9:f0:97:9f:64:62:bc:b5:ff:61:
         3c:48:0c:6d:ff:28:a4:00:a0:99:f5:54:0e:5d:af:55:ea:1f:
         34:c9:b0:5f:f1:fd:4d:e2:89:e2:a4:44:4c:b4:1b:9a:dc:5f:
         c4:ed:f4:e5:07:63:4c:5a:6f:4b:78:d5:4d:ad:5d:09:c3:0c:
         35:84:78:55:ea:d7:9f:05:0c:c6:d5:ba:fd:bc:34:c5:e1:98:
         95:34:4b:b8:6d:02:79:c9:55:e4:76:d0:d4:78:00:d6:07:08:
         46:bf:e1:dc:76:92:e1:a4:f1:40:c7:0a:b1:6d:85:66:c3:ae:
         10:fa:55:31:df:2b:78:c3:1d:96:21:4d:6d:6f:53:aa:d1:2b:
         7e:a2:d0:45:b3:24:4e:36:d9:e8:e1:dc:ee:33:75:d3:cc:ca:
         6f:85:f9:62:ee:06:5b:cc:57:b0:91:50:11:94:0c:0e:6e:e3:
         15:66:4f:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2
RDY3NzU4MDkwHhcNMjYxMDI1MDI0NzQxWhcNMjYxMTAxMDI0NzQxWjAYMRYwFAYD
VQQDEw02YWRkNmRjZS02MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9/VpUt6o9cykrqBuf9vNKfahZ86Qiiwa5aG1WpCWzLIsdbML3FtA1+Kijz9L
SkO3eX5Q+RU9zIeW144+80vikYg5JrvtYq3NdCkApCfEqV7we6cGCm1eiBw0g/su
gyK2pHoABtSC6yIAKBXu2WGM2sBnMHdNR29nERiLkOmHflAQX2NhiProyKKgZkEM
9UIMQJuQ0B7DNMZkAb/fxeKiaVMBpsxd0nvJKpBiSF/sc9KuassJD8902TM1g2EW
mtYEfi3M2dUVHnWcU2Nbx3hkwybmxw144aGsVvbR5gqlSf9zkcoKCRvgcYesF4Lh
u7/SJQg2MN9DZGYzMJ6h0C3ZxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAKLvMkk
EHTEItBhfAFGdRnYE8PmMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX
Nk9zVS1WUHExanR0WjNXQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhNu0Pr5dNgvUZ5hhrMY6NsLBdwirM8XUia06V3q1bjqylspDq+p2VWfG0ZH9
63HKoXqzDEB9bH4/XOe7IZitFmMQqNVBw06LgE0a+nK/Qa2p8JefZGK8tf9hPEgM
bf8opACgmfVUDl2vVeofNMmwX/H9TeKJ4qRETLQbmtxfxO305QdjTFpvS3jVTa1d
CcMMNYR4VerXnwUMxtW6/bw0xeGYlTRLuG0CeclV5HbQ1HgA1gcIRr/h3HaS4aTx
QMcKsW2FZsOuEPpVMd8reMMdliFNbW9TqtErfqLQRbMkTjbZ6OHc7jN108zKb4X5
Yu4GW8xXsJFQEZQMDm7jFWZPCA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:28 2026 by rpki-client