Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File:                     ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier:          Q2XcQfVJxCtNz6WVT6GVMGhuiegHbRBh0LD1+qSE+10=
Subject key identifier:   1C:E9:B8:38:A1:3C:CB:1A:99:FA:3D:B5:10:8D:58:50:50:84:4E:87
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer:       /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial:       06C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number:          06B8
Signing time:             Tue 06 Oct 2026 22:31:01 +0000
Manifest this update:     Tue 06 Oct 2026 22:31:01 +0000
Manifest next update:     Tue 13 Oct 2026 22:31:01 +0000
Files and hashes:         1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: 7yte0Z0AeYKDNqjb7fJmNjpHr1o+465wkK7wGFjAvLY=)
                          2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: qvLQA7WpjcptMon0VXPLruBJDNLR89kXk5T+FJz9bmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
                          rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 22:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
        Validity
            Not Before: Oct  6 22:31:01 2026 GMT
            Not After : Oct 13 22:31:01 2026 GMT
        Subject: CN=6ac576a5-45d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5a:e0:6f:61:24:69:d3:14:0d:6a:e2:9f:9b:
                    9c:7b:f1:30:f9:84:0a:9d:fb:90:88:2a:26:29:ed:
                    43:3c:f8:02:bf:6b:81:a3:a2:e1:25:3d:25:d3:1d:
                    c7:ed:46:ee:1e:80:58:d4:a0:e1:3a:93:36:14:57:
                    a7:10:ab:b5:e5:82:c4:71:0a:89:f8:26:28:e0:e3:
                    14:dc:7c:a3:b2:93:5b:4d:2a:10:60:ba:d1:f8:24:
                    74:a8:27:81:0e:75:db:f3:69:c0:08:50:43:89:d2:
                    4b:f6:f8:2e:4e:3f:c8:57:12:3a:1b:70:8d:ce:2f:
                    c2:69:da:28:5a:ef:de:69:92:61:4f:25:72:fe:49:
                    22:08:85:b4:d9:25:a2:bc:58:50:f8:53:f5:61:1e:
                    d4:71:fe:84:69:b5:d6:25:b5:2e:9d:70:a3:7b:7a:
                    bd:99:35:a8:6a:8e:87:fa:e5:d6:c2:5d:f0:ab:75:
                    95:74:31:c3:d2:c0:b0:87:91:7e:bb:c7:b0:fb:9f:
                    61:5c:53:cf:8e:5d:17:c4:ad:e1:c7:6e:b4:fb:5b:
                    52:8d:35:99:64:bc:d2:3a:af:43:08:41:c0:9a:58:
                    13:10:32:e3:cb:07:8f:5e:08:c0:f1:74:97:70:cb:
                    37:52:cd:c7:2a:4d:76:9f:7d:cf:64:9c:fb:a2:77:
                    78:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:B8:38:A1:3C:CB:1A:99:FA:3D:B5:10:8D:58:50:50:84:4E:87
            X509v3 Authority Key Identifier:
                keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:d5:af:ca:6e:52:72:1a:8f:92:61:6a:2c:cf:dc:df:73:f7:
         d7:cf:40:b0:dc:c5:b7:e8:ef:cb:f4:76:6f:51:91:d0:5d:3a:
         2a:72:4a:83:25:eb:ec:95:93:90:da:ec:ff:83:59:2b:37:e7:
         90:fd:85:fe:82:d5:5f:46:63:0e:50:6a:8b:3f:75:0b:2a:df:
         62:b2:04:37:56:5e:8d:0f:71:14:c5:3c:da:0d:10:b1:a7:9f:
         82:8f:9f:b7:46:43:c2:e2:69:a5:29:4b:da:0e:19:c4:21:6b:
         59:4c:60:7c:8f:a2:42:eb:8c:40:aa:7f:6f:0d:2c:5c:35:eb:
         d8:e0:ae:3e:31:4f:00:45:aa:ce:31:ab:63:97:28:04:48:35:
         9d:50:9f:9e:87:f7:44:fb:c4:1d:02:e4:68:b3:50:ba:19:c8:
         8d:01:58:7d:e7:49:d5:b3:d8:d8:53:87:e1:6e:d2:bc:42:c7:
         bd:1f:ed:2e:65:18:09:23:3d:1b:f3:c1:02:bb:aa:d4:a2:c6:
         e0:a1:5a:f5:df:cf:3c:dc:c5:91:dd:d8:a6:72:80:e4:ce:3f:
         fb:2f:06:3e:29:16:65:8c:f7:62:0a:ee:f8:17:c5:4f:70:bc:
         ac:50:0c:94:7d:71:8e:64:4c:5b:8d:4a:19:8b:5d:af:3d:ac:
         d8:f1:69:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB
MEMzMEJDODAwHhcNMjYxMDA2MjIzMTAxWhcNMjYxMDEzMjIzMTAxWjAYMRYwFAYD
VQQDEw02YWM1NzZhNS00NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Frgb2EkadMUDWrin5uce/Ew+YQKnfuQiComKe1DPPgCv2uBo6LhJT0l0x3H
7UbuHoBY1KDhOpM2FFenEKu15YLEcQqJ+CYo4OMU3HyjspNbTSoQYLrR+CR0qCeB
DnXb82nACFBDidJL9vguTj/IVxI6G3CNzi/CadooWu/eaZJhTyVy/kkiCIW02SWi
vFhQ+FP1YR7Ucf6EabXWJbUunXCje3q9mTWoao6H+uXWwl3wq3WVdDHD0sCwh5F+
u8ew+59hXFPPjl0XxK3hx260+1tSjTWZZLzSOq9DCEHAmlgTEDLjywePXgjA8XSX
cMs3Us3HKk12n33PZJz7ond4+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBzpuDih
PMsamfo9tRCNWFBQhE6HMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2
MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J
RXVfNDJLUDF3RVNnd3d2SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAudWvym5SchqPkmFqLM/c33P3189AsNzFt+jvy/R2b1GR0F06KnJKgyXr7JWT
kNrs/4NZKzfnkP2F/oLVX0ZjDlBqiz91CyrfYrIEN1ZejQ9xFMU82g0Qsaefgo+f
t0ZDwuJppSlL2g4ZxCFrWUxgfI+iQuuMQKp/bw0sXDXr2OCuPjFPAEWqzjGrY5co
BEg1nVCfnof3RPvEHQLkaLNQuhnIjQFYfedJ1bPY2FOH4W7SvELHvR/tLmUYCSM9
G/PBAruq1KLG4KFa9d/PPNzFkd3YpnKA5M4/+y8GPikWZYz3Ygru+BfFT3C8rFAM
lH1xjmRMW41KGYtdrz2s2PFpqw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:25:33 2026 by rpki-client