Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File:                     yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier:          QyJHtEvhlqI1egOW0HRlPF7iAh7/YdP3/8g0/CwYNF4=
Subject key identifier:   85:AF:18:7C:E2:53:7C:95:7F:34:25:64:8F:4E:F6:91:B9:5D:71:05
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer:       /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number:          029C
Signing time:             Wed 19 Aug 2026 02:10:02 +0000
Manifest this update:     Wed 19 Aug 2026 02:10:01 +0000
Manifest next update:     Wed 26 Aug 2026 02:10:01 +0000
Files and hashes:         1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: PZiuZAazTfYA+oWCiuliI4u5gX/vWIGBn3Fif0Ios6k=)
                          2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
        Validity
            Not Before: Aug 19 02:10:01 2026 GMT
            Not After : Aug 26 02:10:01 2026 GMT
        Subject: CN=6a85107a-7280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:b1:1e:d0:b2:96:d6:ea:84:de:bb:1a:85:
                    8d:39:14:80:c6:77:f6:fd:70:a7:09:97:8e:c0:22:
                    fe:25:2a:b5:de:3d:18:00:1e:d9:22:1f:28:6c:c9:
                    fa:06:58:56:07:60:ce:ac:39:e2:6b:0b:3d:b1:6e:
                    de:69:af:01:51:61:dc:9c:da:d7:c9:6a:84:bd:69:
                    e9:c0:fd:7e:ac:36:44:83:17:25:d9:40:25:f0:94:
                    79:9c:d3:d9:a0:6a:aa:b4:21:71:84:e2:8f:5a:7f:
                    6a:96:5b:c0:46:58:f2:8b:bf:96:37:4e:16:75:7b:
                    9a:4d:2f:42:01:84:6b:7b:e6:b6:c5:d1:05:b1:40:
                    a8:e4:59:8f:b3:e1:57:85:10:e2:11:0f:4c:c4:ca:
                    4e:a6:f4:b0:5f:4d:73:46:4c:58:b9:08:29:3b:69:
                    1f:ec:0f:cf:d1:db:94:d5:41:a5:2c:6c:17:99:3e:
                    dc:07:b7:d6:b3:6c:0c:0d:bb:2c:1c:aa:6a:95:a9:
                    2b:b8:43:a5:c6:c6:26:13:01:ff:7c:90:4f:76:ed:
                    52:4e:2c:3f:85:0d:09:b3:45:fd:23:38:32:37:f4:
                    8a:42:5b:b5:e5:34:db:53:49:7b:a9:78:f3:14:69:
                    75:fa:29:8e:41:c6:5d:e1:0e:73:83:e2:db:b1:37:
                    3a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:18:7C:E2:53:7C:95:7F:34:25:64:8F:4E:F6:91:B9:5D:71:05
            X509v3 Authority Key Identifier:
                keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:2f:b1:6c:b6:13:7a:60:a9:f5:f9:7d:a2:f0:8c:5c:b9:90:
         5e:10:bf:65:fe:bd:44:95:26:b4:e5:b3:69:af:78:ec:8b:65:
         a9:a3:81:86:ba:26:81:70:ed:ba:5e:0a:b3:0e:5c:79:a5:4a:
         b5:5e:e4:ff:f6:a8:e0:a8:f4:e5:0e:b8:6c:75:53:05:1c:3e:
         ef:42:80:7a:b0:d2:9c:78:28:dd:20:48:7c:d8:0b:ca:81:c4:
         d8:64:c4:78:77:9e:2d:97:c2:f8:b5:bf:50:74:b2:d2:b4:60:
         f2:fb:d6:53:72:2c:9d:53:ca:77:ba:15:ba:ed:d6:0b:44:f7:
         3c:a1:36:dd:1d:67:c4:d4:ab:27:36:a1:8f:13:fc:51:a4:8d:
         2f:9c:a7:aa:af:c2:74:64:b1:ef:8a:41:83:aa:48:a7:b3:ff:
         fb:ee:88:76:94:5d:08:db:71:03:f0:67:59:05:19:5d:ce:a8:
         af:20:9e:f3:ae:1f:bf:a8:22:4a:0b:19:3e:e2:d8:92:5b:22:
         3d:f4:c7:01:20:ac:08:61:33:99:af:ca:9f:82:2f:e6:20:da:
         3b:06:74:3c:c3:b6:26:c6:3f:1a:cb:5b:4c:86:60:31:19:8c:
         90:f5:68:8e:f8:84:dd:f8:af:4c:32:f7:41:27:1c:d0:82:4d:
         ea:fd:ca:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:52 2026 by rpki-client