Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
File:                     cYQNfZjFz5vWvrRIatRnQGXxR0E.mft (raw, json)
Hash identifier:          HajioJ23sOpZR+XtS2yF8tEZ8OhcwgMGuslN2XCmv24=
Subject key identifier:   49:33:CA:7C:1D:96:F9:EF:5E:3D:D3:CB:CE:25:A0:50:61:82:BF:07
Authority key identifier: 71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41
Certificate issuer:       /CN=A91B7B61/serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
Certificate serial:       069C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
Manifest number:          0694
Signing time:             Tue 18 Aug 2026 22:50:15 +0000
Manifest this update:     Tue 18 Aug 2026 22:50:14 +0000
Manifest next update:     Tue 25 Aug 2026 22:50:14 +0000
Files and hashes:         1: cYQNfZjFz5vWvrRIatRnQGXxR0E.crl (hash: /a3dK9RQDoaJbilH8UevWVo0W4jov3nHOx3IQxd+FwY=)
                          2: C2EFC706CAAE11EBA95C5E64C4F9AE02.roa (hash: 4mnGG9mctkzjRMjeZiJm8EP2Ry3MqPxpfShzQMCXH5g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1692 (0x69c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B61, serialNumber=71840D7D98C5CF9BD6BEB4486AD4674065F14741
        Validity
            Not Before: Aug 18 22:50:14 2026 GMT
            Not After : Aug 25 22:50:14 2026 GMT
        Subject: CN=6a84e1a7-f78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:44:4c:bc:72:18:e8:9a:f2:60:0a:28:c4:
                    89:dc:1b:f4:85:39:53:6d:47:f8:c7:b7:f9:da:5f:
                    9d:43:db:68:9d:a0:5f:7e:96:28:81:e2:5f:c6:a3:
                    ce:84:cf:c0:92:cc:2c:73:53:00:2b:a5:c9:2e:6e:
                    8e:6e:17:6e:e0:85:f3:92:29:d8:b2:21:06:95:b7:
                    98:df:d3:a1:ca:e9:7a:93:ed:ec:03:84:96:9e:78:
                    4a:3c:75:2b:3f:06:fc:63:64:db:ec:1f:a3:68:95:
                    07:f1:d5:74:a8:3a:08:19:f1:fc:6b:ed:92:4c:f2:
                    a7:dd:78:a7:8a:5f:26:3e:bf:05:47:c5:88:d2:4f:
                    a4:5b:de:00:1b:e0:52:6e:9e:3b:54:ed:f9:31:6c:
                    99:e0:4b:94:71:d8:98:93:84:87:98:af:5c:14:0a:
                    c7:7f:0f:60:e5:a2:aa:cc:e0:6d:e2:fb:c5:c7:2a:
                    dc:03:03:f9:08:1d:05:a7:8e:ec:ab:9f:4d:9b:b5:
                    1c:75:0b:c2:80:0a:61:68:0d:3b:fe:f7:6f:0e:7f:
                    7a:a5:90:4f:1d:7f:3b:b6:b4:f8:56:9a:48:ad:ba:
                    08:28:c3:3a:08:ef:8e:37:7f:32:f9:48:3c:c7:65:
                    4f:15:20:c0:2e:5d:a8:68:da:bb:fc:f4:bb:4f:30:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:33:CA:7C:1D:96:F9:EF:5E:3D:D3:CB:CE:25:A0:50:61:82:BF:07
            X509v3 Authority Key Identifier:
                keyid:71:84:0D:7D:98:C5:CF:9B:D6:BE:B4:48:6A:D4:67:40:65:F1:47:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cYQNfZjFz5vWvrRIatRnQGXxR0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B61/BE68D302CAAA11EBB8C02B5CC4F9AE02/cYQNfZjFz5vWvrRIatRnQGXxR0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d8:24:17:39:fa:00:37:05:ed:a8:08:95:1c:d3:0e:32:d4:
         03:be:a6:33:ed:7d:34:dd:f4:21:c7:3a:12:ac:10:0f:ab:f3:
         1c:35:c3:a1:fc:7b:0f:0e:6e:ab:57:96:c3:cc:58:0b:6b:cb:
         b0:40:6b:56:b3:7c:05:a9:a5:9f:de:21:e7:51:15:fb:73:1a:
         ef:2c:0d:e2:93:b9:be:2e:97:e4:f7:7a:af:cf:91:8b:eb:f4:
         eb:b0:9b:d9:76:6e:a5:71:cf:d1:60:0f:5c:6e:f7:6e:68:eb:
         c2:b3:eb:f9:60:e9:7a:c9:76:45:ef:dc:77:92:51:6d:d2:f0:
         aa:60:04:24:c3:5c:5c:41:3b:9e:14:41:7c:4c:3a:59:04:69:
         22:65:fa:dc:89:85:04:cc:d4:3a:a6:e4:e5:a0:7c:a4:af:e0:
         69:7d:83:b7:5d:31:09:66:0b:c3:85:de:be:71:91:0d:6d:54:
         2d:5f:a7:fb:0b:35:91:9c:96:a3:de:16:80:15:f1:5d:96:34:
         cd:a6:77:49:7d:2e:52:32:ce:d8:83:d1:98:4e:f5:47:bd:07:
         1f:ca:88:81:1e:cd:79:4c:fe:f0:c8:07:2a:74:55:9b:1e:90:
         b2:31:31:ef:dc:08:2a:4b:26:a7:56:26:69:48:73:71:7e:c9:
         de:05:fe:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdCNjExMTAvBgNVBAUTKDcxODQwRDdEOThDNUNGOUJENkJFQjQ0ODZBRDQ2NzQw
NjVGMTQ3NDEwHhcNMjYwODE4MjI1MDE0WhcNMjYwODI1MjI1MDE0WjAYMRYwFAYD
VQQDEw02YTg0ZTFhNy1mNzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTFETLxyGOia8mAKKMSJ3Bv0hTlTbUf4x7f52l+dQ9tonaBffpYogeJfxqPO
hM/Akswsc1MAK6XJLm6Obhdu4IXzkinYsiEGlbeY39Ohyul6k+3sA4SWnnhKPHUr
Pwb8Y2Tb7B+jaJUH8dV0qDoIGfH8a+2STPKn3Xinil8mPr8FR8WI0k+kW94AG+BS
bp47VO35MWyZ4EuUcdiYk4SHmK9cFArHfw9g5aKqzOBt4vvFxyrcAwP5CB0Fp47s
q59Nm7UcdQvCgAphaA07/vdvDn96pZBPHX87trT4VppIrboIKMM6CO+ON38y+Ug8
x2VPFSDALl2oaNq7/PS7TzBKrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkzynwd
lvnvXj3Ty84loFBhgr8HMB8GA1UdIwQYMBaAFHGEDX2Yxc+b1r60SGrUZ0Bl8UdB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0I2MS9CRTY4RDMwMkNB
QUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1dld2clJJYXRSblFHWHhS
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NZUU5mWmpGejV2V3ZyUklhdFJuUUdYeFIwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0I2MS9CRTY4RDMwMkNBQUExMUVCQjhDMDJCNUNDNEY5QUUwMi9jWVFOZlpqRno1
dld2clJJYXRSblFHWHhSMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAkNgkFzn6ADcF7agIlRzTDjLUA76mM+19NN30Icc6EqwQD6vzHDXDofx7Dw5u
q1eWw8xYC2vLsEBrVrN8Bamln94h51EV+3Ma7ywN4pO5vi6X5Pd6r8+Ri+v067Cb
2XZupXHP0WAPXG73bmjrwrPr+WDpesl2Re/cd5JRbdLwqmAEJMNcXEE7nhRBfEw6
WQRpImX63ImFBMzUOqbk5aB8pK/gaX2Dt10xCWYLw4XevnGRDW1ULV+n+ws1kZyW
o94WgBXxXZY0zaZ3SX0uUjLO2IPRmE71R70HH8qIgR7NeUz+8MgHKnRVmx6QsjEx
79wIKksmp1YmaUhzcX7J3gX+Aw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:55 2026 by rpki-client