Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
File:                     YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft (raw, json)
Hash identifier:          ElFLdIOppdyqGI5OetMv1hh5/qfZdS/1/x4M4lSv3rg=
Subject key identifier:   83:AF:AE:89:93:E1:0D:B6:49:F0:5D:F8:98:7B:58:24:D7:21:84:9E
Authority key identifier: 60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04
Certificate issuer:       /CN=A91BBED0/serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
Certificate serial:       0235
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
Manifest number:          022D
Signing time:             Sun 11 Oct 2026 03:16:14 +0000
Manifest this update:     Sun 11 Oct 2026 03:16:13 +0000
Manifest next update:     Sun 18 Oct 2026 03:16:13 +0000
Files and hashes:         1: YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl (hash: MzyDvxCx1UqJlQby4nD0NTRbn5oc7dcaz4eishckBg0=)
                          2: 2BA240AC994111F096074C40C4F9AE02.roa (hash: Fr2ZVaq2RAQig/lVmxSqaFzBNXD8cpdo1MJbLGVsqjA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 03:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBED0, serialNumber=609FEC2594380FC7639694173C3CFE5F2B596204
        Validity
            Not Before: Oct 11 03:16:13 2026 GMT
            Not After : Oct 18 03:16:13 2026 GMT
        Subject: CN=6acaff7d-fa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:8b:63:22:4b:6f:96:61:40:5c:a9:1c:73:
                    f9:76:86:a2:4f:42:92:bc:2d:cd:cb:ee:34:f3:02:
                    3b:02:a0:61:78:58:f6:3c:4a:02:27:94:e7:32:68:
                    27:73:1c:27:c2:d0:57:0c:46:8b:7e:94:35:3b:70:
                    20:00:a5:c5:e7:ad:79:a9:32:ca:1d:b2:3a:b3:41:
                    05:b8:78:7d:4e:e7:54:9e:86:30:d4:ac:1a:ca:f8:
                    2c:3a:60:ce:c9:ff:e1:65:28:69:33:6b:4a:19:7d:
                    d6:54:8c:b9:f7:18:32:6f:e9:1f:e8:ce:28:f8:96:
                    fb:d6:a3:67:30:5c:2e:53:30:7a:94:6e:60:ea:e3:
                    1e:5c:57:da:fe:b9:d7:b7:67:c4:33:96:99:b7:de:
                    0a:1c:0b:e8:ef:a7:72:9a:4e:4d:c3:6e:5b:b9:fd:
                    ec:be:c4:77:1a:c9:09:92:1e:4b:d7:b0:0c:8a:51:
                    1c:ad:ba:0b:46:e1:5f:89:70:8a:c1:72:b3:84:6b:
                    32:5f:7d:c1:be:ec:90:b7:a4:d9:8e:08:4f:23:5a:
                    9d:30:a6:b5:28:d9:7b:0e:1a:52:c2:1e:3f:79:3a:
                    69:93:94:91:96:5a:9e:88:e5:21:61:1b:15:15:2e:
                    fa:31:b9:9e:95:4c:7a:af:75:87:02:62:d9:dd:90:
                    06:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AF:AE:89:93:E1:0D:B6:49:F0:5D:F8:98:7B:58:24:D7:21:84:9E
            X509v3 Authority Key Identifier:
                keyid:60:9F:EC:25:94:38:0F:C7:63:96:94:17:3C:3C:FE:5F:2B:59:62:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBED0/4C17A04E77E111EEAB4AEF53C4F9AE02/YJ_sJZQ4D8djlpQXPDz-XytZYgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:48:c6:84:da:11:98:d3:bc:9e:c1:c6:48:65:5a:39:82:1d:
         ca:82:b1:65:d3:b4:85:4c:67:8a:55:99:a8:5a:df:12:1c:89:
         26:50:82:e3:52:f4:22:58:78:97:bd:0d:4c:13:a3:fd:30:a6:
         b1:cd:ac:b6:c6:1c:46:e6:fd:e7:3d:4d:b6:3f:50:43:96:0e:
         76:57:9e:6b:87:9a:33:f9:e3:64:66:ad:37:12:4b:ee:56:2d:
         85:ce:af:a3:f7:cc:71:22:49:0f:82:a5:70:e4:07:1d:c0:75:
         d3:35:20:c7:ee:ae:c0:e9:60:40:1a:59:66:83:a2:89:c5:86:
         20:c9:f3:29:6a:aa:df:2f:e4:ef:59:e6:39:75:44:47:8d:d6:
         7d:88:3c:d1:83:05:c7:b5:6d:28:2a:a7:39:75:84:ce:a6:05:
         cb:fe:15:24:7c:bb:53:d0:c8:8f:32:f7:16:91:1f:dc:7b:7d:
         8d:19:1d:93:b3:4b:67:bc:87:1a:1b:55:29:54:78:d4:05:b9:
         a8:a6:d3:29:2d:49:3d:53:54:e8:bb:ce:73:17:bc:85:ae:8d:
         cd:c2:b2:17:38:fb:eb:0a:02:51:81:8e:50:2f:b0:40:0f:f3:
         75:6c:33:1f:f4:6e:7d:b2:59:57:3d:08:a0:da:4e:86:ed:47:
         aa:a8:e1:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJFRDAxMTAvBgNVBAUTKDYwOUZFQzI1OTQzODBGQzc2Mzk2OTQxNzNDM0NGRTVG
MkI1OTYyMDQwHhcNMjYxMDExMDMxNjEzWhcNMjYxMDE4MDMxNjEzWjAYMRYwFAYD
VQQDEw02YWNhZmY3ZC1mYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyTmLYyJLb5ZhQFypHHP5doaiT0KSvC3Ny+408wI7AqBheFj2PEoCJ5TnMmgn
cxwnwtBXDEaLfpQ1O3AgAKXF5615qTLKHbI6s0EFuHh9TudUnoYw1KwayvgsOmDO
yf/hZShpM2tKGX3WVIy59xgyb+kf6M4o+Jb71qNnMFwuUzB6lG5g6uMeXFfa/rnX
t2fEM5aZt94KHAvo76dymk5Nw25buf3svsR3GskJkh5L17AMilEcrboLRuFfiXCK
wXKzhGsyX33BvuyQt6TZjghPI1qdMKa1KNl7DhpSwh4/eTppk5SRllqeiOUhYRsV
FS76MbmelUx6r3WHAmLZ3ZAGRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIOvromT
4Q22SfBd+Jh7WCTXIYSeMB8GA1UdIwQYMBaAFGCf7CWUOA/HY5aUFzw8/l8rWWIE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkVEMC80QzE3QTA0RTc3
RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4ZGpscFFYUER6LVh5dFpZ
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lKX3NKWlE0RDhkamxwUVhQRHotWHl0WllnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkVEMC80QzE3QTA0RTc3RTExMUVFQUI0QUVGNTNDNEY5QUUwMi9ZSl9zSlpRNEQ4
ZGpscFFYUER6LVh5dFpZZ1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXUjGhNoRmNO8nsHGSGVaOYIdyoKxZdO0hUxnilWZqFrfEhyJJlCC41L0Ilh4
l70NTBOj/TCmsc2stsYcRub95z1Ntj9QQ5YOdleea4eaM/njZGatNxJL7lYthc6v
o/fMcSJJD4KlcOQHHcB10zUgx+6uwOlgQBpZZoOiicWGIMnzKWqq3y/k71nmOXVE
R43WfYg80YMFx7VtKCqnOXWEzqYFy/4VJHy7U9DIjzL3FpEf3Ht9jRkdk7NLZ7yH
GhtVKVR41AW5qKbTKS1JPVNU6LvOcxe8ha6NzcKyFzj76woCUYGOUC+wQA/zdWwz
H/RufbJZVz0IoNpOhu1HqqjhUQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:33:00 2026 by rpki-client