Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
File:                     3YoriGVMM2b_5_z2VWqXhgAqpls.mft (raw, json)
Hash identifier:          Gwox6vBdffLfL0ICU2uHOecX5wJQAWRubVSoHBU23Q8=
Subject key identifier:   B5:EF:94:83:4A:89:C7:1F:F6:07:CD:B7:09:AC:95:46:EA:B0:75:D5
Authority key identifier: DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B
Certificate issuer:       /CN=A91CFAB9/serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
Certificate serial:       04B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
Manifest number:          04AA
Signing time:             Mon 26 Oct 2026 23:50:29 +0000
Manifest this update:     Mon 26 Oct 2026 23:50:29 +0000
Manifest next update:     Mon 02 Nov 2026 23:50:29 +0000
Files and hashes:         1: 3YoriGVMM2b_5_z2VWqXhgAqpls.crl (hash: UBnD5kJM85pav2Ivp7kCp0CXpwsHb55nNrOIqSZ9+ys=)
                          2: 596CCC4E9F1911EC8FDFEA7DC4F9AE02.roa (hash: aFVSGijB/ihv4Zbx6wzchv39nUq4RkYxcKN+StYj5uw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl
                          rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 23:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFAB9, serialNumber=DD8A2B88654C3366FFE7FCF6556A9786002AA65B
        Validity
            Not Before: Oct 26 23:50:29 2026 GMT
            Not After : Nov  2 23:50:29 2026 GMT
        Subject: CN=6adfe745-6533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:d7:59:e2:0f:9f:94:de:89:f1:3a:f5:d1:
                    fc:13:07:91:fb:66:0c:cb:15:1d:59:63:8c:d4:7f:
                    ae:e0:3e:3f:81:81:76:30:96:98:5b:cf:b7:07:fa:
                    31:53:62:cb:e3:6a:79:7e:3e:3f:de:38:96:89:f7:
                    cc:da:d2:8f:a3:2c:b8:77:ef:4f:fc:49:d2:d5:11:
                    f3:39:6a:bc:24:ce:66:33:43:2e:78:68:a1:13:db:
                    ae:e6:c1:7b:a3:49:79:59:df:ee:0e:64:30:ed:9b:
                    8e:a0:cb:65:38:27:76:7a:68:05:cb:05:f3:69:e1:
                    d8:3e:3e:0f:94:c7:f2:a4:9a:b4:77:41:95:00:a0:
                    72:1c:cd:a2:61:27:a9:71:d3:6f:8e:7f:14:ad:64:
                    ed:10:51:2c:db:cf:7b:22:3b:a4:be:14:43:67:fe:
                    d3:b4:ff:d6:07:cf:5c:69:e0:7c:9c:0d:da:43:f2:
                    98:ca:24:26:7b:6e:57:39:fe:78:cb:33:7e:fa:c4:
                    d0:91:a7:1d:11:e9:ec:af:73:36:a0:33:7a:60:3c:
                    a6:8c:05:89:2c:79:18:25:27:f8:52:33:dd:13:54:
                    5c:64:8d:5a:ed:28:d2:d9:c1:1b:b3:f9:15:4a:52:
                    c5:66:17:4c:ef:d9:06:46:0b:a1:71:53:da:7a:6b:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:94:83:4A:89:C7:1F:F6:07:CD:B7:09:AC:95:46:EA:B0:75:D5
            X509v3 Authority Key Identifier:
                keyid:DD:8A:2B:88:65:4C:33:66:FF:E7:FC:F6:55:6A:97:86:00:2A:A6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YoriGVMM2b_5_z2VWqXhgAqpls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/E853382C9F1311EC9E45D572C4F9AE02/3YoriGVMM2b_5_z2VWqXhgAqpls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:70:64:83:ff:89:3b:9a:1b:f0:02:a4:71:43:e0:1e:f0:f6:
         eb:76:66:17:9d:68:32:10:54:dd:80:91:f3:60:44:59:94:b2:
         a3:39:45:d9:91:73:a9:a3:8c:9c:0a:a2:0c:e3:16:b9:80:c1:
         c8:1a:b3:3e:88:73:da:7f:29:d1:80:52:bb:9a:25:23:22:ed:
         13:ae:a6:57:f7:ea:56:3e:22:4d:29:0c:fa:e7:09:71:00:bb:
         d4:1d:20:b1:91:5f:3d:9c:cf:73:53:cd:28:c2:63:b4:47:b9:
         98:03:b1:26:28:54:a7:a3:d3:1d:51:04:bf:b7:6b:2e:3e:b8:
         8a:8f:88:97:68:22:b4:e1:ce:3e:e4:41:95:26:cc:60:ed:ee:
         f1:a9:31:13:58:23:cd:61:d5:a9:4d:84:51:18:8b:76:ff:a4:
         77:1e:6a:75:4f:61:d3:fc:5e:8c:f3:07:ce:c8:ea:8f:4d:92:
         5b:d7:4d:bd:04:ed:9f:c8:56:f4:a1:35:91:1b:6f:23:24:9b:
         cb:06:c5:91:7d:b7:22:e7:05:5c:3f:75:e6:21:21:ee:eb:60:
         ef:d6:07:39:92:26:a2:54:e3:e3:d1:fc:24:a4:67:0f:be:42:
         fd:5e:0d:9c:40:eb:6f:96:d0:a5:a0:8e:38:7d:8d:ca:cc:58:
         56:ac:53:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBQjkxMTAvBgNVBAUTKEREOEEyQjg4NjU0QzMzNjZGRkU3RkNGNjU1NkE5Nzg2
MDAyQUE2NUIwHhcNMjYxMDI2MjM1MDI5WhcNMjYxMTAyMjM1MDI5WjAYMRYwFAYD
VQQDEw02YWRmZTc0NS02NTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qfXWeIPn5TeifE69dH8EweR+2YMyxUdWWOM1H+u4D4/gYF2MJaYW8+3B/ox
U2LL42p5fj4/3jiWiffM2tKPoyy4d+9P/EnS1RHzOWq8JM5mM0MueGihE9uu5sF7
o0l5Wd/uDmQw7ZuOoMtlOCd2emgFywXzaeHYPj4PlMfypJq0d0GVAKByHM2iYSep
cdNvjn8UrWTtEFEs2897IjukvhRDZ/7TtP/WB89caeB8nA3aQ/KYyiQme25XOf54
yzN++sTQkacdEensr3M2oDN6YDymjAWJLHkYJSf4UjPdE1RcZI1a7SjS2cEbs/kV
SlLFZhdM79kGRguhcVPaemv8pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXvlINK
iccf9gfNtwmslUbqsHXVMB8GA1UdIwQYMBaAFN2KK4hlTDNm/+f89lVql4YAKqZb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkFCOS9FODUzMzgyQzlG
MTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0yYl81X3oyVldxWGhnQXFw
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNZb3JpR1ZNTTJiXzVfejJWV3FYaGdBcXBscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkFCOS9FODUzMzgyQzlGMTMxMUVDOUU0NUQ1NzJDNEY5QUUwMi8zWW9yaUdWTU0y
Yl81X3oyVldxWGhnQXFwbHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHHBkg/+JO5ob8AKkcUPgHvD263ZmF51oMhBU3YCR82BEWZSyozlF2ZFzqaOM
nAqiDOMWuYDByBqzPohz2n8p0YBSu5olIyLtE66mV/fqVj4iTSkM+ucJcQC71B0g
sZFfPZzPc1PNKMJjtEe5mAOxJihUp6PTHVEEv7drLj64io+Il2gitOHOPuRBlSbM
YO3u8akxE1gjzWHVqU2EURiLdv+kdx5qdU9h0/xejPMHzsjqj02SW9dNvQTtn8hW
9KE1kRtvIySbywbFkX23IucFXD915iEh7utg79YHOZImolTj49H8JKRnD75C/V4N
nEDrb5bQpaCOOH2NysxYVqxTKQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:20 2026 by rpki-client