Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
File:                     yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json)
Hash identifier:          ygM6UzffyOhOWIuy+blYQPr/bmHMtmk9JwyPVumASWw=
Subject key identifier:   19:98:E7:D4:2C:A3:45:40:A3:A4:59:6A:7D:51:B3:DC:3D:DA:45:D8
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Certificate issuer:       /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial:       0676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
Manifest number:          066E
Signing time:             Tue 18 Aug 2026 22:54:11 +0000
Manifest this update:     Tue 18 Aug 2026 22:54:11 +0000
Manifest next update:     Tue 25 Aug 2026 22:54:11 +0000
Files and hashes:         1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: 4dO7l4sAjC8YhIi6xI0hzgWxX6EchopnYLxl++pkGq4=)
                          2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: KZJqMSXjpce/PYO9PZaFTw1AjKkd0pgektz4tGJ/sxo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
                          rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
        Validity
            Not Before: Aug 18 22:54:11 2026 GMT
            Not After : Aug 25 22:54:11 2026 GMT
        Subject: CN=6a84e293-d05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:3c:85:7e:59:56:a3:83:9d:da:10:e7:8b:
                    96:d2:59:97:96:24:aa:c3:42:d3:f6:3c:29:33:1f:
                    ff:97:d2:d0:29:fb:5c:52:e6:17:9c:f5:2b:7f:2c:
                    a1:ab:49:6d:67:08:81:d0:d1:ad:84:2d:89:11:fc:
                    41:78:1d:58:dd:09:1a:87:64:8c:58:33:82:61:09:
                    27:8e:96:f5:b9:ec:fc:40:42:dc:4e:78:09:48:31:
                    39:19:7e:ea:06:52:ca:09:dd:d7:d2:4e:aa:45:c4:
                    38:4c:3c:e4:29:89:1f:34:fe:e7:0e:54:c1:d7:98:
                    b4:7e:41:4b:df:51:da:57:8c:03:e5:7f:53:3a:f9:
                    fc:2d:23:5d:25:e2:99:0d:8a:fe:8a:65:e8:e5:fb:
                    ca:3e:a0:41:2e:27:59:8c:ed:64:32:0c:26:d4:5b:
                    f1:e2:bf:04:66:46:3e:40:e0:b4:da:30:f6:ba:9e:
                    65:03:54:f0:f3:3f:37:1e:af:60:85:14:d4:0a:ae:
                    cb:33:1c:4d:6e:8b:d5:7c:b0:f5:22:f4:b5:1a:fd:
                    51:35:03:db:6e:73:63:13:77:96:6a:9b:66:49:c6:
                    b2:6b:ab:1c:d5:9e:c8:2b:8a:59:58:41:01:bf:c5:
                    78:e5:8c:c5:06:7d:4a:1d:37:9b:e5:bc:f1:52:08:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:98:E7:D4:2C:A3:45:40:A3:A4:59:6A:7D:51:B3:DC:3D:DA:45:D8
            X509v3 Authority Key Identifier:
                keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:36:9d:e8:3d:53:06:f1:cd:6e:55:61:91:0e:cf:a6:6a:63:
         1b:db:f6:f5:f5:9d:83:0c:65:f8:9e:e2:67:32:43:3c:c9:d3:
         fc:01:09:18:f2:e8:43:b7:14:25:d0:18:8e:d4:6c:02:9f:9b:
         55:4b:22:c0:6b:bd:39:3b:b2:9d:f1:68:c2:7a:e7:05:58:7a:
         ec:04:e5:29:d2:07:0e:92:f5:74:e1:d3:a4:5e:e6:0f:8a:32:
         be:21:b1:c0:b6:c6:de:7f:30:b0:fc:dc:fd:7a:ca:9a:ac:19:
         85:0c:2a:6b:1a:28:45:2d:d2:08:c6:ce:e1:83:b3:fc:f6:af:
         40:c5:bb:76:e3:06:96:97:d3:1b:ba:5b:37:b6:7e:4c:1e:b6:
         31:12:3f:df:2d:6a:37:53:b8:53:52:b5:97:d1:07:78:e8:5d:
         c0:30:76:ca:cb:5c:b4:24:a1:28:81:0d:ff:4c:51:cb:13:ae:
         af:a4:06:c6:db:e7:4e:5d:4e:be:de:d0:7f:bf:0e:e3:a0:d5:
         4e:30:10:fa:8d:83:e8:a7:31:67:1f:7e:a3:3c:cf:d4:41:13:
         49:b0:88:f5:9f:db:57:49:93:80:78:ac:47:87:09:b6:ab:e4:
         b4:8f:65:cf:34:ef:58:e4:d5:cf:ac:27:26:4d:42:a2:c4:ef:
         ff:01:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:40 2026 by rpki-client