Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
File:                     yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft (raw, json)
Hash identifier:          XS+H5ZgMOs2mBq6+HtkKlcpSi1gCbk1yLncHOUGVimk=
Subject key identifier:   71:C8:A1:56:F9:0F:0B:16:B0:D4:EB:75:93:0E:6C:58:43:60:9E:BA
Authority key identifier: C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01
Certificate issuer:       /CN=A91E4D3D/serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
Certificate serial:       06C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
Manifest number:          0694
Signing time:             Sat 04 Jul 2026 22:56:17 +0000
Manifest this update:     Sat 04 Jul 2026 22:56:17 +0000
Manifest next update:     Sat 11 Jul 2026 22:56:17 +0000
Files and hashes:         1: yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl (hash: BDWRIc9XC5eLAIZVRNJXd2V+Z8CqRk6YQTSJNz5gVLE=)
                          2: 5FA1BF8802DD11EE86865A23C4F9AE02.roa (hash: GFfQfs1rBXk5RvNn/1eLrsagDcvE+KrBjwNFBGF3aQo=)
                          3: 6954A6281D1811F1BB26F0200F3D8C67.roa (hash: XXABsTuyUY9zhDAKOY/bGcVfBEdcbQvVxf6jrMBBikE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl
                          rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 22:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4D3D, serialNumber=C8070FD061A851FF8AEDE0DE0C3607EEB98FF701
        Validity
            Not Before: Jul  4 22:56:17 2026 GMT
            Not After : Jul 11 22:56:17 2026 GMT
        Subject: CN=6a498f91-b2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:d0:c2:de:93:f0:5a:88:f9:19:1a:cb:d1:
                    39:c1:1c:7c:0a:be:6f:f0:8f:47:fb:07:c4:cb:19:
                    4b:33:83:35:69:85:8b:c5:30:55:9d:6b:91:7a:67:
                    d2:20:c8:c2:86:30:bf:29:f6:69:b5:a7:50:fc:ad:
                    15:40:b0:98:09:6a:18:43:9c:7b:b0:a6:3d:ee:05:
                    1a:9c:58:d3:d3:80:fc:e9:33:0c:40:c3:32:ca:bd:
                    f9:05:1c:60:a8:4b:c6:b4:3a:f5:0f:6c:db:c7:bb:
                    1c:58:8d:9a:ab:23:17:50:1f:41:fd:5d:2b:ab:fc:
                    6b:81:fa:5c:50:8a:01:a4:b3:d6:64:ac:1d:cf:d6:
                    ee:dc:85:ee:d9:e2:4d:18:82:88:38:3d:41:36:20:
                    e8:20:87:0f:e7:2e:69:6c:c0:85:89:fc:33:b4:7e:
                    29:c2:96:23:cd:0c:1b:90:00:93:ae:30:02:15:15:
                    c8:62:bd:21:32:59:49:6d:33:b1:c8:bc:69:17:b9:
                    e8:c3:7f:c2:7d:45:16:fd:86:99:89:b4:96:1a:2c:
                    d2:d0:ed:1e:6f:78:c4:15:b1:44:88:ff:c6:5e:c3:
                    c2:b9:37:23:4d:1d:c8:88:a5:7c:ea:82:36:be:a2:
                    b0:5d:43:45:ca:06:3f:4d:3b:db:a9:fb:1c:55:72:
                    e7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C8:A1:56:F9:0F:0B:16:B0:D4:EB:75:93:0E:6C:58:43:60:9E:BA
            X509v3 Authority Key Identifier:
                keyid:C8:07:0F:D0:61:A8:51:FF:8A:ED:E0:DE:0C:36:07:EE:B9:8F:F7:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAcP0GGoUf-K7eDeDDYH7rmP9wE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/B0202D32D8B911EBABC1F485C4F9AE02/yAcP0GGoUf-K7eDeDDYH7rmP9wE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:84:62:d8:9b:2d:79:75:bf:bd:ac:db:13:f3:64:6c:5f:
         94:88:64:45:30:90:0e:f6:f8:0d:09:9c:4b:0f:e4:df:46:1b:
         c8:a5:fe:ef:e7:f2:7e:2b:10:48:2f:cd:8d:7b:07:3f:03:a7:
         8d:18:da:b8:fb:3a:08:3b:ac:9d:77:ae:51:48:30:db:84:e1:
         97:52:38:fd:3c:0d:74:47:ff:94:57:34:13:0e:10:68:cb:8a:
         6b:76:5a:11:57:3f:96:2c:40:52:80:f8:32:f5:dd:49:7c:e1:
         8b:fe:4b:99:77:99:18:0b:7d:36:13:b5:cc:f0:2c:ca:bf:5f:
         89:96:f8:e7:36:79:eb:1f:3f:54:ed:ba:79:6e:bc:87:5b:d0:
         5b:6d:8e:62:b2:00:55:de:d0:3a:56:08:a4:1e:b4:a8:6d:78:
         d4:ab:59:1b:3b:a7:58:9d:25:5f:fd:0f:71:5f:93:ef:bb:85:
         d5:43:f3:54:78:aa:1c:db:b8:ed:d7:30:bd:a8:9b:b7:e3:fc:
         fc:22:66:17:3b:bf:c0:fe:7f:dd:c2:4e:38:b5:7b:28:02:95:
         21:85:93:2e:ef:62:cf:b7:df:2a:07:1f:45:e1:14:92:ae:c8:
         63:69:ae:3e:69:10:a9:2c:59:af:84:8b:23:02:59:58:8e:f1:
         c2:c0:5d:cb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTREM0QxMTAvBgNVBAUTKEM4MDcwRkQwNjFBODUxRkY4QUVERTBERTBDMzYwN0VF
Qjk4RkY3MDEwHhcNMjYwNzA0MjI1NjE3WhcNMjYwNzExMjI1NjE3WjAYMRYwFAYD
VQQDEw02YTQ5OGY5MS1iMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqTQwt6T8FqI+Rkay9E5wRx8Cr5v8I9H+wfEyxlLM4M1aYWLxTBVnWuRemfS
IMjChjC/KfZptadQ/K0VQLCYCWoYQ5x7sKY97gUanFjT04D86TMMQMMyyr35BRxg
qEvGtDr1D2zbx7scWI2aqyMXUB9B/V0rq/xrgfpcUIoBpLPWZKwdz9bu3IXu2eJN
GIKIOD1BNiDoIIcP5y5pbMCFifwztH4pwpYjzQwbkACTrjACFRXIYr0hMllJbTOx
yLxpF7now3/CfUUW/YaZibSWGizS0O0eb3jEFbFEiP/GXsPCuTcjTR3IiKV86oI2
vqKwXUNFygY/TTvbqfscVXLnFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHIoVb5
DwsWsNTrdZMObFhDYJ66MB8GA1UdIwQYMBaAFMgHD9BhqFH/iu3g3gw2B+65j/cB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9CMDIwMkQzMkQ4
QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1VmLUs3ZURlRERZSDdybVA5
d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lBY1AwR0dvVWYtSzdlRGVERFlIN3JtUDl3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEQzRC9CMDIwMkQzMkQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi95QWNQMEdHb1Vm
LUs3ZURlRERZSDdybVA5d0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdZyEYtibLXl1v72s2xPzZGxflIhkRTCQDvb4DQmcSw/k30YbyKX+7+fyfisQ
SC/NjXsHPwOnjRjauPs6CDusnXeuUUgw24Thl1I4/TwNdEf/lFc0Ew4QaMuKa3Za
EVc/lixAUoD4MvXdSXzhi/5LmXeZGAt9NhO1zPAsyr9fiZb45zZ56x8/VO26eW68
h1vQW22OYrIAVd7QOlYIpB60qG141KtZGzunWJ0lX/0PcV+T77uF1UPzVHiqHNu4
7dcwvaibt+P8/CJmFzu/wP5/3cJOOLV7KAKVIYWTLu9iz7ffKgcfReEUkq7IY2mu
PmkQqSxZr4SLIwJZWI7xwsBdyw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:38:36 2026 by rpki-client