Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
File:                     YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft (raw, json)
Hash identifier:          NoBmX5HCejSIAMtY7ycWrvPEmsOvY4zsmJbywD3TdYk=
Subject key identifier:   4B:F6:24:41:68:2A:3F:15:48:02:A9:6F:85:BB:44:0D:6A:D3:4D:F7
Authority key identifier: 60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B
Certificate issuer:       /CN=A91E5998/serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
Certificate serial:       0719
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
Manifest number:          070A
Signing time:             Tue 18 Aug 2026 22:29:39 +0000
Manifest this update:     Tue 18 Aug 2026 22:29:38 +0000
Manifest next update:     Tue 25 Aug 2026 22:29:38 +0000
Files and hashes:         1: YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl (hash: mpBWQVQ7cj9uJp129l6/qkfG5qS5YqUjs680/IrOtV4=)
                          2: 7438DDF0FD4A11EF85D3AC1AC4F9AE02.roa (hash: 6MV/JB/AVzJ1jFVU4hbKStEgcJJ7g5X4BpXazLBYuuU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl
                          rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5998, serialNumber=601DC54B1F5205080EFD9AA6CFA5A51C4A79DD2B
        Validity
            Not Before: Aug 18 22:29:38 2026 GMT
            Not After : Aug 25 22:29:38 2026 GMT
        Subject: CN=6a84dcd3-1c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:08:7c:fc:ef:43:b1:a6:19:95:3a:f5:4a:
                    01:65:b1:34:d8:e0:6b:be:02:e9:ef:d0:86:01:ba:
                    d4:df:5c:14:d4:62:66:1b:0c:9a:3f:ee:36:04:44:
                    01:16:17:34:7d:3c:6f:2b:34:e0:00:79:77:2a:15:
                    fa:be:16:8d:be:64:da:ff:d0:c9:25:00:40:9d:49:
                    00:dd:e8:24:22:0a:3b:da:72:c9:61:92:b7:97:35:
                    f3:08:dd:6d:1a:f5:07:f8:88:f9:c8:dc:23:17:d3:
                    3d:f4:56:6e:72:1a:29:ca:c3:8a:66:96:4d:f2:c7:
                    57:57:f9:5b:c7:c7:3b:c4:e4:2e:9c:ab:72:0b:ee:
                    37:50:eb:1c:f8:0a:72:8b:44:7d:fc:55:05:80:7e:
                    9b:2e:49:12:fc:cb:bd:88:fb:68:7f:42:f9:a6:13:
                    19:32:a2:46:d9:3c:72:c0:ef:a3:f6:9c:7d:ec:cd:
                    98:78:f9:a1:34:eb:2e:bc:67:49:49:36:a3:22:21:
                    a4:f2:b5:4c:92:37:66:5e:ff:e2:a2:1c:21:18:3d:
                    f4:75:23:b1:4f:0c:98:fa:a1:00:f9:6d:2f:31:7a:
                    d8:6a:c0:29:1d:c3:17:56:32:bc:30:d0:b0:6d:35:
                    5d:b6:ac:75:70:ad:7f:08:6a:d3:54:70:af:20:0e:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F6:24:41:68:2A:3F:15:48:02:A9:6F:85:BB:44:0D:6A:D3:4D:F7
            X509v3 Authority Key Identifier:
                keyid:60:1D:C5:4B:1F:52:05:08:0E:FD:9A:A6:CF:A5:A5:1C:4A:79:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5998/2C592E289F1F11EBB30D5743C4F9AE02/YB3FSx9SBQgO_Zqmz6WlHEp53Ss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:39:ab:fd:f1:3b:ba:1d:fa:40:5c:3d:e1:d5:c9:af:b6:87:
         c3:15:37:e6:83:c0:86:2b:bd:b9:91:3b:84:d6:55:45:55:2e:
         8a:b2:41:06:cc:40:18:4e:55:83:bb:89:4a:c9:6f:4c:50:e2:
         6d:33:a9:30:38:2d:fb:0f:68:88:c1:a5:21:68:52:be:ce:fe:
         4c:6c:8a:fe:94:0b:1e:0c:0a:02:97:27:a0:c9:c1:79:a7:54:
         d8:35:ba:ca:ae:f1:6b:f3:e6:a6:cf:dd:d7:73:f7:e5:15:83:
         3d:f0:8c:ae:cc:60:1b:33:8b:36:7e:53:6d:41:6e:21:1e:1c:
         fc:56:75:83:c0:e3:52:90:ce:85:74:a5:e6:20:0a:e9:14:c1:
         9e:9f:0e:9a:11:b1:ef:66:b7:ed:b7:60:90:be:ee:6b:83:7a:
         51:9c:58:12:c3:1e:98:6e:65:33:1a:2b:35:d4:90:72:51:e2:
         09:05:0e:c8:13:06:b3:a2:ce:ca:b1:34:7b:25:97:6e:e5:c7:
         db:6b:5c:76:3a:b0:ca:57:fe:7c:b9:16:66:57:1f:fa:94:b8:
         74:99:3e:5f:87:99:8a:b9:4a:c4:6c:7b:0a:06:59:28:49:fa:
         76:3f:48:f3:0f:9c:05:52:8f:0f:75:be:d2:b2:ba:88:c9:48:
         19:97:78:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU5OTgxMTAvBgNVBAUTKDYwMURDNTRCMUY1MjA1MDgwRUZEOUFBNkNGQTVBNTFD
NEE3OUREMkIwHhcNMjYwODE4MjIyOTM4WhcNMjYwODI1MjIyOTM4WjAYMRYwFAYD
VQQDEw02YTg0ZGNkMy0xYzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIYIfPzvQ7GmGZU69UoBZbE02OBrvgLp79CGAbrU31wU1GJmGwyaP+42BEQB
Fhc0fTxvKzTgAHl3KhX6vhaNvmTa/9DJJQBAnUkA3egkIgo72nLJYZK3lzXzCN1t
GvUH+Ij5yNwjF9M99FZuchopysOKZpZN8sdXV/lbx8c7xOQunKtyC+43UOsc+Apy
i0R9/FUFgH6bLkkS/Mu9iPtof0L5phMZMqJG2TxywO+j9px97M2YePmhNOsuvGdJ
STajIiGk8rVMkjdmXv/iohwhGD30dSOxTwyY+qEA+W0vMXrYasApHcMXVjK8MNCw
bTVdtqx1cK1/CGrTVHCvIA4howIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEv2JEFo
Kj8VSAKpb4W7RA1q0033MB8GA1UdIwQYMBaAFGAdxUsfUgUIDv2aps+lpRxKed0r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTk5OC8yQzU5MkUyODlG
MUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JRZ09fWnFtejZXbEhFcDUz
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCM0ZTeDlTQlFnT19acW16NldsSEVwNTNTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTk5OC8yQzU5MkUyODlGMUYxMUVCQjMwRDU3NDNDNEY5QUUwMi9ZQjNGU3g5U0JR
Z09fWnFtejZXbEhFcDUzU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIzmr/fE7uh36QFw94dXJr7aHwxU35oPAhiu9uZE7hNZVRVUuirJBBsxAGE5V
g7uJSslvTFDibTOpMDgt+w9oiMGlIWhSvs7+TGyK/pQLHgwKApcnoMnBeadU2DW6
yq7xa/Pmps/d13P35RWDPfCMrsxgGzOLNn5TbUFuIR4c/FZ1g8DjUpDOhXSl5iAK
6RTBnp8OmhGx72a37bdgkL7ua4N6UZxYEsMemG5lMxorNdSQclHiCQUOyBMGs6LO
yrE0eyWXbuXH22tcdjqwylf+fLkWZlcf+pS4dJk+X4eZirlKxGx7CgZZKEn6dj9I
8w+cBVKPD3W+0rK6iMlIGZd47Q==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:32 2026 by rpki-client