Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
File:                     YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft (raw, json)
Hash identifier:          91zSk7+2kegyeXALVjD88ghuNXyZyukrC/OR2LEUph4=
Subject key identifier:   7F:AE:FB:CE:F8:63:07:EA:A5:83:F7:45:9D:A7:87:A9:47:46:DE:55
Authority key identifier: 60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68
Certificate issuer:       /CN=A91E5A08/serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
Manifest number:          026F
Signing time:             Wed 19 Aug 2026 02:34:54 +0000
Manifest this update:     Wed 19 Aug 2026 02:34:54 +0000
Manifest next update:     Wed 26 Aug 2026 02:34:54 +0000
Files and hashes:         1: YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl (hash: eeWZYKzz3UBeMGYcYZnyTM0clnqilRvUowmEix5PbgU=)
                          2: EC9A7C9EE26811EDBB19B85EC4F9AE02.roa (hash: kXMMTzpfUp5tzsj3ErSeWyi6kiUv6/A6nv/Z2vTJWmA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5A08, serialNumber=6006B9658313D864991619D6979B0F7E01E4B668
        Validity
            Not Before: Aug 19 02:34:54 2026 GMT
            Not After : Aug 26 02:34:54 2026 GMT
        Subject: CN=6a85164e-78f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:81:5a:86:ad:37:6b:2a:d2:64:2b:f8:64:47:
                    72:52:a4:04:4f:10:86:f2:cf:43:77:88:69:f8:3b:
                    65:d2:f8:76:ee:d1:85:96:74:ad:e9:35:05:75:6c:
                    2a:83:b2:58:ab:55:f5:31:cc:18:d6:8d:c2:47:34:
                    b8:b8:0c:6f:26:27:43:08:e7:d0:95:54:6c:33:bd:
                    2a:f6:ae:31:66:21:9d:cc:8c:3c:b9:99:12:bc:f7:
                    14:7a:43:48:f4:44:84:c4:6b:6b:98:78:8f:c9:51:
                    45:e4:a0:a6:ea:61:12:a0:7c:d3:1c:3b:2a:18:a9:
                    8f:b5:4f:ba:5b:1a:9f:dc:06:3c:76:1d:81:af:11:
                    38:09:24:bc:ce:3a:50:15:4b:15:3a:a2:17:21:ba:
                    9c:05:7c:73:67:c0:0c:14:65:34:7b:71:88:c9:ec:
                    26:e2:f0:c2:7f:4e:40:a2:fa:f3:40:76:6d:c3:9c:
                    35:0d:94:76:a2:fd:a9:82:de:06:85:74:41:8b:11:
                    4d:50:27:57:e3:ab:e9:f7:0d:53:fe:0a:d4:bf:0c:
                    d9:ca:9a:95:a7:bf:cd:3f:92:87:a4:aa:a3:ac:3d:
                    65:7c:17:40:8f:9a:a8:89:9d:35:f7:20:20:96:33:
                    35:61:8d:a4:62:37:e7:cc:13:cf:61:a6:9d:f8:5e:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:FB:CE:F8:63:07:EA:A5:83:F7:45:9D:A7:87:A9:47:46:DE:55
            X509v3 Authority Key Identifier:
                keyid:60:06:B9:65:83:13:D8:64:99:16:19:D6:97:9B:0F:7E:01:E4:B6:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAa5ZYMT2GSZFhnWl5sPfgHktmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A08/B060CC54E26511ED850CDE54C4F9AE02/YAa5ZYMT2GSZFhnWl5sPfgHktmg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:03:f7:52:da:fa:e6:26:f5:5f:d4:fa:8f:15:eb:69:47:c4:
         77:5f:44:09:3f:34:59:1e:2c:cb:00:60:97:0b:13:38:14:f3:
         92:c0:a6:6f:65:ea:3b:2a:9e:87:0a:f2:f6:4d:80:88:2b:e0:
         a2:0c:d9:0c:5f:96:af:64:74:99:3c:1b:f1:22:f3:09:e7:04:
         26:90:06:2f:7a:f5:85:66:2c:9b:a2:6a:c1:6e:ca:4a:7f:c8:
         6c:82:89:89:bc:fd:9b:94:bc:ee:3b:51:1a:c6:fc:9e:e3:1e:
         d7:3c:13:d2:1d:1d:bd:30:e4:89:bd:60:64:bc:40:c4:e6:8a:
         9c:4d:e3:32:0a:b0:12:6f:a9:32:9c:4e:df:df:bd:a0:89:0c:
         de:78:df:20:27:0a:c8:b0:41:e1:43:ac:d0:df:17:7d:dd:fb:
         c9:f4:d8:79:bf:a6:f9:e8:20:3f:22:84:43:36:9e:d3:55:ef:
         6d:4d:5a:e0:23:d4:d3:06:9c:fb:45:88:9a:69:de:66:4b:e2:
         92:df:66:a9:ae:39:b2:96:6a:89:40:09:90:ac:5b:04:f1:17:
         6c:d2:a0:f7:19:8e:58:fc:33:5d:6c:61:37:d2:a5:8b:18:c8:
         59:b8:c4:04:b4:fc:b5:93:46:c3:7e:85:2d:ee:fd:6a:7d:4d:
         f7:ba:8c:a1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVBMDgxMTAvBgNVBAUTKDYwMDZCOTY1ODMxM0Q4NjQ5OTE2MTlENjk3OUIwRjdF
MDFFNEI2NjgwHhcNMjYwODE5MDIzNDU0WhcNMjYwODI2MDIzNDU0WjAYMRYwFAYD
VQQDEw02YTg1MTY0ZS03OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7YFahq03ayrSZCv4ZEdyUqQETxCG8s9Dd4hp+Dtl0vh27tGFlnSt6TUFdWwq
g7JYq1X1McwY1o3CRzS4uAxvJidDCOfQlVRsM70q9q4xZiGdzIw8uZkSvPcUekNI
9ESExGtrmHiPyVFF5KCm6mESoHzTHDsqGKmPtU+6Wxqf3AY8dh2BrxE4CSS8zjpQ
FUsVOqIXIbqcBXxzZ8AMFGU0e3GIyewm4vDCf05AovrzQHZtw5w1DZR2ov2pgt4G
hXRBixFNUCdX46vp9w1T/grUvwzZypqVp7/NP5KHpKqjrD1lfBdAj5qoiZ019yAg
ljM1YY2kYjfnzBPPYaad+F5R7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+u+874
YwfqpYP3RZ2nh6lHRt5VMB8GA1UdIwQYMBaAFGAGuWWDE9hkmRYZ1pebD34B5LZo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUEwOC9CMDYwQ0M1NEUy
NjUxMUVEODUwQ0RFNTRDNEY5QUUwMi9ZQWE1WllNVDJHU1pGaG5XbDVzUGZnSGt0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lBYTVaWU1UMkdTWkZobldsNXNQZmdIa3RtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUEwOC9CMDYwQ0M1NEUyNjUxMUVEODUwQ0RFNTRDNEY5QUUwMi9ZQWE1WllNVDJH
U1pGaG5XbDVzUGZnSGt0bWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKgP3Utr65ib1X9T6jxXraUfEd19ECT80WR4sywBglwsTOBTzksCmb2XqOyqe
hwry9k2AiCvgogzZDF+Wr2R0mTwb8SLzCecEJpAGL3r1hWYsm6JqwW7KSn/IbIKJ
ibz9m5S87jtRGsb8nuMe1zwT0h0dvTDkib1gZLxAxOaKnE3jMgqwEm+pMpxO39+9
oIkM3njfICcKyLBB4UOs0N8Xfd37yfTYeb+m+eggPyKEQzae01XvbU1a4CPU0wac
+0WImmneZkvikt9mqa45spZqiUAJkKxbBPEXbNKg9xmOWPwzXWxhN9KlixjIWbjE
BLT8tZNGw36FLe79an1N97qMoQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:37 2026 by rpki-client