Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
File:                     ysouRCIiw-2H53WblewRGMOLhbY.mft (raw, json)
Hash identifier:          1AuGeZlJNj0/FuwmyQO8JBpa+peJoFvtvvuufvT2QDw=
Subject key identifier:   34:FE:12:17:ED:F8:7F:5F:A0:86:B5:E5:6A:31:1D:AB:18:42:72:44
Authority key identifier: CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6
Certificate issuer:       /CN=A91E9A44/serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
Manifest number:          92
Signing time:             Wed 19 Aug 2026 08:07:58 +0000
Manifest this update:     Wed 19 Aug 2026 08:07:57 +0000
Manifest next update:     Wed 26 Aug 2026 08:07:57 +0000
Files and hashes:         1: ysouRCIiw-2H53WblewRGMOLhbY.crl (hash: 9MUc57LYVGp5OZKARsYUzkEa9dZs38Qlr5LrINlSIVk=)
                          2: 769D5C68C09711F08165E157C4F9AE02.roa (hash: 3tYLBRUzTfxYAnjVbgvjgG4344sWcV2hWfRHWFTWJRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl
                          rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9A44, serialNumber=CACA2E442222C3ED87E7759B95EC1118C38B85B6
        Validity
            Not Before: Aug 19 08:07:57 2026 GMT
            Not After : Aug 26 08:07:57 2026 GMT
        Subject: CN=6a85645e-cdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:77:b4:2c:fb:3b:48:35:3f:38:ec:b4:e7:
                    27:fa:91:be:e4:ef:1b:f4:75:50:55:a6:f9:a2:02:
                    ac:81:14:cb:85:09:ad:c7:12:f3:38:05:3e:f8:24:
                    b8:0b:bc:67:ed:b0:26:6d:35:a2:6e:64:55:ce:d8:
                    7f:44:2e:7f:53:36:04:34:aa:55:fe:fa:14:60:ec:
                    c3:22:29:d6:23:e7:ed:45:90:83:f8:6e:51:68:e5:
                    14:0b:bb:1b:f2:78:f3:72:a8:04:0f:57:bb:db:da:
                    63:4f:91:b2:4f:40:96:4e:74:16:76:dc:3f:b4:e6:
                    31:26:61:44:80:9c:48:17:bc:f9:7b:8c:5d:16:70:
                    4b:93:e8:59:2d:73:cb:b2:15:3b:cf:44:30:9a:17:
                    98:02:15:af:d9:85:ec:dd:57:db:a7:9b:55:68:81:
                    29:14:05:a9:69:5d:25:41:b9:07:6e:55:12:b7:5b:
                    cf:e2:19:43:f4:1f:4c:90:53:7b:a2:2b:01:e8:20:
                    2e:a5:44:5e:90:18:d4:bb:38:c0:f2:83:48:42:14:
                    08:6a:26:84:55:99:c5:1b:65:c4:b0:3d:84:91:6b:
                    4a:e6:46:b5:e4:5c:1c:f1:72:15:f0:1b:93:03:bb:
                    a5:3b:a7:bb:d1:26:d7:32:9c:49:7c:da:cb:93:c2:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:12:17:ED:F8:7F:5F:A0:86:B5:E5:6A:31:1D:AB:18:42:72:44
            X509v3 Authority Key Identifier:
                keyid:CA:CA:2E:44:22:22:C3:ED:87:E7:75:9B:95:EC:11:18:C3:8B:85:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ysouRCIiw-2H53WblewRGMOLhbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9A44/CDA95B48C08211F0B8FE7226C4F9AE02/ysouRCIiw-2H53WblewRGMOLhbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:1a:da:7c:4b:25:44:fc:43:f3:42:15:23:95:8b:c6:80:
         e6:54:ed:a7:54:9b:29:06:15:31:1b:35:05:bd:b5:a5:df:03:
         4e:0b:c4:17:f4:bf:5d:8b:eb:7c:53:27:b2:ca:17:54:fe:90:
         7d:02:00:fe:ec:b6:00:c0:dd:fe:f1:82:6c:7d:d4:97:28:f8:
         b4:1e:5d:89:ab:a3:d7:84:c9:ab:8d:1d:e9:8e:36:b9:b8:36:
         b6:c9:50:c8:32:45:74:3b:c0:62:0c:f1:15:96:88:da:f8:a2:
         9e:ff:55:3f:83:a3:a9:26:7e:03:70:c4:a5:44:01:74:c6:38:
         f3:01:d0:d7:7c:28:9d:7d:b3:7f:12:e4:9a:87:12:ed:e8:b8:
         b8:f4:0d:40:d8:52:f5:09:34:f6:b9:fd:ec:96:76:33:bb:9f:
         a5:ae:45:b2:38:30:00:cd:b1:02:c6:5d:e6:d8:be:7b:c4:69:
         48:e9:cc:5f:4f:b0:5d:cf:d9:d1:cf:08:8a:36:b5:3c:60:e0:
         4e:52:aa:61:44:d6:9d:4e:c6:34:80:a7:2c:d9:01:a8:33:9f:
         b3:5f:6d:9c:bb:eb:dc:eb:b8:95:63:79:7a:21:6b:ca:31:e9:
         8c:a0:76:9f:18:69:d7:1c:46:75:2b:5f:be:90:cb:c0:a1:d2:
         5b:e8:47:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlBNDQxMTAvBgNVBAUTKENBQ0EyRTQ0MjIyMkMzRUQ4N0U3NzU5Qjk1RUMxMTE4
QzM4Qjg1QjYwHhcNMjYwODE5MDgwNzU3WhcNMjYwODI2MDgwNzU3WjAYMRYwFAYD
VQQDEw02YTg1NjQ1ZS1jZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXx3tCz7O0g1PzjstOcn+pG+5O8b9HVQVab5ogKsgRTLhQmtxxLzOAU++CS4
C7xn7bAmbTWibmRVzth/RC5/UzYENKpV/voUYOzDIinWI+ftRZCD+G5RaOUUC7sb
8njzcqgED1e729pjT5GyT0CWTnQWdtw/tOYxJmFEgJxIF7z5e4xdFnBLk+hZLXPL
shU7z0QwmheYAhWv2YXs3Vfbp5tVaIEpFAWpaV0lQbkHblUSt1vP4hlD9B9MkFN7
oisB6CAupURekBjUuzjA8oNIQhQIaiaEVZnFG2XEsD2EkWtK5ka15Fwc8XIV8BuT
A7ulO6e70SbXMpxJfNrLk8L7EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDT+Ehft
+H9foIa15WoxHasYQnJEMB8GA1UdIwQYMBaAFMrKLkQiIsPth+d1m5XsERjDi4W2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUE0NC9DREE5NUI0OEMw
ODIxMUYwQjhGRTcyMjZDNEY5QUUwMi95c291UkNJaXctMkg1M1dibGV3UkdNT0xo
YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lzb3VSQ0lpdy0ySDUzV2JsZXdSR01PTGhiWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUE0NC9DREE5NUI0OEMwODIxMUYwQjhGRTcyMjZDNEY5QUUwMi95c291UkNJaXct
Mkg1M1dibGV3UkdNT0xoYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZKMa2nxLJUT8Q/NCFSOVi8aA5lTtp1SbKQYVMRs1Bb21pd8DTgvEF/S/XYvr
fFMnssoXVP6QfQIA/uy2AMDd/vGCbH3Ulyj4tB5diauj14TJq40d6Y42ubg2tslQ
yDJFdDvAYgzxFZaI2viinv9VP4OjqSZ+A3DEpUQBdMY48wHQ13wonX2zfxLkmocS
7ei4uPQNQNhS9Qk09rn97JZ2M7ufpa5FsjgwAM2xAsZd5ti+e8RpSOnMX0+wXc/Z
0c8Iija1PGDgTlKqYUTWnU7GNICnLNkBqDOfs19tnLvr3Ou4lWN5eiFryjHpjKB2
nxhp1xxGdStfvpDLwKHSW+hH5w==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:53:27 2026 by rpki-client