Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File:                     S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier:          87LtUkzn6q1xsT4EYfLXwsLCB9E+J0b2koahz2i/v/M=
Subject key identifier:   8E:72:E6:A1:72:7B:95:1C:6D:99:6D:9B:6C:70:88:E4:5D:2B:A0:6D
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer:       /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial:       08EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number:          08DE
Signing time:             Thu 22 Oct 2026 20:30:47 +0000
Manifest this update:     Thu 22 Oct 2026 20:30:47 +0000
Manifest next update:     Thu 29 Oct 2026 20:30:47 +0000
Files and hashes:         1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: C9f08HOs7Wmc0qeWWU5pxGVSd/FPXc25ubnhKhee3ag=)
                          2: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: y7Iz2rPJdAOlGQ4MtuTgFktbk+yS4xEJ9nZlCdDX5sY=)
                          3: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: 8lKBmwh4w3njS1t99CtRQ9cpWrcLS15+u5yFjKAOlNQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 20:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
        Validity
            Not Before: Oct 22 20:30:47 2026 GMT
            Not After : Oct 29 20:30:47 2026 GMT
        Subject: CN=6ada7277-bdab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:b1:66:da:42:dc:d3:1f:7b:bd:fb:f3:58:
                    e3:da:3e:89:d1:b5:23:4b:36:d7:f4:5d:7c:64:1b:
                    4f:0a:42:18:46:09:3e:ef:59:da:39:49:cf:5e:48:
                    64:65:c2:af:20:eb:af:af:72:ef:7c:3c:e2:2d:e0:
                    cf:82:5e:54:01:b6:b1:d6:f7:29:10:9a:00:9d:a5:
                    43:4c:0d:8f:62:07:5f:3d:84:8d:b7:9d:e2:b7:aa:
                    18:c2:86:32:1e:e9:33:db:79:d4:6a:89:fb:bb:fa:
                    e7:fb:a6:08:64:d6:e2:3a:61:fe:4d:73:4d:47:a4:
                    2f:9f:b4:6e:e2:a9:8e:21:96:92:69:81:39:f6:40:
                    ac:d5:60:0f:36:7c:75:f1:56:5b:a6:b2:5e:10:ff:
                    28:02:f5:04:aa:8e:2e:97:20:1b:02:cb:f6:b4:40:
                    ff:00:20:46:a8:6c:31:88:46:75:6f:d8:6d:35:71:
                    d9:0b:6e:42:50:eb:b3:fb:7f:9e:8c:30:6a:70:88:
                    15:ed:ea:3d:c0:a7:bb:46:07:5d:5c:f9:94:5b:a7:
                    4f:0d:06:76:a8:28:02:77:75:96:3d:0a:4f:ea:b6:
                    f3:6e:c1:75:8b:62:dd:34:3d:e6:1c:ee:21:ce:3e:
                    87:67:cd:e7:25:46:ed:a9:3a:06:c7:74:17:2b:2e:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:E6:A1:72:7B:95:1C:6D:99:6D:9B:6C:70:88:E4:5D:2B:A0:6D
            X509v3 Authority Key Identifier:
                keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:ab:20:41:fe:69:ed:f9:5f:25:63:be:96:2f:0c:01:77:
         f9:0c:30:20:05:d8:43:b9:75:b1:95:72:c3:b3:b4:ea:3e:a7:
         36:e0:6b:91:45:cd:63:de:72:60:14:04:a4:9b:6e:04:3d:9b:
         f9:ed:a2:61:60:0b:04:2f:ea:9e:1d:31:f5:29:57:4e:9e:46:
         4e:64:b4:c4:ee:ee:90:18:3d:45:5d:13:4f:14:6d:d8:3a:6c:
         18:d7:0b:b2:44:72:89:22:e7:4d:56:21:73:ef:8f:0a:60:32:
         84:65:1d:d6:c9:f3:a7:52:22:47:7b:17:0a:b9:9c:03:f1:e1:
         02:d5:a9:34:aa:96:eb:15:ea:09:75:5b:05:3d:2f:1b:06:06:
         09:5b:af:8d:05:f0:43:f5:3e:77:a9:45:44:6f:a3:0c:ed:93:
         d2:f2:e5:7d:39:a5:48:12:5b:0c:dc:77:ba:a1:2d:de:3a:77:
         b7:04:d2:a9:04:56:0a:17:22:02:7b:f3:cc:b9:9c:5d:08:08:
         94:30:48:d3:1d:b8:a7:07:06:71:6c:d8:61:64:38:59:c4:25:
         6b:46:ea:3e:fb:20:24:c2:d4:cd:25:ce:0c:1a:5e:30:e8:b4:
         be:e3:1a:63:bf:e0:00:c7:cd:2e:4e:ea:53:b5:6e:e7:3e:3f:
         7a:5c:87:32
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy
RDQzRjYxQjcwHhcNMjYxMDIyMjAzMDQ3WhcNMjYxMDI5MjAzMDQ3WjAYMRYwFAYD
VQQDEw02YWRhNzI3Ny1iZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyCSxZtpC3NMfe73781jj2j6J0bUjSzbX9F18ZBtPCkIYRgk+71naOUnPXkhk
ZcKvIOuvr3LvfDziLeDPgl5UAbax1vcpEJoAnaVDTA2PYgdfPYSNt53it6oYwoYy
Hukz23nUaon7u/rn+6YIZNbiOmH+TXNNR6Qvn7Ru4qmOIZaSaYE59kCs1WAPNnx1
8VZbprJeEP8oAvUEqo4ulyAbAsv2tED/ACBGqGwxiEZ1b9htNXHZC25CUOuz+3+e
jDBqcIgV7eo9wKe7RgddXPmUW6dPDQZ2qCgCd3WWPQpP6rbzbsF1i2LdND3mHO4h
zj6HZ83nJUbtqToGx3QXKy5dJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI5y5qFy
e5UcbZltm2xwiORdK6BtMB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx
QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5
WS04bVNhSER1THN0UV9ZYmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHiKrIEH+ae35XyVjvpYvDAF3+QwwIAXYQ7l1sZVyw7O06j6nNuBrkUXNY95y
YBQEpJtuBD2b+e2iYWALBC/qnh0x9SlXTp5GTmS0xO7ukBg9RV0TTxRt2DpsGNcL
skRyiSLnTVYhc++PCmAyhGUd1snzp1IiR3sXCrmcA/HhAtWpNKqW6xXqCXVbBT0v
GwYGCVuvjQXwQ/U+d6lFRG+jDO2T0vLlfTmlSBJbDNx3uqEt3jp3twTSqQRWChci
AnvzzLmcXQgIlDBI0x24pwcGcWzYYWQ4WcQla0bqPvsgJMLUzSXODBpeMOi0vuMa
Y7/gAMfNLk7qU7Vu5z4/elyHMg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:11:54 2026 by rpki-client