Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
File:                     YZBA6DW609z1wgE5bYVxmVp6zFA.mft (raw, json)
Hash identifier:          v/pFrJ9VLxdn4LNGLV2aOw3JHiLYNOq/SsFZCJXfUOs=
Subject key identifier:   85:87:50:B6:81:11:C2:49:E9:2D:82:86:A0:8B:FA:F2:F1:FD:23:E3
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Certificate issuer:       /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
Manifest number:          01B3
Signing time:             Mon 01 Jun 2026 04:47:58 +0000
Manifest this update:     Mon 01 Jun 2026 04:47:58 +0000
Manifest next update:     Mon 08 Jun 2026 04:47:58 +0000
Files and hashes:         1: YZBA6DW609z1wgE5bYVxmVp6zFA.crl (hash: I24ma+kToPJy//Advmjs5QS7M5Q/ws+dbd0HZ/wheB4=)
                          2: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (hash: 26WEtM895FnGR/kXovwY20hCbFpq6hJQTsJq8LOOA8g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
                          rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 04:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
        Validity
            Not Before: Jun  1 04:47:58 2026 GMT
            Not After : Jun  8 04:47:58 2026 GMT
        Subject: CN=6a1d0efe-416c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:15:fb:92:7d:f2:50:5e:0f:50:fa:7e:43:
                    47:65:cc:c6:43:ea:f5:44:94:ee:b9:95:68:25:c8:
                    51:ee:23:e3:27:c6:58:6e:de:6c:5b:85:66:1c:b3:
                    3b:f1:2e:37:07:92:d2:22:41:50:27:fc:f2:8f:30:
                    0f:83:75:d9:86:11:95:46:d6:9b:9d:02:30:96:50:
                    d9:20:43:55:d3:f0:bd:7d:9b:23:60:b7:75:81:6a:
                    04:c3:35:88:0c:a3:69:a1:b4:7a:28:29:8a:15:f2:
                    01:71:2d:64:6a:73:33:e8:a1:ce:89:69:ed:b9:cf:
                    d7:2d:eb:85:a9:59:3f:62:32:37:28:d6:61:5a:03:
                    88:62:7d:7d:76:8b:64:15:98:1b:d2:45:89:2f:73:
                    46:cb:96:f9:75:06:70:9d:4a:8e:d2:2e:98:10:c6:
                    9c:c7:18:fd:f3:14:60:d7:4c:8b:59:1c:e6:31:d0:
                    9a:dc:5b:6a:bb:cf:1a:03:75:91:18:28:f5:7e:7a:
                    f4:cc:36:a3:6b:ae:5e:30:98:8f:8b:68:a7:96:e8:
                    e7:21:6f:12:3d:af:7b:8e:69:70:75:45:cd:f4:68:
                    c7:c3:95:a6:bd:03:9d:c6:8b:e9:8e:c8:52:f2:fa:
                    ba:cb:c9:b4:8a:1a:0a:59:2c:d3:6d:e8:94:e2:d5:
                    44:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:87:50:B6:81:11:C2:49:E9:2D:82:86:A0:8B:FA:F2:F1:FD:23:E3
            X509v3 Authority Key Identifier:
                keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fe:29:16:ca:e4:fd:1a:11:72:00:cf:1c:8e:8c:6c:56:14:
         b1:f5:c4:19:db:67:72:4e:a3:23:e2:07:37:a1:27:eb:7f:17:
         fa:d7:e8:95:02:96:46:0e:c8:81:d4:21:64:23:64:d5:53:a9:
         ff:1a:59:6e:ba:84:95:75:5f:a1:3c:02:2f:99:f6:bc:3d:f9:
         d6:fe:27:7a:ed:95:bb:91:b7:28:e2:af:f2:22:60:74:32:da:
         f2:8d:c4:08:2e:88:2f:13:0f:db:0f:4c:c0:64:34:84:69:05:
         90:04:cd:5d:b7:ec:7e:71:6d:80:e0:52:8d:06:0d:e0:9b:3e:
         12:36:61:6e:ca:60:1d:58:cc:26:d3:e2:35:27:69:02:92:35:
         0d:90:bb:9b:9d:26:25:9c:b9:dc:b3:73:f0:63:9c:e5:8a:d8:
         21:04:39:de:4f:11:c1:78:47:1a:e6:6a:64:19:a3:a2:3f:61:
         25:27:a9:f7:63:4e:df:e5:45:19:da:0a:1e:92:3b:a8:56:88:
         5b:46:e6:60:2d:14:94:94:f5:2b:db:7a:44:4b:a7:97:14:61:
         b4:9c:fd:f9:fb:80:ea:8a:7f:71:a3:3e:fc:67:1a:58:fc:e3:
         de:11:d8:c7:9f:f4:ab:70:84:64:f3:e1:8f:09:b4:b2:d1:a0:
         1e:e5:75:f1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFCRUYxMTAvBgNVBAUTKDYxOTA0MEU4MzVCQUQzRENGNUMyMDEzOTZEODU3MTk5
NUE3QUNDNTAwHhcNMjYwNjAxMDQ0NzU4WhcNMjYwNjA4MDQ0NzU4WjAYMRYwFAYD
VQQDEw02YTFkMGVmZS00MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhiYV+5J98lBeD1D6fkNHZczGQ+r1RJTuuZVoJchR7iPjJ8ZYbt5sW4VmHLM7
8S43B5LSIkFQJ/zyjzAPg3XZhhGVRtabnQIwllDZIENV0/C9fZsjYLd1gWoEwzWI
DKNpobR6KCmKFfIBcS1kanMz6KHOiWntuc/XLeuFqVk/YjI3KNZhWgOIYn19dotk
FZgb0kWJL3NGy5b5dQZwnUqO0i6YEMacxxj98xRg10yLWRzmMdCa3Ftqu88aA3WR
GCj1fnr0zDaja65eMJiPi2inlujnIW8SPa97jmlwdUXN9GjHw5WmvQOdxovpjshS
8vq6y8m0ihoKWSzTbeiU4tVEFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWHULaB
EcJJ6S2ChqCL+vLx/SPjMB8GA1UdIwQYMBaAFGGQQOg1utPc9cIBOW2FcZlaesxQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUJFRi9DMDc2NDU3MkNC
MTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5ejF3Z0U1YllWeG1WcDZ6
RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1laQkE2RFc2MDl6MXdnRTViWVZ4bVZwNnpGQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUJFRi9DMDc2NDU3MkNCMTkxMUVFODE1RkFCNjhDNEY5QUUwMi9ZWkJBNkRXNjA5
ejF3Z0U1YllWeG1WcDZ6RkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxf4pFsrk/RoRcgDPHI6MbFYUsfXEGdtnck6jI+IHN6En638X+tfolQKWRg7I
gdQhZCNk1VOp/xpZbrqElXVfoTwCL5n2vD351v4neu2Vu5G3KOKv8iJgdDLa8o3E
CC6ILxMP2w9MwGQ0hGkFkATNXbfsfnFtgOBSjQYN4Js+EjZhbspgHVjMJtPiNSdp
ApI1DZC7m50mJZy53LNz8GOc5YrYIQQ53k8RwXhHGuZqZBmjoj9hJSep92NO3+VF
GdoKHpI7qFaIW0bmYC0UlJT1K9t6REunlxRhtJz9+fuA6op/caM+/GcaWPzj3hHY
x5/0q3CEZPPhjwm0stGgHuV18Q==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:11 2026 by rpki-client