Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
File:                     YkYyDes0LSw9wa7bkPF2dyt_x38.mft (raw, json)
Hash identifier:          2wX7ZOTnlwdqMHdpRfzmDIadaBXF+xDddJNqbRoiDFk=
Subject key identifier:   8B:C3:F0:73:D6:19:50:28:D5:5C:5A:7D:86:F1:82:30:CA:9A:DD:C1
Authority key identifier: 62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F
Certificate issuer:       /CN=A911AD1F/serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
Manifest number:          98
Signing time:             Thu 23 Jul 2026 09:13:58 +0000
Manifest this update:     Thu 23 Jul 2026 09:13:57 +0000
Manifest next update:     Thu 30 Jul 2026 09:13:57 +0000
Files and hashes:         1: YkYyDes0LSw9wa7bkPF2dyt_x38.crl (hash: cFV8vwd+19C9Mm/IiZgiAthZeu8h16GIyeVUtQ39jx0=)
                          2: 5CA352A49DAB11F0B1E32C64C4F9AE02.roa (hash: LyWvvw+ErBjB7W8o/R8I1LcD7CF1lU/R94KhGen7GVg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl
                          rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AD1F, serialNumber=6246320DEB342D2C3DC1AEDB90F176772B7FC77F
        Validity
            Not Before: Jul 23 09:13:57 2026 GMT
            Not After : Jul 30 09:13:57 2026 GMT
        Subject: CN=6a61db55-89f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:8a:50:7d:71:3c:60:7f:43:3a:56:fe:26:
                    2d:a4:db:eb:1a:6c:b7:87:57:3b:18:86:29:88:00:
                    97:a2:ca:f9:af:5d:76:87:a6:dd:db:f8:aa:83:0b:
                    e1:06:ef:ad:9d:75:b9:0f:56:80:73:43:f2:21:b3:
                    75:7d:73:c3:7c:a3:67:c4:66:21:e9:8c:87:a7:6e:
                    65:06:d1:0d:d5:95:ae:4f:15:b1:a7:cf:14:e2:dc:
                    20:64:8b:db:b8:05:95:c5:08:e7:a4:21:26:89:fe:
                    9e:50:92:0d:0b:35:1b:b7:e4:b3:68:fa:b3:0b:d3:
                    8d:73:eb:1c:a3:ff:3d:c7:bb:cd:74:ab:18:df:27:
                    60:8e:b8:f2:cb:f3:a6:79:c6:cb:40:e9:fa:e2:ce:
                    39:95:00:5a:25:c8:31:4f:17:a2:3e:8d:c8:a7:cf:
                    d3:b0:12:50:3c:36:d6:e4:48:8d:a7:14:19:08:b2:
                    63:2e:ed:1a:56:7a:f8:34:d2:6f:55:09:1e:7f:3c:
                    2e:b3:62:d2:c5:14:f0:52:49:c5:0d:f3:d4:c6:f3:
                    03:c1:d5:f9:4d:62:2b:8e:7c:ed:fd:3d:f3:32:5f:
                    4e:17:18:ba:62:94:6c:64:e3:76:0e:18:f6:fe:1b:
                    51:82:e8:cb:92:c9:61:9b:5e:7f:23:a9:93:1a:27:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:F0:73:D6:19:50:28:D5:5C:5A:7D:86:F1:82:30:CA:9A:DD:C1
            X509v3 Authority Key Identifier:
                keyid:62:46:32:0D:EB:34:2D:2C:3D:C1:AE:DB:90:F1:76:77:2B:7F:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YkYyDes0LSw9wa7bkPF2dyt_x38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AD1F/14D09C029DAB11F0A1C5B363C4F9AE02/YkYyDes0LSw9wa7bkPF2dyt_x38.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:15:bc:dc:12:da:d2:77:87:fd:00:9d:e3:6c:e4:5f:1d:e1:
         47:9e:0a:66:d6:cc:27:36:12:4d:43:2d:ea:0a:4a:cc:fa:7c:
         29:bd:74:9a:c4:34:6c:b2:c8:30:32:94:27:3d:87:6f:03:f5:
         9b:2f:d3:4a:a8:31:45:9b:c0:de:51:28:05:de:d8:c8:7b:65:
         dd:4a:56:16:b9:de:70:5c:84:6b:c2:b7:db:6e:f7:65:91:52:
         84:07:84:17:36:3c:eb:c0:1c:63:73:28:4c:4e:06:3f:20:16:
         ac:4e:14:6f:7b:3d:16:ff:2d:f5:b9:2d:17:be:d1:6d:51:3c:
         e0:2a:67:d0:33:46:9a:c7:bf:4c:1b:95:0c:ce:1a:4c:83:00:
         50:20:b3:17:b3:1f:c9:b7:be:32:3b:95:dd:77:7d:92:6e:e4:
         ee:05:4c:3d:ac:20:43:b8:bf:b9:53:3c:a3:4c:6d:bf:4e:4c:
         5d:e4:2a:2f:e8:3a:71:a5:a7:62:93:6e:c0:c0:7d:7f:5c:7f:
         9c:c2:90:19:7f:de:44:d9:21:c0:e7:03:0d:57:2d:68:21:52:
         c3:10:f0:a6:db:78:1b:7b:11:25:ee:63:18:5c:72:dc:5a:b1:
         c6:3a:46:5a:f5:f8:1a:e5:c6:76:2c:7e:2f:df:b8:14:d6:a6:
         17:c7:2b:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFEMUYxMTAvBgNVBAUTKDYyNDYzMjBERUIzNDJEMkMzREMxQUVEQjkwRjE3Njc3
MkI3RkM3N0YwHhcNMjYwNzIzMDkxMzU3WhcNMjYwNzMwMDkxMzU3WjAYMRYwFAYD
VQQDEw02YTYxZGI1NS04OWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSeKUH1xPGB/QzpW/iYtpNvrGmy3h1c7GIYpiACXosr5r112h6bd2/iqgwvh
Bu+tnXW5D1aAc0PyIbN1fXPDfKNnxGYh6YyHp25lBtEN1ZWuTxWxp88U4twgZIvb
uAWVxQjnpCEmif6eUJINCzUbt+SzaPqzC9ONc+sco/89x7vNdKsY3ydgjrjyy/Om
ecbLQOn64s45lQBaJcgxTxeiPo3Ip8/TsBJQPDbW5EiNpxQZCLJjLu0aVnr4NNJv
VQkefzwus2LSxRTwUknFDfPUxvMDwdX5TWIrjnzt/T3zMl9OFxi6YpRsZON2Dhj2
/htRgujLkslhm15/I6mTGid1MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvD8HPW
GVAo1VxafYbxgjDKmt3BMB8GA1UdIwQYMBaAFGJGMg3rNC0sPcGu25Dxdncrf8d/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUQxRi8xNEQwOUMwMjlE
QUIxMUYwQTFDNUIzNjNDNEY5QUUwMi9Za1l5RGVzMExTdzl3YTdia1BGMmR5dF94
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lrWXlEZXMwTFN3OXdhN2JrUEYyZHl0X3gzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUQxRi8xNEQwOUMwMjlEQUIxMUYwQTFDNUIzNjNDNEY5QUUwMi9Za1l5RGVzMExT
dzl3YTdia1BGMmR5dF94MzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaRW83BLa0neH/QCd42zkXx3hR54KZtbMJzYSTUMt6gpKzPp8Kb10msQ0bLLI
MDKUJz2HbwP1my/TSqgxRZvA3lEoBd7YyHtl3UpWFrnecFyEa8K32273ZZFShAeE
FzY868AcY3MoTE4GPyAWrE4Ub3s9Fv8t9bktF77RbVE84Cpn0DNGmse/TBuVDM4a
TIMAUCCzF7Mfybe+MjuV3Xd9km7k7gVMPawgQ7i/uVM8o0xtv05MXeQqL+g6caWn
YpNuwMB9f1x/nMKQGX/eRNkhwOcDDVctaCFSwxDwptt4G3sRJe5jGFxy3FqxxjpG
WvX4GuXGdix+L9+4FNamF8crcg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:57 2026 by rpki-client