Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          lqPb1YWRLvJZKaIpSbGOKJvJviHsudenT60P+C5tRYc=
Subject key identifier:   0B:3A:19:9A:FB:1B:01:5D:A3:E7:28:4F:19:DB:01:50:EB:7F:45:93
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       085B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          084D
Signing time:             Tue 12 May 2026 20:56:34 +0000
Manifest this update:     Tue 12 May 2026 20:56:34 +0000
Manifest next update:     Tue 19 May 2026 20:56:34 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: o31T1v/JDJklyhlwP1fjihx/ZupdEvuII23Q6WkCi+M=)
                          2: 5669A2BC347811F1AE4F8780A7833773.roa (hash: YJvznt1KHL5BVRuWUUztwAq1FtNcm7LDrZUFuzMT5nQ=)
                          3: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: Vw5Q6aGZen/i8DNFItLlI1Gb1wCmBs0b9LxCUDz/zpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: May 12 20:56:34 2026 GMT
            Not After : May 19 20:56:34 2026 GMT
        Subject: CN=6a039402-fa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:fd:86:a1:94:50:8b:2c:4f:36:ea:23:e9:
                    70:9f:b0:4a:be:22:86:9c:22:01:06:0d:94:30:eb:
                    ab:95:ce:71:95:bf:b1:c9:fa:0e:79:fc:09:05:d3:
                    43:68:4d:53:d9:73:f5:24:42:8d:d8:29:50:ac:f3:
                    c4:53:31:26:2f:26:5f:65:be:c8:20:ed:77:6a:0c:
                    53:fb:d1:d0:38:2e:5f:05:bf:69:65:96:09:22:86:
                    42:70:d7:a0:84:6b:78:65:76:86:ea:5f:15:1e:de:
                    c4:08:7d:0c:43:4a:20:ab:23:7a:57:cf:6a:4b:f9:
                    dc:dc:01:99:b7:d5:52:2e:c1:19:bf:b7:66:52:ba:
                    21:08:9c:cc:92:60:a6:a7:29:59:79:f0:ac:62:ac:
                    e2:57:19:1a:30:db:8a:6a:b9:d3:04:d6:01:8a:2f:
                    ba:b6:6e:2a:f2:7e:97:be:3c:27:30:97:fb:1a:f8:
                    91:bd:97:03:77:08:30:b2:42:55:8d:79:b9:b7:8b:
                    9d:93:5f:d2:88:2a:d5:d4:3d:60:88:7e:c7:2f:fc:
                    e8:36:4d:42:6b:7e:12:a6:75:49:1a:b2:53:f6:04:
                    3f:0b:31:76:9c:c3:f4:49:be:10:3f:d4:60:3c:a9:
                    bd:8c:68:71:08:d2:dc:0a:d3:88:4d:d2:5d:f6:28:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3A:19:9A:FB:1B:01:5D:A3:E7:28:4F:19:DB:01:50:EB:7F:45:93
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:03:cf:b0:d0:1f:cf:53:f0:49:ca:5c:e9:1b:8d:2e:d0:
         b7:d0:e7:99:3a:30:43:c5:09:f1:ee:00:04:bf:36:9e:69:08:
         49:94:b1:f7:c9:e1:b1:34:3d:f9:38:53:b8:3f:1c:74:5d:45:
         3f:fd:8d:b6:57:1d:fa:fe:75:7a:84:fc:f5:f4:2e:9c:b7:52:
         8e:19:02:cf:d5:b3:33:d0:77:ba:0c:5d:c3:94:9d:ea:1f:f2:
         3a:b1:76:c3:5f:b3:09:63:3b:90:12:11:84:b9:2d:20:29:02:
         77:89:98:b3:c0:da:1b:48:c1:f9:86:9a:df:81:f1:7e:4a:d2:
         65:f2:75:3b:b1:1d:66:51:8b:23:5c:aa:c9:e8:f6:77:0b:70:
         41:eb:0a:a8:c2:73:72:83:29:f1:cc:09:87:70:51:20:4e:c9:
         d8:af:76:3f:a2:a8:b0:8d:e0:ce:24:8a:4d:e9:e0:31:03:cb:
         ea:39:b7:39:33:3a:4c:44:e2:47:cf:86:b7:60:55:b5:f8:f6:
         88:51:34:85:c9:16:8e:f8:7e:9d:28:9d:32:8e:86:30:bf:d1:
         c1:e3:f2:ef:ef:ec:97:e1:3c:d1:c1:47:73:19:6d:8b:1d:58:
         85:76:ea:af:f6:e7:85:d9:68:90:4b:23:b7:79:fd:1d:d4:88:
         aa:df:2d:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz
QUE5MTEyRTYwHhcNMjYwNTEyMjA1NjM0WhcNMjYwNTE5MjA1NjM0WjAYMRYwFAYD
VQQDEw02YTAzOTQwMi1mYTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEL9hqGUUIssTzbqI+lwn7BKviKGnCIBBg2UMOurlc5xlb+xyfoOefwJBdND
aE1T2XP1JEKN2ClQrPPEUzEmLyZfZb7IIO13agxT+9HQOC5fBb9pZZYJIoZCcNeg
hGt4ZXaG6l8VHt7ECH0MQ0ogqyN6V89qS/nc3AGZt9VSLsEZv7dmUrohCJzMkmCm
pylZefCsYqziVxkaMNuKarnTBNYBii+6tm4q8n6XvjwnMJf7GviRvZcDdwgwskJV
jXm5t4udk1/SiCrV1D1giH7HL/zoNk1Ca34SpnVJGrJT9gQ/CzF2nMP0Sb4QP9Rg
PKm9jGhxCNLcCtOITdJd9ii5twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAs6GZr7
GwFdo+coTxnbAVDrf0WTMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5
RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk
Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWxQDz7DQH89T8EnKXOkbjS7Qt9DnmTowQ8UJ8e4ABL82nmkISZSx98nhsTQ9
+ThTuD8cdF1FP/2Ntlcd+v51eoT89fQunLdSjhkCz9WzM9B3ugxdw5Sd6h/yOrF2
w1+zCWM7kBIRhLktICkCd4mYs8DaG0jB+Yaa34HxfkrSZfJ1O7EdZlGLI1yqyej2
dwtwQesKqMJzcoMp8cwJh3BRIE7J2K92P6KosI3gziSKTengMQPL6jm3OTM6TETi
R8+Gt2BVtfj2iFE0hckWjvh+nSidMo6GML/RwePy7+/sl+E80cFHcxltix1YhXbq
r/bnhdlokEsjt3n9HdSIqt8tRQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:23:43 2026 by rpki-client