Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File:                     Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier:          plHQud2k+ipw3gpGDnMKUC81tqYw1d2iFHJA34YuO6w=
Subject key identifier:   C2:5D:94:86:99:BE:88:34:35:F6:99:48:55:3B:3E:2D:BB:EA:0F:59
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer:       /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial:       06AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number:          06A6
Signing time:             Tue 22 Sep 2026 22:08:46 +0000
Manifest this update:     Tue 22 Sep 2026 22:08:45 +0000
Manifest next update:     Tue 29 Sep 2026 22:08:45 +0000
Files and hashes:         1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: 2hKfVeJKFj52qJEfEa8DnP0GIbm9MzKqnmCWARU6Aao=)
                          2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: 9P+/XWI1mTR2CKwLdPvtfOBgjyqZfC7ZNyD/mGLr3KU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
                          rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
        Validity
            Not Before: Sep 22 22:08:45 2026 GMT
            Not After : Sep 29 22:08:45 2026 GMT
        Subject: CN=6ab2fc6d-21b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:16:8a:2b:b0:f5:0e:22:4a:f2:ce:d5:fb:
                    3e:1f:8d:92:9b:a0:de:9f:3c:0a:87:01:0c:f8:d7:
                    cd:bc:18:8f:71:81:6e:f2:de:65:17:f0:55:47:f9:
                    a6:14:30:db:21:ac:e8:b7:6c:07:d4:ff:30:7e:99:
                    d0:1d:6e:dd:8d:48:81:c1:a0:72:ab:44:ef:e8:72:
                    bc:b4:af:77:68:64:9b:39:50:bd:f4:29:bf:3b:9b:
                    f9:2f:7f:87:86:a7:e7:7c:98:27:c6:65:bf:3c:6b:
                    8c:88:df:18:49:3c:9e:9d:bd:f9:ae:3e:3b:8a:ec:
                    34:13:b9:62:3c:c9:35:ed:85:1b:d2:76:ad:22:87:
                    04:8c:b4:21:e6:dd:28:4d:b4:a4:62:3b:a0:df:40:
                    86:60:96:4f:4d:b9:af:ad:c0:be:03:d9:04:79:79:
                    b9:6b:18:f5:3b:39:75:d3:d2:84:6e:a5:df:1e:64:
                    cb:09:f0:a3:d3:a3:22:c2:d5:97:77:1c:42:89:e1:
                    0a:19:91:c8:b8:48:2d:ba:5f:aa:00:64:7c:75:69:
                    2e:b0:2f:7c:37:77:e0:f3:73:82:1b:9a:0a:27:94:
                    1e:c8:0e:bc:01:0c:39:da:23:e1:9e:d1:4f:da:74:
                    2c:4f:28:e0:43:b9:15:b1:3d:22:01:f8:61:f4:c7:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5D:94:86:99:BE:88:34:35:F6:99:48:55:3B:3E:2D:BB:EA:0F:59
            X509v3 Authority Key Identifier:
                keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:82:9d:ac:a3:75:96:45:7f:5b:5d:8f:d6:65:92:54:9a:
         75:d8:fd:1b:25:a5:c6:20:d8:be:03:51:4c:69:c3:34:6c:00:
         f9:aa:e4:d6:e7:4c:d6:64:4a:87:76:2e:84:e6:0b:cc:6c:0a:
         bf:ac:cc:8c:b4:ba:55:a9:d3:df:c2:1b:78:70:15:dc:47:cd:
         06:f7:29:a6:5d:01:86:7c:56:85:80:b4:f8:94:0c:f7:fe:2b:
         dc:32:63:b1:33:e3:c7:0c:d1:99:90:cb:8a:67:c3:7c:17:06:
         c3:98:74:31:16:01:b8:46:68:c5:06:c2:16:e3:ca:9a:75:5c:
         46:cb:2e:2f:78:1d:0d:da:65:4f:10:80:c2:38:ce:01:90:ef:
         5f:6c:48:f4:7c:f5:b2:a4:d2:00:cb:c6:ab:4c:c2:5c:6a:35:
         ab:70:1e:2e:06:b3:5c:86:cb:70:bf:73:fd:45:a1:97:f4:02:
         e9:1c:ac:ee:f0:d5:21:8b:12:c0:c2:46:57:c4:d9:5d:0f:d8:
         94:c6:a0:03:5a:46:aa:d3:42:fe:23:57:f1:06:59:49:20:58:
         5b:6d:9f:e8:a1:27:4d:2a:37:02:da:c0:ff:86:bf:6c:e3:03:
         3b:b4:45:78:fd:17:04:0c:69:2d:e2:6c:94:5c:9e:2a:65:74:
         09:b4:e1:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCNTgxMTAvBgNVBAUTKDYzRTQ4NzYyQTg5MzA4MDk2NzczRDlFMUM5RDFBOTk5
ODAzNTY3MEQwHhcNMjYwOTIyMjIwODQ1WhcNMjYwOTI5MjIwODQ1WjAYMRYwFAYD
VQQDEw02YWIyZmM2ZC0yMWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuQMWiiuw9Q4iSvLO1fs+H42Sm6DenzwKhwEM+NfNvBiPcYFu8t5lF/BVR/mm
FDDbIazot2wH1P8wfpnQHW7djUiBwaByq0Tv6HK8tK93aGSbOVC99Cm/O5v5L3+H
hqfnfJgnxmW/PGuMiN8YSTyenb35rj47iuw0E7liPMk17YUb0natIocEjLQh5t0o
TbSkYjug30CGYJZPTbmvrcC+A9kEeXm5axj1Ozl109KEbqXfHmTLCfCj06MiwtWX
dxxCieEKGZHIuEgtul+qAGR8dWkusC98N3fg83OCG5oKJ5QeyA68AQw52iPhntFP
2nQsTyjgQ7kVsT0iAfhh9Mer5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJdlIaZ
vog0NfaZSFU7Pi276g9ZMB8GA1UdIwQYMBaAFGPkh2KokwgJZ3PZ4cnRqZmANWcN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0I1OC9BQUMyMUM3RUNB
QjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENBbG5jOW5oeWRHcG1ZQTFa
dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ktU0hZcWlUQ0FsbmM5bmh5ZEdwbVlBMVp3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0I1OC9BQUMyMUM3RUNBQjgxMUVCODQxNTUzMzZDNEY5QUUwMi9ZLVNIWXFpVENB
bG5jOW5oeWRHcG1ZQTFadzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt22CnayjdZZFf1tdj9ZlklSaddj9GyWlxiDYvgNRTGnDNGwA+ark1udM1mRK
h3YuhOYLzGwKv6zMjLS6VanT38IbeHAV3EfNBvcppl0BhnxWhYC0+JQM9/4r3DJj
sTPjxwzRmZDLimfDfBcGw5h0MRYBuEZoxQbCFuPKmnVcRssuL3gdDdplTxCAwjjO
AZDvX2xI9Hz1sqTSAMvGq0zCXGo1q3AeLgazXIbLcL9z/UWhl/QC6Rys7vDVIYsS
wMJGV8TZXQ/YlMagA1pGqtNC/iNX8QZZSSBYW22f6KEnTSo3AtrA/4a/bOMDO7RF
eP0XBAxpLeJslFyeKmV0CbThOQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:35 2026 by rpki-client