Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          OnBxtAmQ023k7LwoX/VP8Ld0h1ih1xG0vpPqkHrPLuQ=
Subject key identifier:   83:1C:27:7E:4E:DA:A8:7A:21:1F:25:B1:96:E0:06:AE:5B:EF:96:8C
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       06F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0645
Signing time:             Wed 22 Jul 2026 23:37:01 +0000
Manifest this update:     Wed 22 Jul 2026 23:37:01 +0000
Manifest next update:     Wed 29 Jul 2026 23:37:01 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: KcGyhGDDDJljhekGdvNrj9V1Uaurx8YkJOiNSQuyn5Q=)
                          2: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: IhpgMXVhUYugw7nNSA1+ZnbHjLI9c5SxOlLFwueit3I=)
                          3: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: ZJmUX2G6Tl+kycQRHjPwdULRZJWUs4ScsOffcVitw8g=)
                          4: 0BE2C2AE36D111F1B4901F67AE833773.roa (hash: oRPOW5SFjLGq4iF31y2k2anTHXUpIRk/WJRjUgk+qFA=)
                          5: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: IxcEdM3NtqIWpGs5CaLmmTvLz8ooYXKO4DZfm0izdno=)
                          6: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: W217Cvl+a3RS3snx4LYy35dWortZRD2tZixavhdLGx8=)
                          7: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: bfM/I9MI61wpx9SI9z0ncpfFzbqWQMVFRjvnxiVGThE=)
                          8: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: wIbYsh/hItpf1FaU4uJEJakBW02mq1IFUdy9tNUpxj4=)
                          9: 3BE907D6178411EC83735974C4F9AE02.roa (hash: tFk/h7QxdaaYpeNdRusqQ5yvBEm+neo77X+gkWKcJG0=)
                          10: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: 1+Pf4CxXczREzjqp7Ph5y8t73GX+ZHQlj5fHrRYlZ4o=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: 5SeDKnVW+Z2bZrOh/tUD/fazda7G0sNTdN9LtEAWN7E=)
                          12: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: DjM7q7I1ucrVqfadsEwZCZGq+Rdib//rFO93Zb885F8=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: bC2UE2VmY1gflbaTcYGLmz6R86UeQbBi5GPFc7aGC20=)
                          14: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: mSIvH4Gi+T1y6gFOjB4Y+pWqnrIDj+Mx9XwrmpuQ8qw=)
                          15: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: l3SoQw2Kbr40xk9JE2geXsImyws3yLJRcPxUIxNF/vg=)
                          16: DB208FD4175911EC87322F85C4F9AE02.roa (hash: cJTkfxanvIj+RM9OMhYOY3C3bXPLhNB/j9ZiLmWvJ4M=)
                          17: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: q/oyJF+c7xMBWWu1hrOqXPzTS58cWYtyCiOvHXnwGqs=)
                          18: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: tX0MTPWA9P2CY1G2KCJQGGM6TFNQMY0kmhuwfNbndgE=)
                          19: 3B398B8A178411EC83735974C4F9AE02.roa (hash: jepYWPzCxGmh/GQlfw9G88MeUoi1KXNr+jBvdSKu2EU=)
                          20: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: zUix48EdQq0BIeEP+F00ihYlfB76GvYk5qHGU11xzgo=)
                          21: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: tT/fnjB2azP2c1Bes9KkfGycw+0VmrQqgMxit51iAYE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Jul 22 23:37:01 2026 GMT
            Not After : Jul 29 23:37:01 2026 GMT
        Subject: CN=6a61541d-db20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:e1:99:08:09:c3:ac:e2:60:b7:01:ff:a0:
                    4a:d3:12:a0:b2:5a:d2:bf:ac:bb:29:cc:6d:46:cd:
                    95:6d:98:cf:48:26:7a:ad:3f:c7:5b:bd:84:e9:46:
                    9b:b8:08:7d:1e:82:47:a2:46:71:10:e3:3d:e3:5c:
                    0e:2b:36:4d:88:ff:10:c8:21:70:1d:21:95:9e:60:
                    43:2a:9b:fb:fd:62:6c:d6:0e:3f:50:52:bd:50:55:
                    c8:69:d2:1b:1c:c3:10:09:69:a6:6f:81:15:f7:20:
                    07:b9:a3:44:56:f4:90:e4:09:f2:6b:a1:ec:ac:78:
                    c5:41:9e:a3:a0:7f:0d:cc:a2:a3:30:79:01:10:c8:
                    bc:2a:e1:a6:59:0d:6d:4c:07:fa:da:32:c3:9a:4c:
                    0a:bd:69:d2:b7:dd:b1:4b:09:70:3c:7f:2a:ef:9a:
                    42:67:23:a1:98:3c:73:61:b0:61:12:59:21:a7:88:
                    f0:3b:3b:06:8f:99:3f:98:5f:65:76:c7:48:b6:54:
                    79:aa:c4:39:b1:d1:fc:fb:d5:46:57:52:cd:e3:bd:
                    b6:27:e4:0f:82:3f:80:66:7e:aa:53:e9:2e:08:83:
                    26:bf:6e:04:50:25:39:11:ce:35:8d:d6:07:60:91:
                    ad:fb:65:b7:55:01:6f:21:00:b3:50:6e:11:11:0a:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:27:7E:4E:DA:A8:7A:21:1F:25:B1:96:E0:06:AE:5B:EF:96:8C
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:68:c0:7f:ab:a3:af:2a:47:00:ec:3f:b8:e1:cf:64:d2:01:
         39:43:e3:9f:f3:5e:fa:6b:2f:d8:3d:d3:2c:ba:31:3e:3b:5a:
         b8:7e:50:98:3f:27:8f:4e:ed:ab:c6:81:ba:f8:aa:7b:a5:ca:
         e8:30:da:c4:6d:b9:ad:90:7a:a1:d6:05:75:b1:b5:65:8b:fa:
         7a:82:5e:1d:4f:9d:0f:1c:76:24:3b:06:15:9c:fb:5d:ca:1d:
         14:30:85:99:af:e7:64:88:d7:bc:47:a1:a9:03:89:14:9d:21:
         66:e4:98:4f:9f:9c:9d:a4:82:5a:bb:06:df:f8:69:c2:af:52:
         86:06:50:33:b5:67:77:91:0d:c2:8c:99:be:51:be:63:85:06:
         48:4b:0b:d7:ef:91:36:ee:05:20:17:5d:9e:3d:84:0f:ab:b9:
         1d:1a:9d:14:31:c2:b2:f7:6c:d0:3b:7d:36:70:a4:6b:a5:74:
         53:0b:1b:c5:aa:62:55:ab:ac:4c:dd:0a:e3:7d:04:8e:80:1e:
         0b:bf:b0:dd:e6:a3:be:7f:de:07:d5:aa:94:16:e1:59:0f:df:
         dd:4a:5c:e1:0e:5d:41:23:d0:0f:50:34:42:51:cc:72:82:c7:
         86:66:5c:de:f7:ef:3d:d5:8e:4b:3c:ed:34:f8:75:7c:ca:52:
         4b:f9:e4:14
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjYwNzIyMjMzNzAxWhcNMjYwNzI5MjMzNzAxWjAYMRYwFAYD
VQQDEw02YTYxNTQxZC1kYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZrhmQgJw6ziYLcB/6BK0xKgslrSv6y7KcxtRs2VbZjPSCZ6rT/HW72E6Uab
uAh9HoJHokZxEOM941wOKzZNiP8QyCFwHSGVnmBDKpv7/WJs1g4/UFK9UFXIadIb
HMMQCWmmb4EV9yAHuaNEVvSQ5Anya6HsrHjFQZ6joH8NzKKjMHkBEMi8KuGmWQ1t
TAf62jLDmkwKvWnSt92xSwlwPH8q75pCZyOhmDxzYbBhElkhp4jwOzsGj5k/mF9l
dsdItlR5qsQ5sdH8+9VGV1LN4722J+QPgj+AZn6qU+kuCIMmv24EUCU5Ec41jdYH
YJGt+2W3VQFvIQCzUG4REQoApQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMcJ35O
2qh6IR8lsZbgBq5b75aMMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS84NDE4OTIyNkZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6
OWdqVHZnOVNZQXUteEc1ZnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIWjAf6ujrypHAOw/uOHPZNIBOUPjn/Ne+msv2D3TLLoxPjtauH5QmD8nj07t
q8aBuviqe6XK6DDaxG25rZB6odYFdbG1ZYv6eoJeHU+dDxx2JDsGFZz7XcodFDCF
ma/nZIjXvEehqQOJFJ0hZuSYT5+cnaSCWrsG3/hpwq9ShgZQM7Vnd5ENwoyZvlG+
Y4UGSEsL1++RNu4FIBddnj2ED6u5HRqdFDHCsvds0Dt9NnCka6V0UwsbxapiVaus
TN0K430EjoAeC7+w3eajvn/eB9WqlBbhWQ/f3Upc4Q5dQSPQD1A0QlHMcoLHhmZc
3vfvPdWOSzztNPh1fMpSS/nkFA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:25:47 2026 by rpki-client