Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
File:                     yAlz0WzMyeGME6aIAz3E0PDmHEo.mft (raw, json)
Hash identifier:          aE9Q5+J1mJlNe59DYx1zJEBUJ7gwKD19kSTGFkl2oh0=
Subject key identifier:   F0:A1:87:8A:3C:79:8E:B4:EA:9B:DB:ED:9A:18:BF:31:D7:B5:D9:29
Authority key identifier: C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A
Certificate issuer:       /CN=A91657FE/serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
Manifest number:          F4
Signing time:             Thu 01 Oct 2026 07:35:27 +0000
Manifest this update:     Thu 01 Oct 2026 07:35:26 +0000
Manifest next update:     Thu 08 Oct 2026 07:35:26 +0000
Files and hashes:         1: yAlz0WzMyeGME6aIAz3E0PDmHEo.crl (hash: A9HndiQiaVGWbhDCKv4WoCK8vzgPZrfxZ88W3BTdP5k=)
                          2: BFEE74284D9811F0930F6465C4F9AE02.roa (hash: 40BbeTseOH9cOE/V8iDSe91ozItNcwOvKSn/Wv2JFTU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl
                          rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 07:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91657FE, serialNumber=C80973D16CCCC9E18C13A688033DC4D0F0E61C4A
        Validity
            Not Before: Oct  1 07:35:26 2026 GMT
            Not After : Oct  8 07:35:26 2026 GMT
        Subject: CN=6abe0d3f-99b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:5e:97:69:8a:26:b5:87:6a:dc:8f:f1:68:
                    5d:33:cc:e3:1f:65:55:41:cc:ff:40:34:c3:cf:d7:
                    56:2f:f3:47:fe:8b:aa:fd:c7:10:f9:2f:9f:74:1c:
                    2b:ec:d7:81:a8:8c:e0:88:15:64:c7:63:3d:7d:90:
                    f5:7c:f6:9d:1f:5e:ff:e4:f4:a8:eb:3f:ee:c2:7b:
                    de:36:9f:5d:f5:6e:6b:2c:25:83:44:74:4b:38:3b:
                    21:3e:6a:48:fa:d4:77:7e:fd:30:e1:91:80:d5:ac:
                    7f:6d:ee:3c:2c:03:fe:45:bd:98:ba:1b:db:34:69:
                    08:bc:2e:47:04:db:df:73:21:2d:c0:f6:74:74:c7:
                    3d:40:6b:58:18:4b:0b:03:05:58:35:f3:e0:51:cc:
                    f8:bd:54:93:23:13:73:bd:d4:04:ac:d8:af:14:10:
                    5f:71:f8:cb:f0:6a:fb:63:bf:b6:6a:86:c8:3a:de:
                    5d:4a:1c:6f:b5:17:00:0c:b4:15:9d:ec:91:90:33:
                    be:23:0b:2b:1b:86:47:7a:ef:a9:e8:81:11:5d:44:
                    d2:8a:b4:af:e2:2e:8f:79:15:e2:89:12:6a:ad:04:
                    ee:5d:ce:7f:e3:38:b2:02:a0:45:4f:da:1f:a2:a9:
                    ce:9b:a2:c5:28:96:0f:15:7a:6c:84:82:7f:9c:25:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A1:87:8A:3C:79:8E:B4:EA:9B:DB:ED:9A:18:BF:31:D7:B5:D9:29
            X509v3 Authority Key Identifier:
                keyid:C8:09:73:D1:6C:CC:C9:E1:8C:13:A6:88:03:3D:C4:D0:F0:E6:1C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yAlz0WzMyeGME6aIAz3E0PDmHEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657FE/C08757224D8B11F08EAC5823C4F9AE02/yAlz0WzMyeGME6aIAz3E0PDmHEo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:13:33:d2:9b:33:f6:82:14:c2:0f:bf:62:2a:cf:16:d3:9b:
         3c:fe:67:ec:6e:d6:11:92:c1:e2:29:87:af:24:a2:a6:b9:1e:
         8b:6f:86:05:30:ea:bd:e6:87:09:18:47:98:5b:85:6c:08:3f:
         1b:cf:c9:96:a6:01:42:11:f8:63:25:88:11:c7:b1:6d:df:b5:
         22:8d:87:78:fc:98:19:f2:a4:f1:b6:43:b3:c8:c1:87:4b:fa:
         b0:01:87:75:b2:00:1c:c9:ae:d3:e0:2b:b5:14:85:6f:f7:04:
         c1:ba:b5:99:43:2c:3b:05:99:ec:8f:62:32:f1:27:08:a7:26:
         2c:1c:17:90:e2:83:ec:27:64:92:a7:63:46:84:bd:05:f3:c8:
         94:40:65:05:65:8a:4f:11:cd:f3:cc:8d:47:51:20:71:4f:26:
         c8:fa:b0:be:0e:27:5b:22:16:c9:69:64:aa:3d:16:1b:e4:f2:
         fc:48:5f:fc:32:13:7e:64:87:73:d2:a0:0b:20:ad:62:28:d3:
         40:82:05:e9:2a:62:94:7f:2a:1d:d6:c6:29:24:69:99:ae:99:
         90:48:ea:99:69:db:f5:ae:58:79:67:ab:38:5e:93:b4:35:2c:
         18:b2:96:42:bf:11:1d:86:30:bf:7e:e7:31:69:69:0b:43:98:
         45:5c:7e:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3RkUxMTAvBgNVBAUTKEM4MDk3M0QxNkNDQ0M5RTE4QzEzQTY4ODAzM0RDNEQw
RjBFNjFDNEEwHhcNMjYxMDAxMDczNTI2WhcNMjYxMDA4MDczNTI2WjAYMRYwFAYD
VQQDEw02YWJlMGQzZi05OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfZel2mKJrWHatyP8WhdM8zjH2VVQcz/QDTDz9dWL/NH/ouq/ccQ+S+fdBwr
7NeBqIzgiBVkx2M9fZD1fPadH17/5PSo6z/uwnveNp9d9W5rLCWDRHRLODshPmpI
+tR3fv0w4ZGA1ax/be48LAP+Rb2YuhvbNGkIvC5HBNvfcyEtwPZ0dMc9QGtYGEsL
AwVYNfPgUcz4vVSTIxNzvdQErNivFBBfcfjL8Gr7Y7+2aobIOt5dShxvtRcADLQV
neyRkDO+IwsrG4ZHeu+p6IERXUTSirSv4i6PeRXiiRJqrQTuXc5/4ziyAqBFT9of
oqnOm6LFKJYPFXpshIJ/nCVVjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPChh4o8
eY606pvb7ZoYvzHXtdkpMB8GA1UdIwQYMBaAFMgJc9FszMnhjBOmiAM9xNDw5hxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdGRS9DMDg3NTcyMjRE
OEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXllR01FNmFJQXozRTBQRG1I
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lBbHowV3pNeWVHTUU2YUlBejNFMFBEbUhFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTdGRS9DMDg3NTcyMjREOEIxMUYwOEVBQzU4MjNDNEY5QUUwMi95QWx6MFd6TXll
R01FNmFJQXozRTBQRG1IRW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXRMz0psz9oIUwg+/YirPFtObPP5n7G7WEZLB4imHrySiprkei2+GBTDqveaH
CRhHmFuFbAg/G8/JlqYBQhH4YyWIEcexbd+1Io2HePyYGfKk8bZDs8jBh0v6sAGH
dbIAHMmu0+ArtRSFb/cEwbq1mUMsOwWZ7I9iMvEnCKcmLBwXkOKD7CdkkqdjRoS9
BfPIlEBlBWWKTxHN88yNR1EgcU8myPqwvg4nWyIWyWlkqj0WG+Ty/Ehf/DITfmSH
c9KgCyCtYijTQIIF6SpilH8qHdbGKSRpma6ZkEjqmWnb9a5YeWerOF6TtDUsGLKW
Qr8RHYYwv37nMWlpC0OYRVx+ZQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 19:35:39 2026 by rpki-client