Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
File:                     yaetrryN6_zxSzC3739hOzWzeaE.mft (raw, json)
Hash identifier:          NYEgnDQncxwckMn9PfhZ9qFfr4RFXO6wusukx5apgxs=
Subject key identifier:   76:13:EB:04:AC:71:3F:6E:B6:85:C2:14:FF:89:30:7E:0E:99:1D:CA
Authority key identifier: C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1
Certificate issuer:       /CN=A9167352/serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
Manifest number:          0F
Signing time:             Thu 23 Jul 2026 11:10:06 +0000
Manifest this update:     Thu 23 Jul 2026 11:10:05 +0000
Manifest next update:     Thu 30 Jul 2026 11:10:05 +0000
Files and hashes:         1: yaetrryN6_zxSzC3739hOzWzeaE.crl (hash: tLHUhq4KfiNAACmVIp9vkvXgFgui4Ily9UpEpiBojjs=)
                          2: F0E0CF60704A11F1AA917C3A69A30FBC.roa (hash: bxhgk4FJJ6oS5enFJV4U6eMpu9BuADYnD6YD1kI2KgE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.crl
                          rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167352, serialNumber=C9A7ADAEBC8DEBFCF14B30B7EF7F613B35B379A1
        Validity
            Not Before: Jul 23 11:10:05 2026 GMT
            Not After : Jul 30 11:10:05 2026 GMT
        Subject: CN=6a61f68e-36dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:bc:e1:a8:28:56:e4:94:da:37:05:4b:20:
                    ea:ea:82:51:d8:cb:16:26:77:a8:83:80:f2:ff:d4:
                    16:eb:f7:5d:48:39:d4:93:37:a4:c6:3c:da:10:94:
                    11:64:9c:e1:ef:b4:7a:1a:e5:3f:2d:6b:bb:ce:07:
                    18:16:8a:5e:41:17:ee:fb:fe:41:e4:db:8e:8f:3e:
                    85:31:dd:76:83:86:20:6e:63:5f:f8:0f:fe:15:7e:
                    21:ef:c2:ad:b0:5b:11:5b:46:3e:c4:17:16:d1:61:
                    1c:32:64:f4:68:c8:8b:9c:f8:c6:44:a7:aa:25:dd:
                    7b:22:b9:6e:1e:8a:ac:f5:b5:8e:44:19:7e:e6:a1:
                    95:58:54:9e:d7:c5:25:6b:00:47:3a:5e:8e:be:ab:
                    eb:98:cb:fb:72:3e:c1:22:9c:c2:df:ac:0a:5e:1d:
                    d5:33:44:54:4d:7b:5f:96:70:16:66:d8:99:b5:d3:
                    3a:8a:5a:5f:97:5d:c6:18:f9:19:84:f8:a6:3a:48:
                    cf:1b:15:68:69:7e:8a:fe:34:d8:e9:5b:0f:a1:1f:
                    d8:a5:ad:83:ff:c8:6c:16:b2:a1:c9:ef:b5:2d:ac:
                    e9:2c:dd:3d:aa:c1:4b:41:4a:e8:64:73:60:23:32:
                    7b:9b:2f:cf:f7:e6:1b:92:90:77:37:a0:ff:61:56:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:EB:04:AC:71:3F:6E:B6:85:C2:14:FF:89:30:7E:0E:99:1D:CA
            X509v3 Authority Key Identifier:
                keyid:C9:A7:AD:AE:BC:8D:EB:FC:F1:4B:30:B7:EF:7F:61:3B:35:B3:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yaetrryN6_zxSzC3739hOzWzeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167352/83A5F59C704A11F1B350ABC268A30FBC/yaetrryN6_zxSzC3739hOzWzeaE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:2d:53:68:54:43:80:e9:a1:55:ca:c6:97:b1:a1:20:d7:
         f3:3a:be:15:71:7d:af:d8:8c:be:44:57:f5:bd:80:48:c4:63:
         91:e5:47:a9:b0:b2:11:6c:46:53:04:6f:08:bb:de:91:c1:1e:
         46:a7:63:6c:d5:9d:8a:02:a9:5f:2f:71:f2:4b:7f:1f:70:2b:
         8f:c2:c5:0c:b4:ae:87:c1:cd:74:51:24:1e:a4:5f:43:40:dd:
         ca:73:2f:04:37:50:49:60:6c:a5:50:0c:ea:64:d1:5e:bd:98:
         7e:9b:64:9b:51:38:57:c4:30:65:4e:e9:52:f4:ac:f0:ab:b7:
         2d:f1:c4:d6:42:40:df:5c:4b:54:9e:bf:f9:8d:79:78:f4:70:
         15:df:e8:ff:24:fd:2e:55:80:dc:16:9b:ef:70:9c:b8:c1:69:
         1d:b1:c4:8d:9f:57:70:31:b3:19:c7:ec:0b:63:e7:c6:27:7e:
         17:c1:16:ed:b3:ad:b9:d7:b5:2d:2d:4e:7e:a2:0a:70:58:c3:
         10:42:84:ff:cc:a8:37:e2:f1:05:71:9e:09:97:b9:01:ea:62:
         cc:95:a2:fd:51:20:2f:1c:6d:b2:df:54:8e:51:65:28:35:97:
         cc:86:04:e5:f8:e6:7c:38:f7:19:97:57:d4:d2:c1:f0:53:10:
         88:db:f4:08
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NzM1MjExMC8GA1UEBRMoQzlBN0FEQUVCQzhERUJGQ0YxNEIzMEI3RUY3RjYxM0Iz
NUIzNzlBMTAeFw0yNjA3MjMxMTEwMDVaFw0yNjA3MzAxMTEwMDVaMBgxFjAUBgNV
BAMTDTZhNjFmNjhlLTM2ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEz7zhqChW5JTaNwVLIOrqglHYyxYmd6iDgPL/1Bbr911IOdSTN6TGPNoQlBFk
nOHvtHoa5T8ta7vOBxgWil5BF+77/kHk246PPoUx3XaDhiBuY1/4D/4VfiHvwq2w
WxFbRj7EFxbRYRwyZPRoyIuc+MZEp6ol3XsiuW4eiqz1tY5EGX7moZVYVJ7XxSVr
AEc6Xo6+q+uYy/tyPsEinMLfrApeHdUzRFRNe1+WcBZm2Jm10zqKWl+XXcYY+RmE
+KY6SM8bFWhpfor+NNjpWw+hH9ilrYP/yGwWsqHJ77UtrOks3T2qwUtBSuhkc2Aj
MnubL8/35huSkHc3oP9hVhajAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdhPrBKxx
P262hcIU/4kwfg6ZHcowHwYDVR0jBBgwFoAUyaetrryN6/zxSzC3739hOzWzeaEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3MzUyLzgzQTVGNTlDNzA0
QTExRjFCMzUwQUJDMjY4QTMwRkJDL3lhZXRycnlONl96eFN6QzM3MzloT3pXemVh
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveWFldHJyeU42X3p4U3pDMzczOWhPeld6ZWFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3
MzUyLzgzQTVGNTlDNzA0QTExRjFCMzUwQUJDMjY4QTMwRkJDL3lhZXRycnlONl96
eFN6QzM3MzloT3pXemVhRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCkpC1TaFRDgOmhVcrGl7GhINfzOr4VcX2v2Iy+RFf1vYBIxGOR5UepsLIRbEZT
BG8Iu96RwR5Gp2Ns1Z2KAqlfL3HyS38fcCuPwsUMtK6Hwc10USQepF9DQN3Kcy8E
N1BJYGylUAzqZNFevZh+m2SbUThXxDBlTulS9Kzwq7ct8cTWQkDfXEtUnr/5jXl4
9HAV3+j/JP0uVYDcFpvvcJy4wWkdscSNn1dwMbMZx+wLY+fGJ34XwRbts62517Ut
LU5+ogpwWMMQQoT/zKg34vEFcZ4Jl7kB6mLMlaL9USAvHG2y31SOUWUoNZfMhgTl
+OZ8OPcZl1fU0sHwUxCI2/QI
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:38:02 2026 by rpki-client