Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
File:                     y70GgkBePlkg8UsDghSUjF410cM.mft (raw, json)
Hash identifier:          1gU8epQNDXlJG/RyaxkiwRTR5UODnL8evAn82fLxLqY=
Subject key identifier:   76:E7:AE:64:FD:D8:0B:5A:CA:25:E8:C6:79:A9:86:07:10:D8:11:5D
Authority key identifier: CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3
Certificate issuer:       /CN=A916D4BE/serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
Manifest number:          0576
Signing time:             Sun 20 Sep 2026 23:27:47 +0000
Manifest this update:     Sun 20 Sep 2026 23:27:46 +0000
Manifest next update:     Sun 27 Sep 2026 23:27:46 +0000
Files and hashes:         1: y70GgkBePlkg8UsDghSUjF410cM.crl (hash: gGY3vAyamGanZbd88+YUiOiXfRtaYjSgRBsx6EnDJvk=)
                          2: 6B6833B43D3211F180C94A7884EE528E.roa (hash: gzQgQxyi1t7zAFl1L1PXe5vPjsPRekeb+UDdZ8X5gRo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl
                          rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D4BE, serialNumber=CBBD0682405E3E5920F14B038214948C5E35D1C3
        Validity
            Not Before: Sep 20 23:27:46 2026 GMT
            Not After : Sep 27 23:27:46 2026 GMT
        Subject: CN=6ab06bf3-8fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:a4:9b:0e:e2:2b:49:e4:b5:9f:44:e6:73:
                    53:73:bf:c8:75:fd:a9:90:b7:21:89:31:42:7c:f9:
                    58:87:0e:e3:5d:a1:e4:0f:8d:b7:31:0b:58:d4:d4:
                    0f:13:f1:8b:d6:a0:be:6a:ae:df:ac:80:eb:b5:db:
                    8e:b1:1f:ec:08:d5:d1:00:ad:89:55:ce:e3:bb:71:
                    72:d2:21:b1:33:f7:61:e2:8e:7a:ea:02:55:2b:0e:
                    47:98:fd:5d:79:d8:2b:17:02:9a:af:a3:21:e8:be:
                    ee:97:81:78:e5:03:d1:38:aa:1b:89:fb:bf:2a:b6:
                    2a:5c:b0:ea:e1:1f:9f:0b:ef:20:35:96:11:b4:34:
                    2d:be:09:e2:7e:f5:f8:62:2f:8a:f5:26:7f:e5:1e:
                    bf:39:05:78:f0:b9:d9:f5:04:3c:5e:db:71:af:2b:
                    c5:3e:a7:85:22:68:8a:ef:93:61:53:97:47:81:a4:
                    a4:c3:47:68:34:bd:f6:be:bb:23:a6:88:3e:48:6f:
                    b5:0e:b2:68:c2:4a:0c:84:a4:36:ad:73:e4:66:67:
                    b9:ab:11:9a:62:d5:4a:ad:8c:d0:b3:4a:a0:c5:55:
                    1e:1b:05:66:13:df:72:8d:aa:77:79:aa:84:ba:3c:
                    b3:10:6e:c8:5b:d4:08:2a:11:49:4a:a9:0c:e2:c8:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E7:AE:64:FD:D8:0B:5A:CA:25:E8:C6:79:A9:86:07:10:D8:11:5D
            X509v3 Authority Key Identifier:
                keyid:CB:BD:06:82:40:5E:3E:59:20:F1:4B:03:82:14:94:8C:5E:35:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y70GgkBePlkg8UsDghSUjF410cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/y70GgkBePlkg8UsDghSUjF410cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:15:68:c8:93:6f:fd:2e:74:ae:ca:87:18:17:ff:3f:1d:36:
         c9:e0:1c:ed:cf:f7:95:b8:72:4f:c6:89:40:96:38:44:f7:42:
         1d:8f:52:27:4e:e7:5d:16:94:05:0c:d2:8b:f2:62:6e:47:4b:
         8a:3f:39:70:a9:89:40:8b:8d:10:62:29:d5:9e:b4:e5:ef:ae:
         75:f5:59:b7:46:a4:a4:1c:b5:22:63:bd:28:3f:ec:11:9e:c6:
         76:20:8c:4d:ed:3f:16:af:87:98:76:c2:f3:8c:46:6b:d6:f0:
         28:67:e6:48:81:81:69:27:c4:aa:4c:9b:39:e4:9f:f7:4f:50:
         cb:db:64:d4:09:dc:84:7f:e1:e3:fb:45:1d:2f:7d:4e:42:b1:
         73:b1:69:33:09:08:b5:d9:88:83:d3:f5:d5:3f:87:0b:76:c0:
         b7:db:a7:2a:0c:4c:db:be:95:2b:73:82:98:a6:d6:b8:5e:ce:
         8b:b4:ec:9c:0e:42:26:f9:6d:04:13:5c:92:35:c3:fc:2f:1d:
         23:df:c9:27:d3:0e:02:7c:22:bb:3f:78:3a:64:e4:6f:11:ad:
         65:50:9d:81:bb:27:96:54:c4:47:f7:80:59:a9:bd:9b:20:7c:
         79:dc:61:28:e0:d7:fc:db:51:91:87:18:65:9b:b0:d6:af:0b:
         83:f6:92:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:35:28 2026 by rpki-client