Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
File:                     bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json)
Hash identifier:          ogDj3mC3O9vk9iXUTTTtoD7cP97eiTdA0ysiPjk4mL8=
Subject key identifier:   E5:1F:B8:DE:5E:D7:EB:53:AE:A4:AE:4D:DA:F7:70:47:E1:90:FC:75
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Certificate issuer:       /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
Manifest number:          C3
Signing time:             Thu 23 Jul 2026 08:42:20 +0000
Manifest this update:     Thu 23 Jul 2026 08:42:19 +0000
Manifest next update:     Thu 30 Jul 2026 08:42:19 +0000
Files and hashes:         1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: 8zdUk6TrEcb2UY6gggVXMlJAgVkAfxP81Q1cfa43gk8=)
                          2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: j5dVLv6OLKywzj6nsoTlfZRGOA0pKSPRrtwDldvzxCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
                          rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:42:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
        Validity
            Not Before: Jul 23 08:42:19 2026 GMT
            Not After : Jul 30 08:42:19 2026 GMT
        Subject: CN=6a61d3ec-cd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:66:9e:5d:a7:02:c9:be:c0:6c:3c:43:ee:
                    4b:46:fa:f4:d9:bd:eb:13:e6:83:e4:7d:4d:35:40:
                    23:56:e8:ba:95:82:90:ea:af:83:9d:5a:2d:46:2c:
                    76:c7:3c:f4:33:32:f1:4a:00:16:ef:7a:b0:32:49:
                    1b:2b:60:52:f8:6a:8b:ef:28:4c:db:a7:81:a8:a9:
                    dc:f1:b0:fb:2a:95:39:cb:fe:d7:cd:ba:b0:fc:a2:
                    fd:4f:9b:be:85:86:8f:d4:c1:f8:89:58:94:85:c7:
                    51:d0:1f:52:65:f3:a1:8d:f4:76:c5:73:99:7c:52:
                    78:d2:6e:32:1d:37:b6:63:2d:cc:51:dd:60:3c:6a:
                    1e:a2:77:0c:45:c4:4e:aa:76:90:5f:4f:34:12:97:
                    ec:57:4c:38:8a:a8:8b:0b:45:79:a4:09:a5:ba:e7:
                    dd:de:7b:14:5d:a4:56:b3:e1:1d:27:7e:59:65:e1:
                    2d:85:5d:07:83:83:7d:f6:4d:ea:4d:ae:57:52:3e:
                    8b:1f:bd:0c:f1:03:63:b5:c1:de:ee:52:4e:f7:9f:
                    02:80:a4:f5:53:c2:d2:7c:7e:4b:44:3c:ea:39:65:
                    1b:8e:7b:0a:4e:33:58:4c:24:2e:8f:3c:aa:ba:c5:
                    f6:c8:95:47:db:cd:84:96:9b:5b:d3:cc:be:cf:08:
                    5b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:B8:DE:5E:D7:EB:53:AE:A4:AE:4D:DA:F7:70:47:E1:90:FC:75
            X509v3 Authority Key Identifier:
                keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3e:bc:68:b3:f6:6e:18:b4:ca:1b:e7:82:d7:4a:b5:3d:56:
         c7:fd:db:45:06:59:b0:75:c5:f8:33:e6:e4:a5:3d:8e:9e:97:
         72:3f:f3:a2:1c:b0:23:9a:a4:9d:a0:3c:69:c4:0c:0d:06:e3:
         49:2e:c7:68:ab:7d:f8:c5:a5:db:7e:7c:79:8b:8f:f1:1b:f7:
         6e:db:8c:b9:bd:ef:b8:98:1d:4b:b2:f4:7d:14:c0:04:89:fd:
         96:0c:7e:b8:c0:81:24:a3:ae:f9:a0:6b:f7:af:06:39:a0:a1:
         82:c0:69:a4:91:c0:91:53:99:11:39:78:12:f8:b1:fe:d6:13:
         b8:d6:82:54:c4:c3:9a:06:8e:6a:9b:1c:40:84:ef:d9:2e:6f:
         b4:59:49:bc:8c:18:1b:c2:ab:ef:80:b3:a5:6f:75:52:e5:df:
         e4:88:07:1b:48:29:89:fb:2b:01:9e:4d:21:3f:54:0c:10:67:
         45:fe:88:fb:0e:5a:fd:4f:ae:ef:f7:8a:8a:40:0d:6f:10:b1:
         76:a6:01:af:0d:00:43:f5:70:3a:29:9e:5a:6a:d4:4e:50:df:
         b0:3f:f9:51:65:4c:bf:14:cd:81:8f:53:36:b0:23:40:bd:7b:
         83:9c:9e:df:3d:c7:b5:50:34:8d:3d:ac:ef:14:a3:01:60:be:
         f0:35:21:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg3N0UxMTAvBgNVBAUTKDZEOEFCNkZERTUyMURDMTA2Rjk0ODI5MkI1MDJGRDVB
MDczNDgzN0MwHhcNMjYwNzIzMDg0MjE5WhcNMjYwNzMwMDg0MjE5WjAYMRYwFAYD
VQQDEw02YTYxZDNlYy1jZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywVmnl2nAsm+wGw8Q+5LRvr02b3rE+aD5H1NNUAjVui6lYKQ6q+DnVotRix2
xzz0MzLxSgAW73qwMkkbK2BS+GqL7yhM26eBqKnc8bD7KpU5y/7Xzbqw/KL9T5u+
hYaP1MH4iViUhcdR0B9SZfOhjfR2xXOZfFJ40m4yHTe2Yy3MUd1gPGoeoncMRcRO
qnaQX080EpfsV0w4iqiLC0V5pAmluufd3nsUXaRWs+EdJ35ZZeEthV0Hg4N99k3q
Ta5XUj6LH70M8QNjtcHe7lJO958CgKT1U8LSfH5LRDzqOWUbjnsKTjNYTCQujzyq
usX2yJVH282Elptb08y+zwhbhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOUfuN5e
1+tTrqSuTdr3cEfhkPx1MB8GA1UdIwQYMBaAFG2Ktv3lIdwQb5SCkrUC/VoHNIN8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODc3RS8zODlBNjJEMjVE
NUQxMUYwQjQ5QTc4NDdDNEY5QUUwMi9iWXEyX2VVaDNCQnZsSUtTdFFMOVdnYzBn
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JZcTJfZVVoM0JCdmxJS1N0UUw5V2djMGczdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
ODc3RS8zODlBNjJEMjVENUQxMUYwQjQ5QTc4NDdDNEY5QUUwMi9iWXEyX2VVaDNC
QnZsSUtTdFFMOVdnYzBnM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbT68aLP2bhi0yhvngtdKtT1Wx/3bRQZZsHXF+DPm5KU9jp6Xcj/zohywI5qk
naA8acQMDQbjSS7HaKt9+MWl2358eYuP8Rv3btuMub3vuJgdS7L0fRTABIn9lgx+
uMCBJKOu+aBr968GOaChgsBppJHAkVOZETl4Evix/tYTuNaCVMTDmgaOapscQITv
2S5vtFlJvIwYG8Kr74CzpW91UuXf5IgHG0gpifsrAZ5NIT9UDBBnRf6I+w5a/U+u
7/eKikANbxCxdqYBrw0AQ/VwOimeWmrUTlDfsD/5UWVMvxTNgY9TNrAjQL17g5ye
3z3HtVA0jT2s7xSjAWC+8DUhbA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:25 2026 by rpki-client