Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
File:                     yCt7N51v7So8MMRTfg-HzLYIIus.mft (raw, json)
Hash identifier:          pg6VDNwxTMZ4KUAKGb4cKedhgAdq1vX5E7OxkVKFHf4=
Subject key identifier:   44:AA:68:A6:00:6D:CB:DE:B6:15:A6:62:81:A4:0A:AE:72:C1:59:BD
Authority key identifier: C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB
Certificate issuer:       /CN=A917EB96/serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
Manifest number:          025F
Signing time:             Fri 25 Sep 2026 02:14:57 +0000
Manifest this update:     Fri 25 Sep 2026 02:14:56 +0000
Manifest next update:     Fri 02 Oct 2026 02:14:56 +0000
Files and hashes:         1: yCt7N51v7So8MMRTfg-HzLYIIus.crl (hash: uBCWuy1sqZgyLzJDLy/uAMwlq6aEIVNuxEcTHD4FcaY=)
                          2: B50ECD32A57E11EEB4533738C4F9AE02.roa (hash: l91Dssw8/pmNPl0UZ8Pj4iGcNrigdX9iHQBJ3R2+iqI=)
                          3: 348BAEE41C2D11EEB362491FC4F9AE02.roa (hash: +rjncpi6r8gzrI2dwiyOCyHrVcg7Wh5JTPPsoLstCjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl
                          rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EB96, serialNumber=C82B7B379D6FED2A3C30C4537E0F87CCB60822EB
        Validity
            Not Before: Sep 25 02:14:56 2026 GMT
            Not After : Oct  2 02:14:56 2026 GMT
        Subject: CN=6ab5d920-49a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:33:bc:cf:57:f4:4c:f9:78:d8:68:a7:ba:
                    4c:af:f4:ea:85:b6:71:a4:98:43:52:cb:e0:e6:73:
                    7e:6c:3a:27:d8:e4:f3:6b:e2:e3:16:a2:19:07:cc:
                    2d:18:ca:9a:dd:7f:14:9b:3a:a6:50:78:06:91:dc:
                    1f:bd:fb:c5:25:f8:8b:22:a5:e9:e3:a9:2e:bf:d9:
                    b5:73:1d:aa:a7:0d:ad:62:fa:3c:4b:4e:00:42:73:
                    31:98:6b:17:53:e0:ba:f2:00:8b:06:4f:76:87:61:
                    db:ea:78:25:90:78:0c:60:1b:64:b8:7a:39:d0:43:
                    de:e0:b5:d6:b7:83:62:19:6f:fb:0b:6c:f9:30:b3:
                    c5:21:9c:74:ab:86:80:51:55:43:e6:3b:f9:4e:a7:
                    8d:46:43:09:89:b4:9d:48:56:d3:49:d3:34:9d:c8:
                    17:4f:0e:d8:19:83:ff:43:08:04:11:9c:cf:a2:25:
                    0c:28:5f:9c:4a:86:0c:71:83:d6:23:7e:2f:8a:7f:
                    27:67:3b:3f:96:01:5a:3a:66:6c:95:e3:e0:fa:b5:
                    1d:26:08:db:67:85:4a:81:89:b4:73:2c:38:03:01:
                    73:a0:d6:5b:94:56:c6:b1:c6:fa:b6:23:95:a3:94:
                    07:b0:7b:0a:b6:9b:62:59:df:df:5b:01:8d:dc:ef:
                    cb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:68:A6:00:6D:CB:DE:B6:15:A6:62:81:A4:0A:AE:72:C1:59:BD
            X509v3 Authority Key Identifier:
                keyid:C8:2B:7B:37:9D:6F:ED:2A:3C:30:C4:53:7E:0F:87:CC:B6:08:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yCt7N51v7So8MMRTfg-HzLYIIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB96/64D6BDCC1C2911EE9D06F90AC4F9AE02/yCt7N51v7So8MMRTfg-HzLYIIus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:d1:d9:3e:46:3c:66:b3:f4:9c:5e:37:83:19:ab:8d:18:
         92:81:5e:c4:ef:1b:8c:bd:c0:cb:82:91:1e:d0:04:1d:ed:ed:
         e5:d6:01:60:8c:89:9b:b9:e8:d4:03:bf:73:47:b7:c1:87:51:
         05:af:b9:49:dc:5f:a4:f8:c9:67:82:cc:d7:34:e8:95:76:73:
         67:c3:11:3f:64:55:dc:64:cd:cd:1a:13:d4:a2:cb:7e:fe:15:
         47:c8:f0:d9:ba:fd:c6:ca:3f:58:24:04:5b:47:ac:64:93:57:
         1a:8f:fe:70:60:18:35:52:c6:68:16:84:4b:3e:34:2a:86:6c:
         c0:a6:e9:a1:0a:93:ec:2e:69:dd:a7:d9:98:e9:de:8f:29:4a:
         61:40:39:6a:f8:02:09:33:f8:3e:68:c1:b8:7e:e5:fe:47:2f:
         b3:03:87:fb:04:76:ac:35:cb:ab:7b:54:ea:f9:44:cf:8f:b0:
         cd:09:53:85:50:59:c5:a4:63:63:a2:99:9f:3d:08:45:f0:be:
         e5:da:05:47:23:af:6c:b1:ea:dd:9b:ca:e5:2b:8a:28:9a:84:
         15:ff:d7:66:85:92:43:cc:c3:65:a6:d9:a2:bb:1f:8e:c0:37:
         9e:20:6e:d5:b0:33:9b:50:a5:78:7e:6c:1c:a0:5c:31:ad:78:
         6e:35:e3:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCOTYxMTAvBgNVBAUTKEM4MkI3QjM3OUQ2RkVEMkEzQzMwQzQ1MzdFMEY4N0ND
QjYwODIyRUIwHhcNMjYwOTI1MDIxNDU2WhcNMjYxMDAyMDIxNDU2WjAYMRYwFAYD
VQQDEw02YWI1ZDkyMC00OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06QzvM9X9Ez5eNhop7pMr/TqhbZxpJhDUsvg5nN+bDon2OTza+LjFqIZB8wt
GMqa3X8UmzqmUHgGkdwfvfvFJfiLIqXp46kuv9m1cx2qpw2tYvo8S04AQnMxmGsX
U+C68gCLBk92h2Hb6nglkHgMYBtkuHo50EPe4LXWt4NiGW/7C2z5MLPFIZx0q4aA
UVVD5jv5TqeNRkMJibSdSFbTSdM0ncgXTw7YGYP/QwgEEZzPoiUMKF+cSoYMcYPW
I34vin8nZzs/lgFaOmZslePg+rUdJgjbZ4VKgYm0cyw4AwFzoNZblFbGscb6tiOV
o5QHsHsKtptiWd/fWwGN3O/LKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESqaKYA
bcvethWmYoGkCq5ywVm9MB8GA1UdIwQYMBaAFMgrezedb+0qPDDEU34Ph8y2CCLr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI5Ni82NEQ2QkRDQzFD
MjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdTbzhNTVJUZmctSHpMWUlJ
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lDdDdONTF2N1NvOE1NUlRmZy1IekxZSUl1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUI5Ni82NEQ2QkRDQzFDMjkxMUVFOUQwNkY5MEFDNEY5QUUwMi95Q3Q3TjUxdjdT
bzhNTVJUZmctSHpMWUlJdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlCzR2T5GPGaz9JxeN4MZq40YkoFexO8bjL3Ay4KRHtAEHe3t5dYBYIyJm7no
1AO/c0e3wYdRBa+5SdxfpPjJZ4LM1zTolXZzZ8MRP2RV3GTNzRoT1KLLfv4VR8jw
2br9xso/WCQEW0esZJNXGo/+cGAYNVLGaBaESz40KoZswKbpoQqT7C5p3afZmOne
jylKYUA5avgCCTP4PmjBuH7l/kcvswOH+wR2rDXLq3tU6vlEz4+wzQlThVBZxaRj
Y6KZnz0IRfC+5doFRyOvbLHq3ZvK5SuKKJqEFf/XZoWSQ8zDZabZorsfjsA3niBu
1bAzm1CleH5sHKBcMa14bjXjlA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:06 2026 by rpki-client