Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
File:                     YBi5hcOZywcxwWNM_ktHkS8q9dE.mft (raw, json)
Hash identifier:          RVAkLpY2WnXSfvVJeQ218UwGOMLFFCPOTyH0jJI3W28=
Subject key identifier:   88:97:36:F6:69:F2:AA:81:B3:7F:D5:F3:49:5E:01:0B:AC:78:ED:22
Authority key identifier: 60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1
Certificate issuer:       /CN=A9183BA5/serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
Certificate serial:       02D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
Manifest number:          02CE
Signing time:             Fri 25 Sep 2026 01:15:38 +0000
Manifest this update:     Fri 25 Sep 2026 01:15:38 +0000
Manifest next update:     Fri 02 Oct 2026 01:15:38 +0000
Files and hashes:         1: YBi5hcOZywcxwWNM_ktHkS8q9dE.crl (hash: Amwl+oe55s6N19uGElb7A3lsJwCo9e3/nRPlQFlYno8=)
                          2: C386C06A706211EDA9CCDB76C4F9AE02.roa (hash: tSM9UI8Nun2AOG+Ik7kE9gWzPNKVQk3XnwhRrm6CZDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl
                          rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183BA5, serialNumber=6018B985C399CB0731C1634CFE4B47912F2AF5D1
        Validity
            Not Before: Sep 25 01:15:38 2026 GMT
            Not After : Oct  2 01:15:38 2026 GMT
        Subject: CN=6ab5cb3a-6e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:c3:52:db:62:b9:ff:ba:e3:6c:96:30:5d:
                    e8:30:23:24:43:19:ff:c5:68:db:cb:d2:37:23:32:
                    9f:06:6c:b6:0c:33:75:8f:e2:1e:7a:69:88:bb:4b:
                    6b:9d:ff:d1:18:77:96:20:d4:de:e4:85:ad:29:06:
                    3a:c7:c6:b5:d7:ee:c2:c2:73:d9:53:22:d1:8b:0c:
                    58:a8:2d:8f:1b:21:b6:79:13:73:73:2e:8e:e8:9a:
                    21:d8:41:82:d6:c6:7d:85:5b:03:bc:f7:c2:35:2c:
                    60:a3:6f:31:77:f8:11:c2:32:b1:73:99:d5:61:6f:
                    82:57:d1:27:5e:5b:fb:1a:cf:e8:15:4d:d2:3b:bf:
                    c8:ea:61:6f:d2:ea:42:25:53:16:5c:0b:03:96:a7:
                    a6:03:75:f9:8e:a5:bf:4d:9d:70:e3:42:66:8d:b7:
                    29:cc:b8:65:57:93:2b:8e:a4:09:4d:90:cd:0b:72:
                    60:0a:bc:ae:16:99:55:85:c2:53:73:84:a8:1b:3a:
                    2f:dc:da:44:d3:43:da:99:9d:9f:17:56:1e:af:e3:
                    59:ff:5f:18:1e:aa:a5:14:66:71:7f:04:9c:c7:7d:
                    5d:01:02:d0:80:6f:f3:4c:e8:84:42:fd:cf:6d:68:
                    1a:03:c1:ef:50:0f:b1:8b:f6:5f:99:8b:5b:69:74:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:97:36:F6:69:F2:AA:81:B3:7F:D5:F3:49:5E:01:0B:AC:78:ED:22
            X509v3 Authority Key Identifier:
                keyid:60:18:B9:85:C3:99:CB:07:31:C1:63:4C:FE:4B:47:91:2F:2A:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBi5hcOZywcxwWNM_ktHkS8q9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BA5/28620CC4705E11EDBC07F158C4F9AE02/YBi5hcOZywcxwWNM_ktHkS8q9dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:33:56:15:97:24:3a:e4:27:82:1d:b2:ab:32:eb:a9:38:
         c1:27:56:14:28:ef:17:fc:47:26:34:c5:d2:28:d4:c0:2c:06:
         8f:45:eb:3e:0e:b4:9d:43:ff:62:d4:8b:fd:45:e5:a8:75:59:
         3b:37:3a:62:fe:84:bb:56:9e:b9:5f:d2:f5:d5:97:cb:c7:fc:
         83:7e:43:de:3d:ba:38:4b:85:87:2e:82:e6:48:13:a8:41:c6:
         c5:17:b8:7c:85:53:44:b7:38:10:f1:7d:4e:87:4d:ae:fa:85:
         df:00:4f:6b:b3:4c:59:fb:37:5e:2a:fd:66:ed:09:36:4c:bf:
         7d:31:91:97:3b:15:8f:80:c6:eb:38:06:2b:b1:83:c1:4f:d0:
         2e:ab:78:fc:0a:3f:6a:08:02:68:6a:1c:80:dc:99:98:65:a6:
         21:15:b1:49:8a:e4:b9:c4:2b:e2:d4:ff:27:e6:ff:0f:ef:12:
         1f:0a:8d:fc:6e:95:0e:de:8c:6b:18:2e:89:25:44:09:06:27:
         df:85:8d:b4:98:54:36:6f:84:65:5e:16:5e:e5:5e:73:0b:ac:
         c5:dc:93:f4:e3:6d:da:e1:ea:d8:32:b6:4d:fb:90:c1:cf:a4:
         18:05:62:e7:c8:f6:b6:b0:04:29:78:12:05:fb:0b:95:d4:cd:
         1e:c8:a0:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCQTUxMTAvBgNVBAUTKDYwMThCOTg1QzM5OUNCMDczMUMxNjM0Q0ZFNEI0Nzkx
MkYyQUY1RDEwHhcNMjYwOTI1MDExNTM4WhcNMjYxMDAyMDExNTM4WjAYMRYwFAYD
VQQDEw02YWI1Y2IzYS02ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbjDUttiuf+642yWMF3oMCMkQxn/xWjby9I3IzKfBmy2DDN1j+IeemmIu0tr
nf/RGHeWINTe5IWtKQY6x8a11+7CwnPZUyLRiwxYqC2PGyG2eRNzcy6O6Joh2EGC
1sZ9hVsDvPfCNSxgo28xd/gRwjKxc5nVYW+CV9EnXlv7Gs/oFU3SO7/I6mFv0upC
JVMWXAsDlqemA3X5jqW/TZ1w40JmjbcpzLhlV5MrjqQJTZDNC3JgCryuFplVhcJT
c4SoGzov3NpE00PamZ2fF1Yer+NZ/18YHqqlFGZxfwScx31dAQLQgG/zTOiEQv3P
bWgaA8HvUA+xi/ZfmYtbaXSQhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiXNvZp
8qqBs3/V80leAQuseO0iMB8GA1UdIwQYMBaAFGAYuYXDmcsHMcFjTP5LR5EvKvXR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JBNS8yODYyMENDNDcw
NUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3Y3h3V05NX2t0SGtTOHE5
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCaTVoY09aeXdjeHdXTk1fa3RIa1M4cTlkRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0JBNS8yODYyMENDNDcwNUUxMUVEQkMwN0YxNThDNEY5QUUwMi9ZQmk1aGNPWnl3
Y3h3V05NX2t0SGtTOHE5ZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKzczVhWXJDrkJ4Idsqsy66k4wSdWFCjvF/xHJjTF0ijUwCwGj0XrPg60nUP/
YtSL/UXlqHVZOzc6Yv6Eu1aeuV/S9dWXy8f8g35D3j26OEuFhy6C5kgTqEHGxRe4
fIVTRLc4EPF9TodNrvqF3wBPa7NMWfs3Xir9Zu0JNky/fTGRlzsVj4DG6zgGK7GD
wU/QLqt4/Ao/aggCaGocgNyZmGWmIRWxSYrkucQr4tT/J+b/D+8SHwqN/G6VDt6M
axguiSVECQYn34WNtJhUNm+EZV4WXuVecwusxdyT9ONt2uHq2DK2TfuQwc+kGAVi
58j2trAEKXgSBfsLldTNHsigwQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:04:47 2026 by rpki-client