Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File:                     YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier:          KgfxnioE32bzYBZt/vMUUzXH2h97uCuaSy5KVs5d2xI=
Subject key identifier:   E8:F0:ED:18:96:47:97:D7:D5:DF:F6:CA:19:37:CF:A2:DF:3B:19:CC
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       05AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number:          05A6
Signing time:             Sat 14 Nov 2026 22:57:42 +0000
Manifest this update:     Sat 14 Nov 2026 22:57:41 +0000
Manifest next update:     Sat 21 Nov 2026 22:57:41 +0000
Files and hashes:         1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: wPTZ2zItsThZ7Pd0VZzMzGisBoeBPZmWH61Kcx009Sk=)
                          2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: vvKSiQ66wXvY3WzNK+cK0pREki3cFgjqVXN6bM5jjHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Nov 14 22:57:41 2026 GMT
            Not After : Nov 21 22:57:41 2026 GMT
        Subject: CN=6af8e766-5bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:9d:74:d7:11:57:78:8d:2d:cf:f1:f6:c4:
                    1b:fc:67:11:95:80:a6:ab:ff:c7:94:c5:60:37:ec:
                    f2:23:82:b7:5c:fe:a9:c7:6a:6b:b5:78:8f:df:4f:
                    3c:36:36:89:6e:05:d1:9c:22:6c:a7:f2:fb:d4:db:
                    88:30:d7:cb:c1:79:11:0e:9d:4d:ed:b5:93:c9:57:
                    75:16:cc:60:dd:58:bd:4e:85:b3:20:09:34:0b:ac:
                    3a:23:ff:d2:3f:0b:c7:e4:c5:a1:6c:1d:e2:e5:d0:
                    93:59:89:ac:2f:d8:60:99:2a:ae:6a:8c:cf:f3:dd:
                    f3:1a:b9:f9:2d:69:db:61:62:7f:ad:74:17:52:2b:
                    17:66:8f:ed:ee:d1:ee:c0:34:6f:0b:36:86:9d:97:
                    3f:fc:e3:20:e6:59:a0:96:ae:b3:6a:0b:57:f3:8a:
                    60:76:f4:24:49:e7:6a:20:ea:ef:3b:33:d8:fb:7e:
                    56:9c:0c:ca:f4:ff:5f:3b:37:75:15:bb:da:eb:49:
                    97:69:13:12:53:81:da:a8:b4:91:f4:cb:6f:f0:56:
                    42:72:80:4e:47:83:90:c2:d0:40:6a:42:1f:8a:a5:
                    3f:1c:51:11:da:20:89:b4:73:b1:16:83:1d:2f:18:
                    e7:62:a7:cc:db:52:62:f5:ed:8b:4e:ab:bd:29:86:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:ED:18:96:47:97:D7:D5:DF:F6:CA:19:37:CF:A2:DF:3B:19:CC
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:77:b1:7a:a3:ee:fe:a0:dc:ad:07:b0:da:1b:6e:7a:51:cc:
         d4:89:75:f1:49:8f:a0:10:37:1f:b5:31:8f:10:86:64:ae:be:
         02:90:75:b9:41:73:44:d1:c3:8c:d0:11:67:6a:e7:7d:16:cb:
         96:b5:5a:5e:20:61:27:5c:b9:78:71:e7:7c:7c:60:c9:18:8d:
         26:5e:84:b2:bf:2a:f1:86:f8:f3:cd:55:26:5f:20:d9:33:fb:
         a0:28:cf:9d:a8:43:fc:a3:b0:68:83:17:48:96:f9:76:5e:cf:
         e1:71:a6:14:4f:2c:8e:2c:9a:d3:f5:de:9d:79:de:9b:b4:14:
         5f:e6:80:96:8b:20:53:e9:69:d0:16:12:b8:9e:32:bd:d0:1d:
         49:17:14:c5:f5:d4:3c:4a:f9:86:15:f2:b9:15:f5:11:71:ff:
         dd:f1:49:4b:02:fc:00:ee:00:db:2a:6e:e3:2f:5b:73:aa:52:
         2a:76:d8:01:e7:92:42:1f:55:24:4f:22:28:f8:17:77:1c:cc:
         bc:c1:20:90:fa:d8:4d:b9:dd:d0:40:7b:09:8c:24:09:de:d8:
         a3:b2:2c:13:f1:6a:9b:6f:8c:ef:23:bf:92:59:eb:32:91:a3:
         e0:6e:e0:84:61:88:6d:84:01:90:12:7b:b6:41:cd:a4:8e:6d:
         11:25:6f:f6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdDNzcxMTAvBgNVBAUTKDYxQjAyMjMzNUY0RDg1RTE2RDQ3N0EwMDZBREM4RTNG
MkZEQTk0NjAwHhcNMjYxMTE0MjI1NzQxWhcNMjYxMTIxMjI1NzQxWjAYMRYwFAYD
VQQDEw02YWY4ZTc2Ni01YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhsOddNcRV3iNLc/x9sQb/GcRlYCmq//HlMVgN+zyI4K3XP6px2prtXiP3088
NjaJbgXRnCJsp/L71NuIMNfLwXkRDp1N7bWTyVd1Fsxg3Vi9ToWzIAk0C6w6I//S
PwvH5MWhbB3i5dCTWYmsL9hgmSquaozP893zGrn5LWnbYWJ/rXQXUisXZo/t7tHu
wDRvCzaGnZc//OMg5lmglq6zagtX84pgdvQkSedqIOrvOzPY+35WnAzK9P9fOzd1
Fbva60mXaRMSU4HaqLSR9Mtv8FZCcoBOR4OQwtBAakIfiqU/HFER2iCJtHOxFoMd
LxjnYqfM21Ji9e2LTqu9KYbPuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjw7RiW
R5fX1d/2yhk3z6LfOxnMMB8GA1UdIwQYMBaAFGGwIjNfTYXhbUd6AGrcjj8v2pRg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M3Ny9EQzIwMUFGRTM5
NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5TmhlRnRSM29BYXR5T1B5X2Fs
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQWlNMTlOaGVGdFIzb0FhdHlPUHlfYWxHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0M3Ny9EQzIwMUFGRTM5NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5Tmhl
RnRSM29BYXR5T1B5X2FsR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJHexeqPu/qDcrQew2htuelHM1Il18UmPoBA3H7UxjxCGZK6+ApB1uUFzRNHD
jNARZ2rnfRbLlrVaXiBhJ1y5eHHnfHxgyRiNJl6Esr8q8Yb4881VJl8g2TP7oCjP
nahD/KOwaIMXSJb5dl7P4XGmFE8sjiya0/XenXnem7QUX+aAlosgU+lp0BYSuJ4y
vdAdSRcUxfXUPEr5hhXyuRX1EXH/3fFJSwL8AO4A2ypu4y9bc6pSKnbYAeeSQh9V
JE8iKPgXdxzMvMEgkPrYTbnd0EB7CYwkCd7Yo7IsE/Fqm2+M7yO/klnrMpGj4G7g
hGGIbYQBkBJ7tkHNpI5tESVv9g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:32 2026 by rpki-client