Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
File:                     YbAiM19NheFtR3oAatyOPy_alGA.mft (raw, json)
Hash identifier:          /C9dtT/ZYPzcR5FuklciYuwM15VYG3gF4b9+FigrL5o=
Subject key identifier:   B6:19:34:A3:60:EC:6F:8F:52:DB:80:29:AA:CF:03:C3:40:34:2F:01
Authority key identifier: 61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60
Certificate issuer:       /CN=A91A7C77/serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
Certificate serial:       056E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
Manifest number:          0569
Signing time:             Thu 23 Jul 2026 00:07:32 +0000
Manifest this update:     Thu 23 Jul 2026 00:07:31 +0000
Manifest next update:     Thu 30 Jul 2026 00:07:31 +0000
Files and hashes:         1: YbAiM19NheFtR3oAatyOPy_alGA.crl (hash: xhge913srsd7/fwKRNqbWr8LK3nORdnntDEdxIXLwYo=)
                          2: FF4EB6B2395811ECA422C462C4F9AE02.roa (hash: 1EXMwCZdlr4n5uu1XLxW00w3UXh6JZwNTcRYA1sNXNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7C77, serialNumber=61B022335F4D85E16D477A006ADC8E3F2FDA9460
        Validity
            Not Before: Jul 23 00:07:31 2026 GMT
            Not After : Jul 30 00:07:31 2026 GMT
        Subject: CN=6a615b44-5a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:1d:e8:da:c7:b0:90:f6:2c:90:d5:05:b4:
                    23:9d:0b:d1:af:79:a8:f0:58:61:4a:be:a2:27:41:
                    16:24:0a:6b:88:8b:07:4a:ea:c5:3f:fe:10:de:39:
                    03:93:bc:8f:b4:6e:58:c7:b3:ab:8f:f9:5d:99:68:
                    37:a0:1c:0f:32:13:e9:79:76:ff:4f:d9:10:da:e9:
                    21:05:23:c5:7d:5e:1b:e9:5c:cd:00:f0:0e:67:28:
                    37:21:47:d3:a3:82:ad:f6:44:b4:cb:af:64:57:f3:
                    74:90:19:4e:d5:6b:b7:d7:5d:1d:11:b5:3c:d3:02:
                    38:e4:16:87:5f:f8:5b:78:df:0e:85:43:9e:82:d1:
                    5e:ca:f6:9a:44:e5:ac:43:38:c0:5f:96:2c:73:79:
                    23:84:e1:e1:8d:84:ba:1b:cb:49:5b:40:f7:60:d0:
                    bd:00:bc:39:6c:20:e3:04:a7:64:82:a2:d0:43:28:
                    08:bf:a0:8c:65:00:73:65:b4:ed:6f:47:98:2e:09:
                    3e:6d:56:62:b2:31:d3:b6:5e:ac:1d:b6:a9:c7:d1:
                    57:91:a1:93:2e:f3:7b:eb:97:f1:87:77:5d:62:a1:
                    09:54:08:c9:ba:a3:0c:4b:18:c6:ff:86:06:9b:af:
                    4d:21:55:fd:8f:1f:e7:e3:40:89:58:a9:53:0b:81:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:34:A3:60:EC:6F:8F:52:DB:80:29:AA:CF:03:C3:40:34:2F:01
            X509v3 Authority Key Identifier:
                keyid:61:B0:22:33:5F:4D:85:E1:6D:47:7A:00:6A:DC:8E:3F:2F:DA:94:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbAiM19NheFtR3oAatyOPy_alGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C77/DC201AFE395411EC80D9D359C4F9AE02/YbAiM19NheFtR3oAatyOPy_alGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:86:06:1f:9d:e8:a2:d4:be:00:8d:79:ab:d3:e9:85:5c:dc:
         99:25:5b:d2:c7:de:8c:6a:5f:f8:41:dd:35:30:b1:09:28:89:
         ac:c3:42:ee:06:ab:9c:a6:cb:68:7c:cd:04:45:78:04:8c:88:
         7a:22:59:85:5f:a6:78:bd:1b:2a:05:ec:da:99:f3:e0:e0:5b:
         cd:02:4c:2f:9c:64:dd:b1:db:22:1f:43:83:02:d4:fd:94:04:
         f2:a8:52:c7:9a:a3:25:aa:1d:0b:c2:c4:92:bb:81:5c:59:87:
         cd:33:0d:4e:c8:4b:0a:67:54:17:0d:99:6d:3e:40:88:1c:e7:
         15:61:f4:dc:5a:b6:15:af:4a:b0:08:cd:e1:a0:dd:bf:df:2a:
         f2:9f:a6:32:b8:6d:87:e0:94:3e:aa:4f:b6:b9:c8:02:c0:a8:
         be:6e:78:2f:49:9a:ec:0f:6f:13:8e:24:5e:a8:08:55:25:2f:
         38:bd:26:20:02:f5:8b:50:cb:03:c4:ef:b5:5a:90:6b:2a:59:
         01:86:47:7c:70:ea:ba:c3:55:5d:2f:99:d6:40:6e:d9:68:1f:
         49:4a:54:53:5f:fe:5a:37:6d:e7:56:aa:9a:46:89:db:22:91:
         7e:b1:de:02:55:29:e7:29:2c:58:5c:0d:89:dd:93:25:e0:47:
         c3:1d:76:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdDNzcxMTAvBgNVBAUTKDYxQjAyMjMzNUY0RDg1RTE2RDQ3N0EwMDZBREM4RTNG
MkZEQTk0NjAwHhcNMjYwNzIzMDAwNzMxWhcNMjYwNzMwMDAwNzMxWjAYMRYwFAYD
VQQDEw02YTYxNWI0NC01YTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtCgd6NrHsJD2LJDVBbQjnQvRr3mo8FhhSr6iJ0EWJApriIsHSurFP/4Q3jkD
k7yPtG5Yx7Orj/ldmWg3oBwPMhPpeXb/T9kQ2ukhBSPFfV4b6VzNAPAOZyg3IUfT
o4Kt9kS0y69kV/N0kBlO1Wu3110dEbU80wI45BaHX/hbeN8OhUOegtFeyvaaROWs
QzjAX5Ysc3kjhOHhjYS6G8tJW0D3YNC9ALw5bCDjBKdkgqLQQygIv6CMZQBzZbTt
b0eYLgk+bVZisjHTtl6sHbapx9FXkaGTLvN765fxh3ddYqEJVAjJuqMMSxjG/4YG
m69NIVX9jx/n40CJWKlTC4E8fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLYZNKNg
7G+PUtuAKarPA8NANC8BMB8GA1UdIwQYMBaAFGGwIjNfTYXhbUd6AGrcjj8v2pRg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M3Ny9EQzIwMUFGRTM5
NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5TmhlRnRSM29BYXR5T1B5X2Fs
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQWlNMTlOaGVGdFIzb0FhdHlPUHlfYWxHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0M3Ny9EQzIwMUFGRTM5NTQxMUVDODBEOUQzNTlDNEY5QUUwMi9ZYkFpTTE5Tmhl
RnRSM29BYXR5T1B5X2FsR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASYYGH53ootS+AI15q9PphVzcmSVb0sfejGpf+EHdNTCxCSiJrMNC7garnKbL
aHzNBEV4BIyIeiJZhV+meL0bKgXs2pnz4OBbzQJML5xk3bHbIh9DgwLU/ZQE8qhS
x5qjJaodC8LEkruBXFmHzTMNTshLCmdUFw2ZbT5AiBznFWH03Fq2Fa9KsAjN4aDd
v98q8p+mMrhth+CUPqpPtrnIAsCovm54L0ma7A9vE44kXqgIVSUvOL0mIAL1i1DL
A8TvtVqQaypZAYZHfHDqusNVXS+Z1kBu2WgfSUpUU1/+Wjdt51aqmkaJ2yKRfrHe
AlUp5yksWFwNid2TJeBHwx12UQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:14 2026 by rpki-client