Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
File:                     yq12WnMFvBUlSxWyW1vTm2Oow68.mft (raw, json)
Hash identifier:          ZCXC+JRMFLHNxmGWySNUw0/2fp06vBLskBmte4T/ASk=
Subject key identifier:   EE:BD:82:F9:34:DC:54:42:F9:6C:51:F6:B0:CC:55:5A:B7:13:AB:F4
Authority key identifier: CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF
Certificate issuer:       /CN=A911082E/serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
Certificate serial:       E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
Manifest number:          DF
Signing time:             Fri 25 Sep 2026 06:40:36 +0000
Manifest this update:     Fri 25 Sep 2026 06:40:35 +0000
Manifest next update:     Fri 02 Oct 2026 06:40:35 +0000
Files and hashes:         1: yq12WnMFvBUlSxWyW1vTm2Oow68.crl (hash: 9K9qBL3mc6xtEMyzDXIkQk745GSmrpVrDgdWBB8ja6g=)
                          2: 2CD74E4E66E311F08F05EC49C4F9AE02.roa (hash: /XD7eUERO5lWybTU1XRtBW6LwOkjsdG2lxm5wvSE3SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl
                          rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911082E, serialNumber=CAAD765A7305BC15254B15B25B5BD39B63A8C3AF
        Validity
            Not Before: Sep 25 06:40:35 2026 GMT
            Not After : Oct  2 06:40:35 2026 GMT
        Subject: CN=6ab61763-495e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:55:c3:f7:f8:72:79:c4:1c:b0:8d:75:6f:
                    b6:75:87:53:bf:93:4e:1b:fb:90:3e:3c:09:15:5d:
                    7e:1b:e7:12:45:9b:8c:4d:ff:6c:2b:eb:ad:68:7a:
                    dc:5e:87:eb:c5:b4:3e:79:c0:86:e0:e2:0f:ba:86:
                    45:1a:44:5e:1e:3e:9b:41:a2:b5:f6:a3:68:87:ee:
                    d2:5a:52:f3:00:39:e6:a6:e4:19:47:bf:b5:7d:06:
                    b5:d8:16:ba:b1:ab:7a:64:7a:a4:b7:87:e2:39:8d:
                    68:04:50:7a:a7:82:ae:25:98:24:37:52:65:d0:98:
                    ad:d5:96:b5:50:22:08:c2:f9:8a:b7:8d:2d:39:0f:
                    17:99:d2:21:9f:e6:b2:e3:97:71:ec:d9:24:9b:dc:
                    5f:e5:eb:10:3f:de:91:8c:50:6f:c2:46:42:27:8f:
                    b1:3c:58:9d:ee:87:bd:58:54:f6:a2:7e:25:14:fe:
                    9d:92:c6:35:0d:bf:1f:68:b2:ce:fb:d0:c9:90:bf:
                    18:e0:46:7b:a9:ba:21:34:1a:15:fb:a5:0b:9b:d2:
                    52:d3:9e:95:c5:78:8f:8a:1a:65:99:e4:b4:af:77:
                    a1:0a:3d:0d:39:3f:52:47:99:3c:d8:b0:0a:7d:87:
                    6d:6a:4d:3a:76:3e:25:22:80:34:28:ef:13:b7:76:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BD:82:F9:34:DC:54:42:F9:6C:51:F6:B0:CC:55:5A:B7:13:AB:F4
            X509v3 Authority Key Identifier:
                keyid:CA:AD:76:5A:73:05:BC:15:25:4B:15:B2:5B:5B:D3:9B:63:A8:C3:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yq12WnMFvBUlSxWyW1vTm2Oow68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/853FD95866E211F0BEABE93EC4F9AE02/yq12WnMFvBUlSxWyW1vTm2Oow68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:36:90:97:9a:05:9b:f5:58:a2:cb:a5:77:bf:63:51:69:61:
         a4:13:34:c6:5f:97:7b:0f:eb:77:3a:a1:69:4d:12:99:17:57:
         ad:6a:db:56:31:32:bd:a0:5b:8c:2a:17:89:42:0b:61:0b:90:
         58:f4:d5:a6:e0:bc:63:89:7e:07:96:87:8c:a4:82:79:2f:56:
         6b:77:6d:bd:b6:6b:df:40:e8:59:d7:c6:f8:62:5f:6c:03:df:
         fa:f9:d3:b1:61:19:19:e4:9b:fa:f0:8e:34:7b:d7:46:e6:65:
         a5:e8:a9:60:ef:65:1d:87:d7:90:52:9b:e2:78:c2:ca:ce:50:
         36:b0:1e:f3:a1:73:be:4e:3f:8e:b6:d3:56:7f:73:53:15:e8:
         5f:8b:dc:01:5b:73:06:34:81:35:18:37:82:0f:77:6c:29:11:
         ae:9e:d6:a2:18:f1:75:b9:25:c3:70:c2:2a:2d:58:32:f2:e8:
         f5:ac:eb:d2:8b:e1:4c:d6:82:34:a5:c8:89:b8:99:93:4a:18:
         ae:8c:64:8c:85:c2:b1:8f:68:38:fb:84:3b:5d:00:52:94:f3:
         9d:31:83:ea:35:a1:2b:4f:e6:ef:d9:17:99:5b:c1:74:62:62:
         2d:24:5d:71:3b:d1:0d:30:d0:1d:a2:33:38:36:db:23:95:93:
         79:03:28:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA4MkUxMTAvBgNVBAUTKENBQUQ3NjVBNzMwNUJDMTUyNTRCMTVCMjVCNUJEMzlC
NjNBOEMzQUYwHhcNMjYwOTI1MDY0MDM1WhcNMjYxMDAyMDY0MDM1WjAYMRYwFAYD
VQQDEw02YWI2MTc2My00OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA305Vw/f4cnnEHLCNdW+2dYdTv5NOG/uQPjwJFV1+G+cSRZuMTf9sK+utaHrc
XofrxbQ+ecCG4OIPuoZFGkReHj6bQaK19qNoh+7SWlLzADnmpuQZR7+1fQa12Ba6
sat6ZHqkt4fiOY1oBFB6p4KuJZgkN1Jl0Jit1Za1UCIIwvmKt40tOQ8XmdIhn+ay
45dx7Nkkm9xf5esQP96RjFBvwkZCJ4+xPFid7oe9WFT2on4lFP6dksY1Db8faLLO
+9DJkL8Y4EZ7qbohNBoV+6ULm9JS056VxXiPihplmeS0r3ehCj0NOT9SR5k82LAK
fYdtak06dj4lIoA0KO8Tt3aGrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO69gvk0
3FRC+WxR9rDMVVq3E6v0MB8GA1UdIwQYMBaAFMqtdlpzBbwVJUsVsltb05tjqMOv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDgyRS84NTNGRDk1ODY2
RTIxMUYwQkVBQkU5M0VDNEY5QUUwMi95cTEyV25NRnZCVWxTeFd5VzF2VG0yT293
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lxMTJXbk1GdkJVbFN4V3lXMXZUbTJPb3c2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDgyRS84NTNGRDk1ODY2RTIxMUYwQkVBQkU5M0VDNEY5QUUwMi95cTEyV25NRnZC
VWxTeFd5VzF2VG0yT293NjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxjaQl5oFm/VYosuld79jUWlhpBM0xl+Xew/rdzqhaU0SmRdXrWrbVjEyvaBb
jCoXiUILYQuQWPTVpuC8Y4l+B5aHjKSCeS9Wa3dtvbZr30DoWdfG+GJfbAPf+vnT
sWEZGeSb+vCONHvXRuZlpeipYO9lHYfXkFKb4njCys5QNrAe86Fzvk4/jrbTVn9z
UxXoX4vcAVtzBjSBNRg3gg93bCkRrp7Wohjxdbklw3DCKi1YMvLo9azr0ovhTNaC
NKXIibiZk0oYroxkjIXCsY9oOPuEO10AUpTznTGD6jWhK0/m79kXmVvBdGJiLSRd
cTvRDTDQHaIzODbbI5WTeQMo4w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:27:25 2026 by rpki-client