Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
File:                     3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft (raw, json)
Hash identifier:          AsRBUmE+kKUJOFW0RZ5evwU1GQOs3xJ8ledywNhvXPI=
Subject key identifier:   A4:34:9B:11:85:D8:A5:5C:12:7A:D7:29:62:D6:02:03:04:1A:26:0A
Authority key identifier: DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB
Certificate issuer:       /CN=A91116D1/serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
Certificate serial:       0D17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
Manifest number:          0D0A
Signing time:             Tue 28 Jul 2026 18:26:06 +0000
Manifest this update:     Tue 28 Jul 2026 18:26:05 +0000
Manifest next update:     Tue 04 Aug 2026 18:26:05 +0000
Files and hashes:         1: 3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl (hash: M2rq5AHiFdItS9keL2KH4CveLQMEOH22tT+VDRVHOFg=)
                          2: AD532D26090211EAAD8D5786C4F9AE02.roa (hash: k9g8nzceHdPoOK0fhj6CfdrThrPXw9qWDxl/CdnKp0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl
                          rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 18:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3351 (0xd17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91116D1, serialNumber=DDEBA46CC7A892D2A7FF6AB64377C7ECFFD8ADBB
        Validity
            Not Before: Jul 28 18:26:05 2026 GMT
            Not After : Aug  4 18:26:05 2026 GMT
        Subject: CN=6a68f43e-6c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:3d:81:ae:ac:de:ad:6c:3d:80:1e:79:fc:
                    3d:09:e3:44:2c:2b:99:0f:e6:da:0f:09:0e:d5:3e:
                    a1:56:5f:c2:29:71:34:9d:87:ba:29:6f:39:83:21:
                    e7:91:66:a9:e6:34:e8:12:bf:72:3a:91:f0:f2:07:
                    f9:40:3c:72:b9:51:1c:1a:94:49:bb:b5:e6:a3:fe:
                    00:e2:d4:2f:c5:9f:d8:21:6b:cf:45:a3:69:a3:b3:
                    d1:d8:0c:ec:bc:55:a0:07:81:17:80:1b:e5:74:61:
                    a8:8a:79:92:91:40:e1:0b:0b:fb:dd:ad:1b:a7:f3:
                    b9:32:21:7d:4a:34:61:0c:f0:f3:b9:e6:dd:11:ea:
                    2b:03:b3:5b:52:2e:6e:92:21:7f:00:65:79:65:21:
                    5b:37:b3:7d:c3:6f:cf:8b:88:c2:95:f1:c2:8a:bb:
                    73:1d:6f:fe:42:3e:9d:5a:0e:82:aa:bc:15:01:3b:
                    5f:d3:76:8a:47:27:0e:3f:12:bf:ce:9d:69:df:66:
                    76:91:4b:98:29:4a:3a:67:af:e0:c6:f6:56:c6:87:
                    1b:b8:a1:2c:21:cd:ce:40:f3:36:4a:52:e1:eb:c5:
                    19:e6:32:a1:7d:65:49:85:6e:d3:7d:37:d6:b0:f1:
                    fe:39:bc:83:43:6e:65:e9:cf:f0:45:38:41:ee:26:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:9B:11:85:D8:A5:5C:12:7A:D7:29:62:D6:02:03:04:1A:26:0A
            X509v3 Authority Key Identifier:
                keyid:DD:EB:A4:6C:C7:A8:92:D2:A7:FF:6A:B6:43:77:C7:EC:FF:D8:AD:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3eukbMeoktKn_2q2Q3fH7P_Yrbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91116D1/15AE4B28090111EABD104C83C4F9AE02/3eukbMeoktKn_2q2Q3fH7P_Yrbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:00:cc:98:c5:4f:3b:ea:b6:6d:c1:40:de:66:41:12:84:
         a1:38:b6:c8:c6:bd:d2:75:4f:11:36:2b:e1:8d:97:a8:ea:cf:
         9b:62:03:00:30:a9:12:1a:8d:ca:d5:b8:e0:d6:0f:12:17:e9:
         92:b0:95:13:74:21:c0:d7:f2:69:68:ed:be:67:8b:ee:92:ee:
         63:4c:91:92:38:25:79:0d:dc:e7:9b:8d:76:cd:4f:21:09:1f:
         f7:47:dc:e4:65:c5:7f:ed:55:a0:89:e5:b4:dd:8c:d3:fc:3c:
         6b:65:ca:fb:77:d9:3a:0b:07:06:8d:27:18:2a:23:4e:3e:ff:
         17:82:d9:87:2f:7c:3f:db:51:3d:d1:d1:f4:a8:c2:0e:5d:9b:
         fb:58:3f:4c:bc:e1:13:3b:87:5e:21:0e:db:59:9f:4b:a3:5e:
         41:30:a5:96:c3:82:74:56:d1:1a:f4:5f:77:b0:b9:28:20:14:
         01:cb:d9:f8:81:15:e2:67:bb:e4:e4:0f:f2:fe:73:cf:82:a8:
         42:db:49:28:36:c3:1e:37:dc:cc:18:bb:ea:95:08:10:74:10:
         ce:e2:04:99:c2:9d:76:fe:93:cf:18:c0:76:75:40:f1:21:9a:
         92:6f:c9:77:a5:af:76:f3:ae:9f:23:7b:ea:e5:71:07:ba:92:
         08:4b:f3:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE2RDExMTAvBgNVBAUTKERERUJBNDZDQzdBODkyRDJBN0ZGNkFCNjQzNzdDN0VD
RkZEOEFEQkIwHhcNMjYwNzI4MTgyNjA1WhcNMjYwODA0MTgyNjA1WjAYMRYwFAYD
VQQDEw02YTY4ZjQzZS02YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydo9ga6s3q1sPYAeefw9CeNELCuZD+baDwkO1T6hVl/CKXE0nYe6KW85gyHn
kWap5jToEr9yOpHw8gf5QDxyuVEcGpRJu7Xmo/4A4tQvxZ/YIWvPRaNpo7PR2Azs
vFWgB4EXgBvldGGoinmSkUDhCwv73a0bp/O5MiF9SjRhDPDzuebdEeorA7NbUi5u
kiF/AGV5ZSFbN7N9w2/Pi4jClfHCirtzHW/+Qj6dWg6CqrwVATtf03aKRycOPxK/
zp1p32Z2kUuYKUo6Z6/gxvZWxocbuKEsIc3OQPM2SlLh68UZ5jKhfWVJhW7TfTfW
sPH+ObyDQ25l6c/wRThB7iZG+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKQ0mxGF
2KVcEnrXKWLWAgMEGiYKMB8GA1UdIwQYMBaAFN3rpGzHqJLSp/9qtkN3x+z/2K27
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTZEMS8xNUFFNEIyODA5
MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0S25fMnEyUTNmSDdQX1ly
YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNldWtiTWVva3RLbl8ycTJRM2ZIN1BfWXJicy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTZEMS8xNUFFNEIyODA5MDExMUVBQkQxMDRDODNDNEY5QUUwMi8zZXVrYk1lb2t0
S25fMnEyUTNmSDdQX1lyYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPCwAzJjFTzvqtm3BQN5mQRKEoTi2yMa90nVPETYr4Y2XqOrPm2IDADCpEhqN
ytW44NYPEhfpkrCVE3QhwNfyaWjtvmeL7pLuY0yRkjgleQ3c55uNds1PIQkf90fc
5GXFf+1VoInltN2M0/w8a2XK+3fZOgsHBo0nGCojTj7/F4LZhy98P9tRPdHR9KjC
Dl2b+1g/TLzhEzuHXiEO21mfS6NeQTCllsOCdFbRGvRfd7C5KCAUAcvZ+IEV4me7
5OQP8v5zz4KoQttJKDbDHjfczBi76pUIEHQQzuIEmcKddv6TzxjAdnVA8SGakm/J
d6WvdvOunyN76uVxB7qSCEvzSQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:33:54 2026 by rpki-client