Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
File:                     yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft (raw, json)
Hash identifier:          DBQWfr9u9A/s9plnGxhQe1d5kmn6Vzm4kLkw6xruSlA=
Subject key identifier:   65:0D:3B:C6:DD:4E:9E:BD:92:EC:2F:52:1D:C5:86:DE:D5:9F:5C:F1
Authority key identifier: C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD
Certificate issuer:       /CN=A9115A7C/serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
Manifest number:          22
Signing time:             Sun 11 Oct 2026 09:30:50 +0000
Manifest this update:     Sun 11 Oct 2026 09:30:49 +0000
Manifest next update:     Sun 18 Oct 2026 09:30:49 +0000
Files and hashes:         1: yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl (hash: 9xqyqWQ7g6bLX2YQp1fzH91OLDa454oywvE63xIud2k=)
                          2: 36E2673093A511F1A63A7D946011F970.roa (hash: YQjNMHo8sTM3LQcrU6VgB0vtk3GGCVQb//8/KSSTf30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl
                          rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115A7C, serialNumber=C85E16DD7B4975E35F6CB83AAF8F83F8A91B7ADD
        Validity
            Not Before: Oct 11 09:30:49 2026 GMT
            Not After : Oct 18 09:30:49 2026 GMT
        Subject: CN=6acb574a-6644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:39:0c:45:3b:6c:48:ce:15:c3:fe:32:3d:
                    e1:08:ae:b7:ec:55:49:11:6e:37:d3:9c:7b:b9:b3:
                    8f:99:c0:a4:30:0b:c5:c0:a4:bb:2c:b2:84:8d:82:
                    d2:5b:60:3b:18:97:13:f1:de:4a:2c:29:38:2e:f0:
                    5a:90:27:02:bb:a6:3c:29:c1:0d:bf:f5:04:20:7b:
                    fc:c8:a3:9f:b7:ed:23:98:b0:e2:b6:3a:9f:60:67:
                    3b:31:f9:af:dd:68:ca:22:46:c6:d9:da:31:42:37:
                    de:0d:66:01:98:f2:47:f0:da:0a:e5:b7:26:51:ca:
                    03:48:d8:04:af:8c:c0:59:c8:53:56:ee:48:b8:54:
                    37:6a:e5:3c:37:fd:38:76:d7:df:5b:6e:6a:be:70:
                    65:35:86:e0:a6:43:00:21:fd:93:33:8d:0f:0c:3d:
                    6a:86:e0:57:b1:e7:73:60:3a:0b:49:ca:97:c6:ba:
                    16:18:1f:f7:25:c3:2e:15:c4:f3:8f:57:51:95:36:
                    9d:af:d6:db:8f:87:38:b5:2c:63:6e:37:0d:1c:bf:
                    02:c0:b5:36:f2:52:bb:f0:dc:07:49:85:41:e9:26:
                    ee:fe:d2:52:a8:44:bd:4f:e6:d6:da:0f:d7:38:3b:
                    5c:9a:c5:07:38:0d:fc:2a:4c:96:2b:f4:66:5e:3a:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:3B:C6:DD:4E:9E:BD:92:EC:2F:52:1D:C5:86:DE:D5:9F:5C:F1
            X509v3 Authority Key Identifier:
                keyid:C8:5E:16:DD:7B:49:75:E3:5F:6C:B8:3A:AF:8F:83:F8:A9:1B:7A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yF4W3XtJdeNfbLg6r4-D-Kkbet0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A7C/3E0FE43E93A411F1A87082466011F970/yF4W3XtJdeNfbLg6r4-D-Kkbet0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:5e:23:5e:4a:78:12:ee:10:85:d8:44:8f:73:7b:33:ed:
         8b:ae:c4:bc:dc:8d:5f:ab:eb:43:61:c4:74:3a:e6:f7:3d:1f:
         5a:f6:0d:86:1c:71:b5:45:e2:95:a5:f1:d9:1b:45:8e:d6:8c:
         28:13:2e:c1:a9:c2:60:74:ca:b8:be:6b:52:14:c4:69:09:8b:
         f6:7b:d5:a3:aa:40:35:ac:71:c9:f8:fb:c0:12:55:cb:82:c8:
         e1:3b:eb:41:59:95:62:46:b9:5e:c9:7b:b5:16:c7:93:18:95:
         54:f4:65:22:cd:68:ab:d8:2a:e4:91:cc:26:dd:57:9e:0d:5e:
         3b:1f:dc:df:9b:7b:81:8a:fa:7b:b7:88:f1:fe:a2:2e:c8:91:
         26:d1:c3:03:fe:a2:46:ba:bc:40:a3:37:a7:de:01:13:15:4b:
         06:04:4c:a0:22:55:a8:1b:94:cc:9a:10:1c:b1:af:f9:a1:81:
         89:1f:49:7b:b3:00:a3:71:e0:24:70:78:b3:94:3b:5e:c1:9c:
         7b:87:77:29:e0:d7:0a:22:bc:ab:87:d4:cf:f4:e7:5e:7f:5a:
         27:b3:fc:85:fc:2a:3a:56:cf:5c:ed:97:53:d4:98:c9:8a:82:
         8a:cf:17:55:13:ac:bf:3b:55:75:3b:c0:8f:95:74:04:a1:9e:
         0f:9e:9d:43
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NUE3QzExMC8GA1UEBRMoQzg1RTE2REQ3QjQ5NzVFMzVGNkNCODNBQUY4RjgzRjhB
OTFCN0FERDAeFw0yNjEwMTEwOTMwNDlaFw0yNjEwMTgwOTMwNDlaMBgxFjAUBgNV
BAMTDTZhY2I1NzRhLTY2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCx7zkMRTtsSM4Vw/4yPeEIrrfsVUkRbjfTnHu5s4+ZwKQwC8XApLsssoSNgtJb
YDsYlxPx3kosKTgu8FqQJwK7pjwpwQ2/9QQge/zIo5+37SOYsOK2Op9gZzsx+a/d
aMoiRsbZ2jFCN94NZgGY8kfw2grltyZRygNI2ASvjMBZyFNW7ki4VDdq5Tw3/Th2
199bbmq+cGU1huCmQwAh/ZMzjQ8MPWqG4Fex53NgOgtJypfGuhYYH/clwy4VxPOP
V1GVNp2v1tuPhzi1LGNuNw0cvwLAtTbyUrvw3AdJhUHpJu7+0lKoRL1P5tbaD9c4
O1yaxQc4DfwqTJYr9GZeOgWrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZQ07xt1O
nr2S7C9SHcWG3tWfXPEwHwYDVR0jBBgwFoAUyF4W3XtJdeNfbLg6r4+D+Kkbet0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1QTdDLzNFMEZFNDNFOTNB
NDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVOZmJMZzZyNC1ELUtrYmV0
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveUY0VzNYdEpkZU5mYkxnNnI0LUQtS2tiZXQwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE1
QTdDLzNFMEZFNDNFOTNBNDExRjFBODcwODI0NjYwMTFGOTcwL3lGNFczWHRKZGVO
ZmJMZzZyNC1ELUtrYmV0MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBJbF4jXkp4Eu4QhdhEj3N7M+2LrsS83I1fq+tDYcR0Oub3PR9a9g2GHHG1ReKV
pfHZG0WO1owoEy7BqcJgdMq4vmtSFMRpCYv2e9WjqkA1rHHJ+PvAElXLgsjhO+tB
WZViRrleyXu1FseTGJVU9GUizWir2Crkkcwm3VeeDV47H9zfm3uBivp7t4jx/qIu
yJEm0cMD/qJGurxAozen3gETFUsGBEygIlWoG5TMmhAcsa/5oYGJH0l7swCjceAk
cHizlDtewZx7h3cp4NcKIryrh9TP9Odef1ons/yF/Co6Vs9c7ZdT1JjJioKKzxdV
E6y/O1V1O8CPlXQEoZ4Pnp1D
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:18:36 2026 by rpki-client