Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
File:                     Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft (raw, json)
Hash identifier:          k0oJ6U8Cjxz7dkNWZdpagP9262IBgSGpjrT4Bh964U4=
Subject key identifier:   45:A2:BD:61:33:7D:D9:2F:5A:5E:DA:B4:C9:B2:E1:A6:CB:1F:37:A8
Authority key identifier: 63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81
Certificate issuer:       /CN=A9118689/serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
Manifest number:          0208
Signing time:             Mon 09 Nov 2026 03:16:39 +0000
Manifest this update:     Mon 09 Nov 2026 03:16:39 +0000
Manifest next update:     Mon 16 Nov 2026 03:16:39 +0000
Files and hashes:         1: Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl (hash: i8CYAWJJrzju8ISY9c/1dIPfdiVyQRkoO3naSCakgwE=)
                          2: D1D880A6C4FB11EEA30ECF34C4F9AE02.roa (hash: qZdiY9Mr/5cER7iRPRBr2BsvNje9tW14fGs3qoncJSY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl
                          rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 03:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118689, serialNumber=63FC2F5DE094C8396DC8BC9744ED682FF4B23881
        Validity
            Not Before: Nov  9 03:16:39 2026 GMT
            Not After : Nov 16 03:16:39 2026 GMT
        Subject: CN=6af13b17-35ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d4:f9:c9:8f:5d:e9:08:c3:b5:16:03:ec:ca:
                    a4:47:48:62:50:a5:82:8e:14:e5:ff:98:27:5c:50:
                    67:f2:38:54:d4:73:b4:84:83:95:8a:8b:a3:57:55:
                    32:1d:ab:55:15:0b:51:b7:5b:9f:08:2b:11:00:5b:
                    28:c7:ab:da:7b:96:bf:e8:1e:08:fb:11:6e:5c:f0:
                    d8:43:11:d2:75:3e:9b:ec:28:bd:b2:9e:32:52:d1:
                    6a:c3:87:c3:11:78:68:b7:47:2b:17:c1:7c:d9:ba:
                    22:2f:8f:b5:8e:4d:1f:1a:d2:1e:43:d8:66:d9:72:
                    39:88:5f:52:bb:71:85:7c:c6:3e:80:25:cb:82:ea:
                    2b:cb:8e:72:32:5f:e8:70:fb:35:d2:2b:02:12:31:
                    76:f1:52:5e:ff:0a:5a:d9:d5:0b:01:24:e3:81:61:
                    c9:8a:70:2b:88:18:19:3d:35:86:3d:0c:35:cf:b5:
                    1e:2d:a8:83:34:73:ef:d3:4f:4d:b5:d2:b4:23:a0:
                    92:63:09:5a:9f:f5:cf:c3:f2:92:36:5c:22:88:59:
                    b2:cb:67:7a:77:5f:5a:fe:40:bd:ea:39:50:84:2b:
                    c7:b7:e9:c3:ab:89:c6:0f:5a:2c:09:ae:33:66:eb:
                    67:91:64:21:b1:6f:b4:a8:82:ef:76:c7:87:e5:0e:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:BD:61:33:7D:D9:2F:5A:5E:DA:B4:C9:B2:E1:A6:CB:1F:37:A8
            X509v3 Authority Key Identifier:
                keyid:63:FC:2F:5D:E0:94:C8:39:6D:C8:BC:97:44:ED:68:2F:F4:B2:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_wvXeCUyDltyLyXRO1oL_SyOIE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118689/515ECB32C4A711EE875D082CC4F9AE02/Y_wvXeCUyDltyLyXRO1oL_SyOIE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:d0:a1:45:bb:c2:a8:5e:9c:d8:e0:2c:b0:7a:c4:b1:15:
         a3:03:51:f6:81:43:ae:24:c9:00:fb:be:3e:87:b5:da:28:99:
         0d:92:35:82:54:c4:be:b1:fd:2e:e4:0c:af:ff:ae:28:f1:7c:
         ac:8b:63:4d:94:1d:8e:a9:2e:47:f5:89:dc:cb:ee:23:d5:b5:
         2f:65:af:05:74:eb:db:3f:f3:af:13:1b:ee:e7:a3:c0:9a:3e:
         7c:3a:2a:6b:52:59:94:ae:79:cd:4a:29:a6:bc:75:20:f2:73:
         11:0b:fb:21:b5:c1:d6:7e:3f:bb:3c:9f:44:9f:05:24:66:ad:
         d0:69:6e:a8:ef:66:ec:c2:5f:39:5f:6b:69:55:2b:d2:50:2f:
         8e:a2:4a:de:db:3c:aa:96:af:a1:df:a5:6f:ca:ad:3d:27:ae:
         71:03:9b:34:ae:76:65:c2:fa:eb:6d:bf:fe:cb:31:72:53:64:
         e3:56:4a:68:13:de:07:7d:8e:13:d7:ec:a7:b0:ac:c4:9c:ff:
         88:a4:5a:e9:90:ba:b7:47:8d:6a:2b:04:09:9b:e4:d8:b8:cd:
         07:f4:80:42:3b:be:b9:52:50:56:7d:c9:db:07:7d:07:b9:ef:
         1e:fb:29:9c:47:58:d2:b3:6f:4e:f9:fd:5a:ef:7a:75:ce:ad:
         37:20:f7:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg2ODkxMTAvBgNVBAUTKDYzRkMyRjVERTA5NEM4Mzk2REM4QkM5NzQ0RUQ2ODJG
RjRCMjM4ODEwHhcNMjYxMTA5MDMxNjM5WhcNMjYxMTE2MDMxNjM5WjAYMRYwFAYD
VQQDEw02YWYxM2IxNy0zNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn9T5yY9d6QjDtRYD7MqkR0hiUKWCjhTl/5gnXFBn8jhU1HO0hIOVioujV1Uy
HatVFQtRt1ufCCsRAFsox6vae5a/6B4I+xFuXPDYQxHSdT6b7Ci9sp4yUtFqw4fD
EXhot0crF8F82boiL4+1jk0fGtIeQ9hm2XI5iF9Su3GFfMY+gCXLguory45yMl/o
cPs10isCEjF28VJe/wpa2dULASTjgWHJinAriBgZPTWGPQw1z7UeLaiDNHPv009N
tdK0I6CSYwlan/XPw/KSNlwiiFmyy2d6d19a/kC96jlQhCvHt+nDq4nGD1osCa4z
ZutnkWQhsW+0qILvdseH5Q7owQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEWivWEz
fdkvWl7atMmy4abLHzeoMB8GA1UdIwQYMBaAFGP8L13glMg5bci8l0TtaC/0sjiB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODY4OS81MTVFQ0IzMkM0
QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlEbHR5THlYUk8xb0xfU3lP
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lfd3ZYZUNVeURsdHlMeVhSTzFvTF9TeU9JRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODY4OS81MTVFQ0IzMkM0QTcxMUVFODc1RDA4MkNDNEY5QUUwMi9ZX3d2WGVDVXlE
bHR5THlYUk8xb0xfU3lPSUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKtfQoUW7wqhenNjgLLB6xLEVowNR9oFDriTJAPu+Poe12iiZDZI1glTEvrH9
LuQMr/+uKPF8rItjTZQdjqkuR/WJ3MvuI9W1L2WvBXTr2z/zrxMb7uejwJo+fDoq
a1JZlK55zUopprx1IPJzEQv7IbXB1n4/uzyfRJ8FJGat0GluqO9m7MJfOV9raVUr
0lAvjqJK3ts8qpavod+lb8qtPSeucQObNK52ZcL6622//ssxclNk41ZKaBPeB32O
E9fsp7CsxJz/iKRa6ZC6t0eNaisECZvk2LjNB/SAQju+uVJQVn3J2wd9B7nvHvsp
nEdY0rNvTvn9Wu96dc6tNyD33Q==
-----END CERTIFICATE-----
Generated at Tue Nov 10 19:34:39 2026 by rpki-client