Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
File:                     yy5uwVWepHY5RAtAqtdfleb9vF8.mft (raw, json)
Hash identifier:          f26WD/qM5uec8DuTfTg2Qh6eZuIgwZ/V53TtGoTwGXc=
Subject key identifier:   08:12:A4:14:25:2E:83:8C:35:92:75:08:70:81:CD:F4:0C:38:02:68
Authority key identifier: CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F
Certificate issuer:       /CN=A9127760/serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
Manifest number:          AE
Signing time:             Wed 29 Jul 2026 08:32:24 +0000
Manifest this update:     Wed 29 Jul 2026 08:32:23 +0000
Manifest next update:     Wed 05 Aug 2026 08:32:23 +0000
Files and hashes:         1: yy5uwVWepHY5RAtAqtdfleb9vF8.crl (hash: u405gJA9gWxZ6n9uvrS3OIcfQ7GrkCv/kg0s+VWGlSI=)
                          2: F9B1B1167E3F11F0B7941020C4F9AE02.roa (hash: 6ut+hJgutmu3/f4DHRIxmtYIF24wDhGZAw9tYwessYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl
                          rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 08:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127760, serialNumber=CB2E6EC1559EA47639440B40AAD75F95E6FDBC5F
        Validity
            Not Before: Jul 29 08:32:23 2026 GMT
            Not After : Aug  5 08:32:23 2026 GMT
        Subject: CN=6a69ba97-37ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:ea:e1:23:f6:22:f5:6d:31:6a:21:4c:c0:
                    8f:9a:74:a4:53:96:cf:a3:73:78:a8:d9:b6:e9:90:
                    ec:d1:e0:36:fd:d1:f2:55:94:fd:0e:b8:2f:0f:69:
                    22:65:23:5f:8e:6b:15:9b:d3:09:0d:37:eb:c7:a3:
                    dd:25:d9:73:22:e3:d0:0f:5e:35:ee:b1:c6:4f:1e:
                    80:39:ff:df:7b:1f:be:f4:f7:36:9b:6a:5d:2c:1d:
                    fe:d3:44:3f:50:1b:de:5a:73:10:d2:22:ec:22:63:
                    fa:06:fa:5d:ea:93:f0:8f:a6:24:b8:e7:a6:b3:39:
                    6a:e7:82:91:77:38:c5:49:df:c6:43:82:6d:bb:af:
                    cf:03:55:28:39:4e:1a:1a:50:9f:03:77:cc:21:48:
                    36:e3:e9:04:5c:ac:f0:03:81:c4:a4:69:f1:48:2b:
                    5f:4f:58:72:77:fb:c8:3d:c2:03:c0:41:30:e4:ec:
                    d9:61:03:1c:5b:4c:90:58:8d:d3:18:27:d9:52:ca:
                    06:ca:35:4c:b5:a6:b4:03:c6:15:ac:53:67:e2:03:
                    4b:2a:41:4d:9b:40:96:74:22:6a:b5:62:a8:69:b1:
                    3d:23:83:ad:e9:20:a9:53:7e:5a:e2:f9:93:a7:ff:
                    89:dc:09:05:c7:14:58:23:60:ee:16:64:ef:c1:05:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:A4:14:25:2E:83:8C:35:92:75:08:70:81:CD:F4:0C:38:02:68
            X509v3 Authority Key Identifier:
                keyid:CB:2E:6E:C1:55:9E:A4:76:39:44:0B:40:AA:D7:5F:95:E6:FD:BC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yy5uwVWepHY5RAtAqtdfleb9vF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127760/743D167E7E3F11F0AB089B1EC4F9AE02/yy5uwVWepHY5RAtAqtdfleb9vF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:36:7e:2e:16:57:ea:96:ca:8f:4c:96:5a:6f:da:78:cd:
         12:94:b4:75:c1:1f:db:c0:e1:ca:31:e8:82:6f:78:6d:1a:d0:
         d7:5d:91:4d:b3:2f:91:0f:e7:f8:7f:75:4f:bf:a4:76:34:07:
         2d:7b:9f:db:fe:ea:80:0d:f1:d6:e8:72:ae:73:a1:81:c8:d5:
         89:d7:2b:98:52:07:9b:9b:a9:88:12:8a:8d:b7:6d:d1:7d:67:
         a1:cb:98:9e:69:ae:36:90:13:b5:73:d3:1c:b0:60:d8:aa:3f:
         bb:33:18:10:a2:37:f1:e3:00:2c:3b:d1:90:86:22:e5:b0:aa:
         88:68:c8:5f:32:d1:c2:f9:3b:bd:ec:04:65:ea:91:5a:44:6a:
         53:48:91:2d:97:8a:41:7f:c3:0f:63:64:13:cb:44:7f:c0:71:
         c8:c5:00:68:9a:4b:a8:9b:bb:ed:1e:9b:c0:04:fd:01:4e:7b:
         8d:86:92:8d:bc:b9:75:62:99:a9:b2:b8:6e:df:ca:3a:f0:1f:
         69:62:62:e0:36:e3:17:b4:fd:eb:b9:6e:8d:52:73:d5:45:fc:
         6e:00:a9:42:55:4a:8a:17:47:0e:7b:86:c5:73:4d:ef:3b:c1:
         e8:e3:21:3d:c4:1b:1e:61:be:c3:58:fd:4c:91:d2:15:dd:18:
         03:c0:cc:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3NjAxMTAvBgNVBAUTKENCMkU2RUMxNTU5RUE0NzYzOTQ0MEI0MEFBRDc1Rjk1
RTZGREJDNUYwHhcNMjYwNzI5MDgzMjIzWhcNMjYwODA1MDgzMjIzWjAYMRYwFAYD
VQQDEw02YTY5YmE5Ny0zN2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxpzq4SP2IvVtMWohTMCPmnSkU5bPo3N4qNm26ZDs0eA2/dHyVZT9DrgvD2ki
ZSNfjmsVm9MJDTfrx6PdJdlzIuPQD1417rHGTx6AOf/fex++9Pc2m2pdLB3+00Q/
UBveWnMQ0iLsImP6Bvpd6pPwj6YkuOemszlq54KRdzjFSd/GQ4Jtu6/PA1UoOU4a
GlCfA3fMIUg24+kEXKzwA4HEpGnxSCtfT1hyd/vIPcIDwEEw5OzZYQMcW0yQWI3T
GCfZUsoGyjVMtaa0A8YVrFNn4gNLKkFNm0CWdCJqtWKoabE9I4Ot6SCpU35a4vmT
p/+J3AkFxxRYI2DuFmTvwQXmtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgSpBQl
LoOMNZJ1CHCBzfQMOAJoMB8GA1UdIwQYMBaAFMsubsFVnqR2OUQLQKrXX5Xm/bxf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzc2MC83NDNEMTY3RTdF
M0YxMUYwQUIwODlCMUVDNEY5QUUwMi95eTV1d1ZXZXBIWTVSQXRBcXRkZmxlYjl2
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3l5NXV3VldlcEhZNVJBdEFxdGRmbGViOXZGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Nzc2MC83NDNEMTY3RTdFM0YxMUYwQUIwODlCMUVDNEY5QUUwMi95eTV1d1ZXZXBI
WTVSQXRBcXRkZmxlYjl2RjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbRs2fi4WV+qWyo9Mllpv2njNEpS0dcEf28DhyjHogm94bRrQ112RTbMvkQ/n
+H91T7+kdjQHLXuf2/7qgA3x1uhyrnOhgcjVidcrmFIHm5upiBKKjbdt0X1nocuY
nmmuNpATtXPTHLBg2Ko/uzMYEKI38eMALDvRkIYi5bCqiGjIXzLRwvk7vewEZeqR
WkRqU0iRLZeKQX/DD2NkE8tEf8BxyMUAaJpLqJu77R6bwAT9AU57jYaSjby5dWKZ
qbK4bt/KOvAfaWJi4DbjF7T967lujVJz1UX8bgCpQlVKihdHDnuGxXNN7zvB6OMh
PcQbHmG+w1j9TJHSFd0YA8DMhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:03 2026 by rpki-client