Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File:                     BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier:          Y3PkO2znq2p/TPZjPtwpiHJUGsM4C1lov/rl3ZkTk5s=
Subject key identifier:   50:24:D0:14:CD:4F:1F:29:8D:44:68:4F:84:31:BF:57:A6:4D:EB:4A
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number:          F2
Signing time:             Mon 21 Sep 2026 06:23:28 +0000
Manifest this update:     Mon 21 Sep 2026 06:23:28 +0000
Manifest next update:     Mon 28 Sep 2026 06:23:28 +0000
Files and hashes:         1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: YXY32sF3AwYjVg5nDVJCk8ut3vW36vdZ7SzTiiNMnoM=)
                          2: E4A2EB14869F11F1A80CEA8D6FA30FBC.roa (hash: wlceanp773MrpLK0sTWpr1n6WrJhb6I7XoRfHGDFg10=)
                          3: 9F9EF74086A111F18D87851971A30FBC.roa (hash: qeRptk8ohukeooW32zLh4Y06AUp3e5YLRKi35Dg+s9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:23:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Sep 21 06:23:28 2026 GMT
            Not After : Sep 28 06:23:28 2026 GMT
        Subject: CN=6ab0cd60-166b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:ab:ea:f3:73:d8:bf:df:90:9d:90:4e:e9:
                    37:8b:49:cb:19:3b:2f:19:6e:d5:8b:60:34:ef:7d:
                    01:25:fe:7e:35:e9:9d:d4:c3:bb:15:ff:e5:02:64:
                    1b:71:2f:3b:fc:9a:08:9e:b0:1a:3c:8b:f6:43:ca:
                    c5:f0:ed:69:f6:0a:db:78:86:e7:20:35:b4:3c:88:
                    7e:e9:c2:15:3f:8d:b2:d5:93:31:1f:1a:e1:e9:63:
                    ec:61:7b:50:fc:7b:c9:c4:b1:26:d3:9d:f8:d5:18:
                    c6:87:11:03:47:84:f0:92:10:98:2a:a8:9a:c3:c0:
                    d6:a7:79:72:96:25:25:f1:8d:94:e2:51:3c:a7:3f:
                    49:61:f8:1f:6c:ad:f4:43:74:11:09:26:b9:03:86:
                    5e:4c:0f:6e:30:c2:17:aa:d4:f8:14:f4:8c:5e:ba:
                    1e:33:05:57:a3:55:f7:67:d9:38:47:92:1c:d0:11:
                    bc:1c:c4:00:37:1d:07:52:72:8a:7e:ce:82:02:f1:
                    c6:4e:b3:00:f8:b2:14:f7:92:cd:f7:7d:0a:11:e4:
                    a2:12:28:01:f9:e5:69:a1:52:d6:46:ad:0d:27:91:
                    bc:54:ad:17:7d:ff:bb:2f:3a:de:d7:35:a3:71:08:
                    b8:dc:32:66:e6:a3:e2:5e:f7:1a:70:46:21:05:96:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:24:D0:14:CD:4F:1F:29:8D:44:68:4F:84:31:BF:57:A6:4D:EB:4A
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c0:2e:e9:15:07:55:d3:37:7a:aa:cc:1b:1c:1c:e6:21:e4:
         9d:99:03:50:40:a2:17:44:90:59:e1:fe:43:0d:b3:16:e0:dd:
         49:1e:90:6f:a8:db:73:7a:12:db:48:9b:7b:a0:83:98:71:b3:
         5d:e0:c2:1f:a7:9f:72:73:81:ad:e8:b4:00:b1:b9:56:04:b7:
         e0:aa:f0:f2:cb:ec:75:8b:28:da:de:b6:fa:df:37:f7:06:7d:
         b7:6c:58:19:af:c8:59:f1:ed:5e:f9:d2:af:eb:38:58:cf:db:
         68:12:4d:22:08:1c:4e:f3:22:1c:0f:02:45:98:39:3d:02:86:
         3d:52:2d:8e:43:34:71:e9:16:f8:c1:18:02:33:84:9e:c5:10:
         7c:17:18:3c:fb:76:2c:45:70:90:7d:f7:f4:a5:23:c6:5b:61:
         39:68:8f:d5:5c:a3:76:52:06:33:97:f8:18:2c:1c:4f:71:d9:
         0f:71:ae:bc:ef:55:75:08:ed:23:fe:99:02:f3:00:50:ae:02:
         d3:7e:25:ad:e4:0d:34:21:6e:de:df:5c:44:e5:8d:7a:57:50:
         97:bb:10:f5:04:c6:55:37:9b:89:04:53:d0:65:6b:79:1e:88:
         d0:e2:b4:f2:bc:e1:6d:ea:c0:a6:65:48:3a:59:9d:04:8d:06:
         cd:16:c3:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg5RTcxMTAvBgNVBAUTKDA1ODk3RTczNUUzNEU4RjY1ODc1NTRBOUFGMzczNDA4
MkNFMjg5RDkwHhcNMjYwOTIxMDYyMzI4WhcNMjYwOTI4MDYyMzI4WjAYMRYwFAYD
VQQDEw02YWIwY2Q2MC0xNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh4Or6vNz2L/fkJ2QTuk3i0nLGTsvGW7Vi2A0730BJf5+Nemd1MO7Ff/lAmQb
cS87/JoInrAaPIv2Q8rF8O1p9grbeIbnIDW0PIh+6cIVP42y1ZMxHxrh6WPsYXtQ
/HvJxLEm05341RjGhxEDR4TwkhCYKqiaw8DWp3lyliUl8Y2U4lE8pz9JYfgfbK30
Q3QRCSa5A4ZeTA9uMMIXqtT4FPSMXroeMwVXo1X3Z9k4R5Ic0BG8HMQANx0HUnKK
fs6CAvHGTrMA+LIU95LN930KEeSiEigB+eVpoVLWRq0NJ5G8VK0Xff+7Lzre1zWj
cQi43DJm5qPiXvcacEYhBZaL7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFAk0BTN
Tx8pjURoT4Qxv1emTetKMB8GA1UdIwQYMBaAFAWJfnNeNOj2WHVUqa83NAgs4onZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODlFNy85OUQyOEM5QzRD
MDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQWllkVlNwcnpjMENDemlp
ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlkay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODlFNy85OUQyOEM5QzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi9CWWwtYzE0MDZQ
WllkVlNwcnpjMENDemlpZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIsAu6RUHVdM3eqrMGxwc5iHknZkDUECiF0SQWeH+Qw2zFuDdSR6Qb6jbc3oS
20ibe6CDmHGzXeDCH6efcnOBrei0ALG5VgS34Krw8svsdYso2t62+t839wZ9t2xY
Ga/IWfHtXvnSr+s4WM/baBJNIggcTvMiHA8CRZg5PQKGPVItjkM0cekW+MEYAjOE
nsUQfBcYPPt2LEVwkH339KUjxlthOWiP1VyjdlIGM5f4GCwcT3HZD3GuvO9VdQjt
I/6ZAvMAUK4C034lreQNNCFu3t9cROWNeldQl7sQ9QTGVTebiQRT0GVreR6I0OK0
8rzhberApmVIOlmdBI0GzRbDfA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:18:23 2026 by rpki-client