Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
File:                     YBC8xly5zPAs9-0p7HXk1iK98_A.mft (raw, json)
Hash identifier:          3Fnxpb33jSfJ1l1WhYIBSqWIluDxrRz+TZ47Vl9m3Tk=
Subject key identifier:   67:4D:92:58:87:51:1B:DE:CB:56:A3:CC:A5:8C:5A:D0:C9:72:B5:22
Authority key identifier: 60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0
Certificate issuer:       /CN=A9144F45/serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
Certificate serial:       05C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
Manifest number:          05AC
Signing time:             Mon 12 Oct 2026 23:22:07 +0000
Manifest this update:     Mon 12 Oct 2026 23:22:06 +0000
Manifest next update:     Mon 19 Oct 2026 23:22:06 +0000
Files and hashes:         1: YBC8xly5zPAs9-0p7HXk1iK98_A.crl (hash: T5fVMpMuXCgyTww8Jcc/+tbDoV9R6CJzOwPiCfXBiOY=)
                          2: A5465844546711F18E89C651B3833773.roa (hash: gMXHJxaR0nvtlkJPCuRN1IgaESwrx+pWszPBkIn6wyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl
                          rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 23:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476 (0x5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F45, serialNumber=6010BCC65CB9CCF02CF7ED29EC75E4D622BDF3F0
        Validity
            Not Before: Oct 12 23:22:06 2026 GMT
            Not After : Oct 19 23:22:06 2026 GMT
        Subject: CN=6acd6b9f-5f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:68:50:d5:b2:cf:52:73:7a:1d:e7:cc:61:80:
                    71:20:3c:92:87:cc:a4:fd:f8:24:d8:40:0f:22:0f:
                    65:9e:4e:8e:d1:32:22:ce:ef:22:55:56:9e:c6:f0:
                    22:20:55:08:4c:a9:3b:a4:78:20:b1:f9:2f:d3:a1:
                    f3:06:37:72:a5:76:65:8e:18:c4:e1:f6:ff:c2:c8:
                    9a:82:ab:fc:78:f1:e5:ba:4e:43:5e:51:a1:0e:78:
                    bb:6e:cc:64:be:cd:96:c9:f5:ce:bc:fc:f5:a4:e7:
                    70:78:bf:9a:db:6c:ef:c3:5c:5d:f2:ff:d7:43:1d:
                    08:31:b0:3f:89:5c:53:0f:87:bf:7e:90:21:1d:bf:
                    e8:ce:06:90:df:54:71:b6:02:b0:83:70:df:ec:84:
                    8f:fd:91:13:46:78:a4:b3:02:75:22:8c:38:d3:27:
                    6a:53:60:bc:b6:ee:d3:77:69:6c:f6:58:77:c7:e1:
                    ef:5b:55:aa:e1:03:3d:ec:37:96:30:a1:67:9f:5a:
                    0a:62:f4:b5:04:49:1e:87:a0:b1:c1:29:8b:77:89:
                    bf:16:fe:4c:27:c9:41:22:9e:59:27:2e:a5:f2:3e:
                    73:d0:17:7b:d4:8b:9e:d1:7c:0c:14:34:48:c3:cc:
                    3e:72:94:c7:b6:d6:8d:ec:32:fd:d2:7f:95:39:0b:
                    ff:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:92:58:87:51:1B:DE:CB:56:A3:CC:A5:8C:5A:D0:C9:72:B5:22
            X509v3 Authority Key Identifier:
                keyid:60:10:BC:C6:5C:B9:CC:F0:2C:F7:ED:29:EC:75:E4:D6:22:BD:F3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YBC8xly5zPAs9-0p7HXk1iK98_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F45/D76FF044397011EC9B65BA16C4F9AE02/YBC8xly5zPAs9-0p7HXk1iK98_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1c:de:85:49:fa:a9:aa:e3:1a:3e:2b:ed:09:18:79:bf:18:
         3e:3e:35:c9:b2:b2:5f:d9:7a:6b:7b:dd:5e:03:81:33:71:52:
         4d:8c:05:97:f4:9d:98:3f:ad:25:15:a0:83:ee:c4:06:37:24:
         b9:29:08:b3:39:b0:6e:2c:be:c5:fd:10:89:ee:5b:85:76:6a:
         a5:04:71:f2:ac:35:42:d0:97:f0:1f:54:a1:9d:cb:ec:24:2a:
         a0:3f:fe:04:1f:da:53:e8:86:14:1a:cb:11:af:94:0a:03:93:
         85:58:44:05:86:0e:ec:cd:e6:0b:b6:3d:4c:c5:dc:16:1c:af:
         8d:2e:27:31:89:7d:38:8e:39:55:7c:70:85:c9:80:8f:92:8d:
         e2:e6:80:b1:8e:cb:ec:59:15:64:cc:79:06:d4:4b:c9:6e:e7:
         4f:67:e9:c3:0e:42:07:87:2e:10:10:80:e6:fe:d6:d1:74:65:
         ef:99:2c:4f:34:8a:9d:e9:f3:e7:b6:a8:09:d8:a2:09:54:25:
         1b:5f:8f:a7:bd:f4:ca:75:fb:b1:61:76:28:b6:7c:e2:71:f7:
         89:3f:dd:b4:c0:d1:ce:91:ff:37:83:ef:35:5c:17:c1:f9:b9:
         91:bc:4d:a4:d7:d7:5f:96:a1:12:94:fc:d7:a9:e1:50:44:e5:
         2a:81:12:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRGNDUxMTAvBgNVBAUTKDYwMTBCQ0M2NUNCOUNDRjAyQ0Y3RUQyOUVDNzVFNEQ2
MjJCREYzRjAwHhcNMjYxMDEyMjMyMjA2WhcNMjYxMDE5MjMyMjA2WjAYMRYwFAYD
VQQDEw02YWNkNmI5Zi01ZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWhQ1bLPUnN6HefMYYBxIDySh8yk/fgk2EAPIg9lnk6O0TIizu8iVVaexvAi
IFUITKk7pHggsfkv06HzBjdypXZljhjE4fb/wsiagqv8ePHluk5DXlGhDni7bsxk
vs2WyfXOvPz1pOdweL+a22zvw1xd8v/XQx0IMbA/iVxTD4e/fpAhHb/ozgaQ31Rx
tgKwg3Df7ISP/ZETRnikswJ1Iow40ydqU2C8tu7Td2ls9lh3x+HvW1Wq4QM97DeW
MKFnn1oKYvS1BEkeh6CxwSmLd4m/Fv5MJ8lBIp5ZJy6l8j5z0Bd71Iue0XwMFDRI
w8w+cpTHttaN7DL90n+VOQv/GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdNkliH
URvey1ajzKWMWtDJcrUiMB8GA1UdIwQYMBaAFGAQvMZcuczwLPftKex15NYivfPw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY0NS9ENzZGRjA0NDM5
NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQQXM5LTBwN0hYazFpSzk4
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lCQzh4bHk1elBBczktMHA3SFhrMWlLOThfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NEY0NS9ENzZGRjA0NDM5NzAxMUVDOUI2NUJBMTZDNEY5QUUwMi9ZQkM4eGx5NXpQ
QXM5LTBwN0hYazFpSzk4X0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvhzehUn6qarjGj4r7QkYeb8YPj41ybKyX9l6a3vdXgOBM3FSTYwFl/SdmD+t
JRWgg+7EBjckuSkIszmwbiy+xf0Qie5bhXZqpQRx8qw1QtCX8B9UoZ3L7CQqoD/+
BB/aU+iGFBrLEa+UCgOThVhEBYYO7M3mC7Y9TMXcFhyvjS4nMYl9OI45VXxwhcmA
j5KN4uaAsY7L7FkVZMx5BtRLyW7nT2fpww5CB4cuEBCA5v7W0XRl75ksTzSKnenz
57aoCdiiCVQlG1+Pp730ynX7sWF2KLZ84nH3iT/dtMDRzpH/N4PvNVwXwfm5kbxN
pNfXX5ahEpT816nhUETlKoEShw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:37:55 2026 by rpki-client