Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
File:                     YmmU0Zdivg-YhPpO8NymbD9TAqg.mft (raw, json)
Hash identifier:          sqyiLcxSooyPehXc42h0aE9ns1f9ba4guHDDt+ziT5I=
Subject key identifier:   CF:E0:85:FC:07:9C:71:32:B0:A6:03:7D:53:B1:0B:1A:6D:48:44:F2
Authority key identifier: 62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8
Certificate issuer:       /CN=A9157E6E/serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
Certificate serial:       1C7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
Manifest number:          1C64
Signing time:             Mon 12 Oct 2026 16:14:57 +0000
Manifest this update:     Mon 12 Oct 2026 16:14:57 +0000
Manifest next update:     Mon 19 Oct 2026 16:14:57 +0000
Files and hashes:         1: YmmU0Zdivg-YhPpO8NymbD9TAqg.crl (hash: 8qD4Y54tGmW3JW4UHtSXvs6ETwjaNZZ+mMHhTaksY18=)
                          2: B8F865A2147B11E7B5BEC457C4F9AE02.roa (hash: L7DWBL32H6f/RwujbTDFVJWqhVPyJvTq/sa1OY01Oko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl
                          rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 16:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7294 (0x1c7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157E6E, serialNumber=626994D19762BE0F9884FA4EF0DCA66C3F5302A8
        Validity
            Not Before: Oct 12 16:14:57 2026 GMT
            Not After : Oct 19 16:14:57 2026 GMT
        Subject: CN=6acd0781-3622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1f:14:fa:4a:02:ef:db:93:48:84:1d:3f:5d:
                    46:c7:de:32:a4:0a:d4:a1:7d:3c:96:df:5d:82:53:
                    29:ae:73:09:5e:af:71:1d:37:8e:39:03:c1:6a:f3:
                    aa:5f:76:8e:94:60:f1:d5:ae:09:43:98:28:60:56:
                    0a:ee:37:a5:85:20:a1:b8:e4:c4:db:7f:6e:3b:3e:
                    10:06:da:6c:1c:0a:2c:6d:aa:c2:b8:fa:00:5e:50:
                    10:0c:44:66:16:87:aa:54:37:4c:e0:6e:4a:5d:c5:
                    a2:ad:0d:c3:52:cf:ee:45:1f:75:3c:0d:09:0b:df:
                    7c:06:fe:52:aa:10:e4:e9:90:bd:30:cb:e8:52:1f:
                    5b:b1:a2:8f:c4:6f:83:45:6e:23:79:92:1a:66:b0:
                    da:a2:ec:2d:bc:a4:6a:72:e4:e4:2c:e8:e1:95:ff:
                    25:84:e3:c9:a9:63:f2:cc:04:e3:53:50:64:97:19:
                    15:cf:32:c8:db:34:f1:24:be:91:58:7c:43:e4:45:
                    0d:b2:ca:bd:54:1d:42:3b:f5:0a:18:b5:76:43:d6:
                    6f:7c:e7:8d:18:f8:f6:70:0f:92:c4:8a:4e:cd:30:
                    2d:62:68:bb:a8:2b:66:74:f6:1a:cb:e3:39:59:e1:
                    a1:c5:20:0d:d5:b1:d9:09:31:8f:c7:a3:af:81:af:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E0:85:FC:07:9C:71:32:B0:A6:03:7D:53:B1:0B:1A:6D:48:44:F2
            X509v3 Authority Key Identifier:
                keyid:62:69:94:D1:97:62:BE:0F:98:84:FA:4E:F0:DC:A6:6C:3F:53:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmmU0Zdivg-YhPpO8NymbD9TAqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E6E/830C69700DEB11E79771B666C4F9AE02/YmmU0Zdivg-YhPpO8NymbD9TAqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:29:aa:29:b7:a1:57:c5:67:c3:b1:de:04:42:35:e0:24:
         ba:9a:72:64:9d:d0:be:ae:04:39:fb:93:a3:17:74:2c:d0:95:
         f4:7c:25:61:15:c7:4e:4d:f6:8b:0c:7b:86:41:da:3e:9c:4f:
         7d:ea:0d:1a:5a:c5:09:9c:9c:a1:94:38:61:d0:79:5a:86:88:
         e5:91:77:cb:de:a8:bb:10:62:56:2b:fd:f7:e1:83:e0:43:8e:
         ad:a1:51:c8:25:86:fb:46:ee:32:4f:bf:e7:ca:56:5f:ac:fe:
         5d:68:0b:ee:ba:66:78:b4:92:00:fe:ff:2b:1d:1f:25:c6:f1:
         37:35:0b:4a:8b:ee:85:71:a8:16:f6:46:2b:04:12:83:64:15:
         9b:45:c5:55:be:3a:bb:66:f6:f0:c9:54:15:94:90:54:a5:90:
         63:cf:bd:a3:b9:35:2c:f4:07:16:07:d5:52:c0:5b:db:d6:aa:
         52:85:75:4b:02:ab:4f:f7:74:3b:66:de:3f:73:b2:d1:a1:9f:
         1a:32:95:a1:fb:7a:d3:23:c2:a3:42:0e:53:80:8b:e5:ae:e7:
         08:0f:16:05:0a:25:ce:b4:c2:f7:ae:12:12:f4:e4:66:10:11:
         66:6b:29:18:9f:db:88:fd:19:52:f0:60:3c:83:a0:b3:12:d9:
         68:56:d9:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdFNkUxMTAvBgNVBAUTKDYyNjk5NEQxOTc2MkJFMEY5ODg0RkE0RUYwRENBNjZD
M0Y1MzAyQTgwHhcNMjYxMDEyMTYxNDU3WhcNMjYxMDE5MTYxNDU3WjAYMRYwFAYD
VQQDEw02YWNkMDc4MS0zNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0x8U+koC79uTSIQdP11Gx94ypArUoX08lt9dglMprnMJXq9xHTeOOQPBavOq
X3aOlGDx1a4JQ5goYFYK7jelhSChuOTE239uOz4QBtpsHAosbarCuPoAXlAQDERm
FoeqVDdM4G5KXcWirQ3DUs/uRR91PA0JC998Bv5SqhDk6ZC9MMvoUh9bsaKPxG+D
RW4jeZIaZrDaouwtvKRqcuTkLOjhlf8lhOPJqWPyzATjU1BklxkVzzLI2zTxJL6R
WHxD5EUNssq9VB1CO/UKGLV2Q9ZvfOeNGPj2cA+SxIpOzTAtYmi7qCtmdPYay+M5
WeGhxSAN1bHZCTGPx6Ovga9mnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/ghfwH
nHEysKYDfVOxCxptSETyMB8GA1UdIwQYMBaAFGJplNGXYr4PmIT6TvDcpmw/UwKo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U2RS84MzBDNjk3MDBE
RUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZnLVloUHBPOE55bWJEOVRB
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ltbVUwWmRpdmctWWhQcE84TnltYkQ5VEFxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0U2RS84MzBDNjk3MDBERUIxMUU3OTc3MUI2NjZDNEY5QUUwMi9ZbW1VMFpkaXZn
LVloUHBPOE55bWJEOVRBcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb3kpqim3oVfFZ8Ox3gRCNeAkuppyZJ3Qvq4EOfuToxd0LNCV9HwlYRXHTk32
iwx7hkHaPpxPfeoNGlrFCZycoZQ4YdB5WoaI5ZF3y96ouxBiViv99+GD4EOOraFR
yCWG+0buMk+/58pWX6z+XWgL7rpmeLSSAP7/Kx0fJcbxNzULSovuhXGoFvZGKwQS
g2QVm0XFVb46u2b28MlUFZSQVKWQY8+9o7k1LPQHFgfVUsBb29aqUoV1SwKrT/d0
O2beP3Oy0aGfGjKVoft60yPCo0IOU4CL5a7nCA8WBQolzrTC964SEvTkZhARZmsp
GJ/biP0ZUvBgPIOgsxLZaFbZMw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:41:36 2026 by rpki-client