Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
File:                     YeT4YWtiQmYakffQErbNHkCTiQs.mft (raw, json)
Hash identifier:          XZWav1iQXUzputyzQdQT+uHX+2i/JWpNT5krt7d9aZI=
Subject key identifier:   72:BA:EE:CE:9A:F0:85:EF:1C:5F:29:3A:94:88:08:F9:FD:0C:91:9C
Authority key identifier: 61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B
Certificate issuer:       /CN=A91605D7/serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
Manifest number:          01A4
Signing time:             Sat 13 Jun 2026 04:09:57 +0000
Manifest this update:     Sat 13 Jun 2026 04:09:56 +0000
Manifest next update:     Sat 20 Jun 2026 04:09:56 +0000
Files and hashes:         1: YeT4YWtiQmYakffQErbNHkCTiQs.crl (hash: kP9gvHFMKV9KAgQxrfp2ICHVpW91pb+SODnYLHMlPqE=)
                          2: EA46D7ECE57F11EE96F8FB39C4F9AE02.roa (hash: eGXhWTghID7LXCNSIEK8G8iUBL46dL5mXlz39bqNtkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl
                          rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91605D7, serialNumber=61E4F8616B6242661A91F7D012B6CD1E4093890B
        Validity
            Not Before: Jun 13 04:09:56 2026 GMT
            Not After : Jun 20 04:09:56 2026 GMT
        Subject: CN=6a2cd814-d3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:9a:a2:a6:3c:0f:3b:35:33:03:cb:ad:ea:
                    6b:01:5f:67:38:09:c1:96:02:a3:98:5a:6e:17:69:
                    b0:61:6c:da:c2:0e:38:24:cf:73:10:33:71:26:3e:
                    5e:c3:4a:f0:4f:d8:ea:77:eb:af:7a:36:a8:2e:6f:
                    fc:b3:8b:84:a3:7d:d0:3c:7b:2c:d2:85:82:17:d5:
                    78:07:4b:ef:a4:66:e2:e9:ee:58:3b:13:60:03:14:
                    5a:7a:31:4d:80:41:35:7c:53:93:0b:03:42:6e:7f:
                    18:13:eb:31:84:58:bd:29:19:a7:75:be:a3:a5:ea:
                    d5:0e:bf:55:c4:1a:03:fc:02:35:50:1a:e9:85:49:
                    b1:00:b7:04:38:76:77:88:f7:12:35:ad:eb:80:d7:
                    31:92:c6:65:fd:92:b5:63:c6:93:52:41:ab:84:43:
                    3b:6b:f7:87:ed:ca:00:32:0b:e7:fd:f0:87:b7:d5:
                    60:ef:88:6e:79:4d:30:b8:6e:48:86:0e:a9:5b:fe:
                    4c:fb:ba:b8:63:83:04:a7:6e:73:18:37:ec:e7:6c:
                    8f:bc:ae:fb:c2:72:0d:ec:e6:4f:83:1b:b1:6b:cb:
                    36:e4:59:9d:e2:dd:98:66:ed:ca:3c:6d:98:8e:e8:
                    8b:1e:c8:2f:8e:af:60:c1:3a:13:dd:6d:00:d8:20:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BA:EE:CE:9A:F0:85:EF:1C:5F:29:3A:94:88:08:F9:FD:0C:91:9C
            X509v3 Authority Key Identifier:
                keyid:61:E4:F8:61:6B:62:42:66:1A:91:F7:D0:12:B6:CD:1E:40:93:89:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeT4YWtiQmYakffQErbNHkCTiQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91605D7/3B50F132E57F11EEAF1D291BC4F9AE02/YeT4YWtiQmYakffQErbNHkCTiQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:21:b6:7d:37:84:72:4f:4f:03:51:aa:c2:d9:71:3d:0c:
         9e:0c:0b:b7:7f:45:b3:4f:19:08:5c:10:c5:42:b2:29:61:bf:
         ec:cb:d6:a2:e4:8f:2d:c3:60:d8:60:e2:9b:57:0b:e7:cf:cc:
         2a:30:fe:e4:b5:00:5d:a2:36:3d:60:ac:25:8e:3f:50:07:37:
         70:48:6d:70:48:9f:df:62:4e:db:77:50:70:fc:6c:98:02:2a:
         48:3c:ee:d2:a2:e3:37:e9:53:7d:36:5a:ea:69:0a:85:34:18:
         66:07:2f:c0:96:87:c7:89:b3:a1:ce:47:d8:de:3d:b4:e4:7e:
         51:fa:b2:27:77:bc:a3:44:f4:ad:a5:8e:86:da:5c:8e:4b:cc:
         d6:ac:ee:ef:3a:d2:a6:64:e1:27:f6:c8:5d:01:5c:ed:64:cf:
         0e:fc:ca:9b:f6:ca:b8:4d:31:32:54:21:32:45:bf:d9:98:2b:
         28:79:3e:80:07:89:a5:a4:a6:d2:09:b1:52:53:9f:80:29:0a:
         39:c2:f9:41:03:75:31:a4:0f:4e:8e:3b:3d:3f:01:4b:75:5e:
         8d:87:af:66:bc:21:26:51:a6:c8:a8:ac:bc:ef:9c:8e:35:54:
         37:31:bc:0e:3d:0e:ae:17:6a:da:93:b4:f7:99:23:d7:62:e2:
         25:b6:b7:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA1RDcxMTAvBgNVBAUTKDYxRTRGODYxNkI2MjQyNjYxQTkxRjdEMDEyQjZDRDFF
NDA5Mzg5MEIwHhcNMjYwNjEzMDQwOTU2WhcNMjYwNjIwMDQwOTU2WjAYMRYwFAYD
VQQDEw02YTJjZDgxNC1kM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAquuaoqY8Dzs1MwPLreprAV9nOAnBlgKjmFpuF2mwYWzawg44JM9zEDNxJj5e
w0rwT9jqd+uvejaoLm/8s4uEo33QPHss0oWCF9V4B0vvpGbi6e5YOxNgAxRaejFN
gEE1fFOTCwNCbn8YE+sxhFi9KRmndb6jperVDr9VxBoD/AI1UBrphUmxALcEOHZ3
iPcSNa3rgNcxksZl/ZK1Y8aTUkGrhEM7a/eH7coAMgvn/fCHt9Vg74hueU0wuG5I
hg6pW/5M+7q4Y4MEp25zGDfs52yPvK77wnIN7OZPgxuxa8s25Fmd4t2YZu3KPG2Y
juiLHsgvjq9gwToT3W0A2CCP5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHK67s6a
8IXvHF8pOpSICPn9DJGcMB8GA1UdIwQYMBaAFGHk+GFrYkJmGpH30BK2zR5Ak4kL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDVENy8zQjUwRjEzMkU1
N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFtWWFrZmZRRXJiTkhrQ1Rp
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1llVDRZV3RpUW1ZYWtmZlFFcmJOSGtDVGlRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDVENy8zQjUwRjEzMkU1N0YxMUVFQUYxRDI5MUJDNEY5QUUwMi9ZZVQ0WVd0aVFt
WWFrZmZRRXJiTkhrQ1RpUXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB20htn03hHJPTwNRqsLZcT0MngwLt39Fs08ZCFwQxUKyKWG/7MvWouSPLcNg
2GDim1cL58/MKjD+5LUAXaI2PWCsJY4/UAc3cEhtcEif32JO23dQcPxsmAIqSDzu
0qLjN+lTfTZa6mkKhTQYZgcvwJaHx4mzoc5H2N49tOR+UfqyJ3e8o0T0raWOhtpc
jkvM1qzu7zrSpmThJ/bIXQFc7WTPDvzKm/bKuE0xMlQhMkW/2ZgrKHk+gAeJpaSm
0gmxUlOfgCkKOcL5QQN1MaQPTo47PT8BS3VejYevZrwhJlGmyKisvO+cjjVUNzG8
Dj0Orhdq2pO095kj12LiJba35w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:32 2026 by rpki-client