Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File:                     yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier:          9ODvwhX2MdEcvLqlRSq9Pxenn23ze61S7GigD6357/A=
Subject key identifier:   C3:A6:99:A6:C8:2F:51:80:F3:E5:59:5D:3C:82:81:B2:6D:0A:AF:90
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer:       /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number:          07C8
Signing time:             Mon 27 Jul 2026 00:06:38 +0000
Manifest this update:     Mon 27 Jul 2026 00:06:37 +0000
Manifest next update:     Mon 03 Aug 2026 00:06:37 +0000
Files and hashes:         1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: TAq7zp5rxPRqnCZ1ZfDiDYxZHqp9tH9bz+EglnhQvWQ=)
                          2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: jQVly8FPPuFgOZcXUN0l/eQQVf0qa488CPB3wrBLOsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
        Validity
            Not Before: Jul 27 00:06:37 2026 GMT
            Not After : Aug  3 00:06:37 2026 GMT
        Subject: CN=6a66a10d-a6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:af:87:80:70:af:e3:c9:a4:38:45:b6:a7:
                    4d:bc:ef:06:96:98:eb:bd:3d:24:09:2e:a3:dd:59:
                    93:4f:de:7e:6d:5b:55:6c:f1:57:54:8c:f2:1c:bc:
                    b6:fc:93:e4:f0:d7:9c:42:ec:c3:0f:e3:bb:ca:be:
                    f0:67:e4:c5:60:db:7f:57:61:f1:09:7e:2f:8b:69:
                    a4:12:9c:27:90:ac:41:c7:af:fb:d2:5f:79:86:8c:
                    c7:31:4b:9b:7b:07:9e:72:11:31:43:22:9f:b2:b1:
                    d3:24:d7:fb:53:b2:35:90:5f:fd:dd:3b:1a:f5:42:
                    ee:75:c9:df:e6:74:49:48:d5:57:de:9b:fe:30:c5:
                    6d:8d:06:fc:72:77:22:1f:a7:44:2f:c0:6a:c2:88:
                    35:02:cc:42:87:52:d2:89:1f:6a:f5:e4:86:e1:d8:
                    72:c3:ae:72:f2:3f:e9:9f:5c:99:8a:73:72:7f:13:
                    50:d0:1e:db:d2:23:74:9b:62:c8:6f:1b:2b:42:b3:
                    ff:b8:70:08:4b:be:78:cf:9f:fe:1e:83:40:4d:71:
                    d7:de:80:56:3b:14:11:4e:f4:22:a4:28:e4:ae:e8:
                    78:bc:2b:37:1d:27:bf:af:ec:25:43:9f:46:21:3c:
                    fa:9d:13:92:86:50:20:b6:d5:7c:78:38:32:9a:8e:
                    5d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A6:99:A6:C8:2F:51:80:F3:E5:59:5D:3C:82:81:B2:6D:0A:AF:90
            X509v3 Authority Key Identifier:
                keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:76:b4:d4:9b:b2:c8:a1:53:1d:bc:03:7a:fd:75:f0:d9:
         49:c1:43:96:e3:4d:5c:9f:6e:50:ef:c2:43:22:f4:29:ac:b1:
         93:b8:96:d1:17:90:7a:b8:61:6f:38:91:d4:e6:69:0f:60:ac:
         d4:36:53:97:f2:6f:27:06:4d:1d:fa:0d:4c:d4:b0:b1:e3:6a:
         05:30:a6:b6:ce:90:dd:4d:18:25:58:32:7b:cb:2d:f1:56:a8:
         6b:d3:75:26:8e:43:06:d0:43:7a:1e:26:75:0e:a8:e1:07:44:
         c3:e3:f6:72:33:84:92:15:2d:c9:a8:a5:25:b9:9e:71:57:49:
         a3:1c:d2:47:e8:c7:39:0f:ff:bb:ed:57:25:97:28:05:eb:50:
         cb:07:dc:dd:41:00:56:5f:b5:e5:b0:1d:9d:6d:05:92:11:fb:
         23:60:a0:14:41:78:27:a5:4a:d3:80:22:06:16:fe:6f:34:34:
         92:b0:a5:fc:73:3c:ff:06:96:0b:35:5b:82:96:db:80:4a:94:
         e6:74:71:f5:90:1b:b5:ab:96:4f:11:e0:69:7f:e5:48:4c:df:
         0c:45:57:a5:21:7d:54:78:3e:ef:f6:44:5a:b1:dc:fd:e7:d3:
         9a:5d:55:b0:38:11:cf:11:cd:35:b9:78:5c:4e:f9:1f:49:f5:
         af:19:97:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz
NTkwRkIyN0EwHhcNMjYwNzI3MDAwNjM3WhcNMjYwODAzMDAwNjM3WjAYMRYwFAYD
VQQDEw02YTY2YTEwZC1hNmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA07qvh4Bwr+PJpDhFtqdNvO8GlpjrvT0kCS6j3VmTT95+bVtVbPFXVIzyHLy2
/JPk8NecQuzDD+O7yr7wZ+TFYNt/V2HxCX4vi2mkEpwnkKxBx6/70l95hozHMUub
eweechExQyKfsrHTJNf7U7I1kF/93Tsa9ULudcnf5nRJSNVX3pv+MMVtjQb8cnci
H6dEL8Bqwog1AsxCh1LSiR9q9eSG4dhyw65y8j/pn1yZinNyfxNQ0B7b0iN0m2LI
bxsrQrP/uHAIS754z5/+HoNATXHX3oBWOxQRTvQipCjkruh4vCs3HSe/r+wlQ59G
ITz6nROShlAgttV8eDgymo5dKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOmmabI
L1GA8+VZXTyCgbJtCq+QMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR
NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAggx2tNSbssihUx28A3r9dfDZScFDluNNXJ9uUO/CQyL0Kayxk7iW0ReQerhh
bziR1OZpD2Cs1DZTl/JvJwZNHfoNTNSwseNqBTCmts6Q3U0YJVgye8st8Vaoa9N1
Jo5DBtBDeh4mdQ6o4QdEw+P2cjOEkhUtyailJbmecVdJoxzSR+jHOQ//u+1XJZco
BetQywfc3UEAVl+15bAdnW0FkhH7I2CgFEF4J6VK04AiBhb+bzQ0krCl/HM8/waW
CzVbgpbbgEqU5nRx9ZAbtauWTxHgaX/lSEzfDEVXpSF9VHg+7/ZEWrHc/efTml1V
sDgRzxHNNbl4XE75H0n1rxmXVw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:41:45 2026 by rpki-client