Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
File:                     yomQiVxPTQ5f49-BWICyA1kPsno.mft (raw, json)
Hash identifier:          P6w/X1aVTzggCBf/eNO+zKRh5K6VCVy4oc+kdNZwlf8=
Subject key identifier:   4B:F0:47:A0:7E:04:B0:EC:DD:ED:14:0C:3C:3B:A7:EB:00:DA:CF:45
Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A
Certificate issuer:       /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
Certificate serial:       025F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
Manifest number:          0818
Signing time:             Mon 12 Oct 2026 23:13:54 +0000
Manifest this update:     Mon 12 Oct 2026 23:13:53 +0000
Manifest next update:     Mon 19 Oct 2026 23:13:53 +0000
Files and hashes:         1: yomQiVxPTQ5f49-BWICyA1kPsno.crl (hash: aQbEFzJz5eLkc5MpXHR/jEyHy556OpUpi1FqPBtkE3Y=)
                          2: C885D0C8374B11EEA2157233C4F9AE02.roa (hash: jQVly8FPPuFgOZcXUN0l/eQQVf0qa488CPB3wrBLOsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl
                          rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 23:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A
        Validity
            Not Before: Oct 12 23:13:53 2026 GMT
            Not After : Oct 19 23:13:53 2026 GMT
        Subject: CN=6acd69b2-58c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:d0:01:17:3f:76:5e:78:c9:a8:53:a0:42:
                    98:4b:7e:b2:14:d8:01:d1:33:0c:5c:5f:1b:92:7b:
                    92:7b:04:05:97:6f:54:90:44:33:db:95:8f:f4:1c:
                    3e:22:85:f0:8f:f4:ba:dd:9c:c0:51:69:d9:c7:a0:
                    9c:ed:23:d9:9a:e2:96:b8:0e:71:cb:78:c2:f2:a1:
                    25:9b:63:ad:ad:5a:c2:95:b9:c5:53:43:85:6e:c2:
                    ef:0f:71:69:08:53:7f:84:d3:ed:a1:37:54:1e:8d:
                    23:91:b3:7d:84:59:90:bb:40:eb:f4:ec:b1:8d:1f:
                    c7:26:9f:dd:d7:84:0c:e6:c5:0d:67:d0:7d:e0:d6:
                    fb:36:01:05:62:0b:aa:0a:17:42:06:b6:01:42:78:
                    55:89:9e:fd:f4:aa:ac:4a:8a:a0:80:18:ae:e9:49:
                    3e:ad:1a:05:4e:0e:a1:a7:f7:69:57:1a:af:39:01:
                    37:6f:03:f6:fe:df:c5:da:53:fe:cd:f8:4a:72:e9:
                    21:d6:b1:55:ea:1b:63:08:26:3b:87:da:ab:bc:d4:
                    b2:cc:44:ac:ec:4b:10:0d:6b:e3:d0:1b:ed:20:b1:
                    fd:a1:b5:de:fd:4f:90:dd:81:0e:de:98:42:a8:ea:
                    3a:0f:2c:ec:03:40:33:89:75:66:a6:2f:d3:62:16:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F0:47:A0:7E:04:B0:EC:DD:ED:14:0C:3C:3B:A7:EB:00:DA:CF:45
            X509v3 Authority Key Identifier:
                keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:04:e8:b4:8b:3e:ba:ad:68:d4:ff:4c:71:ce:5e:9a:4d:
         69:10:48:03:90:d7:01:ff:78:99:fd:10:b4:83:f1:88:d5:f0:
         62:d6:f3:3f:b4:78:20:3b:a9:23:90:57:0f:d2:e6:72:a7:9f:
         2b:ff:67:b7:1e:28:ab:72:5d:4a:93:8d:a4:9b:b6:24:0f:5e:
         61:98:7b:1e:19:d8:b5:89:86:6a:ee:18:b5:a9:16:40:44:65:
         04:bc:81:81:f8:38:9c:4c:ab:0f:68:82:23:7c:eb:ac:c6:5a:
         a8:56:05:1b:19:16:4e:e3:d8:a4:5a:32:69:cf:d3:77:4f:ef:
         51:f0:7a:cf:3f:2e:85:24:2b:fa:c6:41:01:b4:97:0a:09:27:
         50:2e:73:5d:84:bf:26:3c:16:bd:2c:41:45:3f:8c:e9:74:4e:
         32:79:f3:8d:98:9d:58:91:f5:81:32:c1:87:70:ef:83:7c:f5:
         fe:bc:1b:33:80:2d:cd:77:81:f0:d6:fd:dc:da:d4:6b:32:cd:
         b3:5f:91:09:8d:bc:df:ff:1e:a7:85:fa:f5:fa:29:cf:18:dc:
         4b:bc:05:e6:d6:49:c1:84:05:21:25:07:64:ed:25:7d:e5:fd:
         d2:d9:18:9a:41:9b:3f:86:04:2c:e2:53:71:ca:ac:ee:35:66:
         a9:79:61:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz
NTkwRkIyN0EwHhcNMjYxMDEyMjMxMzUzWhcNMjYxMDE5MjMxMzUzWjAYMRYwFAYD
VQQDEw02YWNkNjliMi01OGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdLQARc/dl54yahToEKYS36yFNgB0TMMXF8bknuSewQFl29UkEQz25WP9Bw+
IoXwj/S63ZzAUWnZx6Cc7SPZmuKWuA5xy3jC8qElm2OtrVrClbnFU0OFbsLvD3Fp
CFN/hNPtoTdUHo0jkbN9hFmQu0Dr9OyxjR/HJp/d14QM5sUNZ9B94Nb7NgEFYguq
ChdCBrYBQnhViZ799KqsSoqggBiu6Uk+rRoFTg6hp/dpVxqvOQE3bwP2/t/F2lP+
zfhKcukh1rFV6htjCCY7h9qrvNSyzESs7EsQDWvj0BvtILH9obXe/U+Q3YEO3phC
qOo6DyzsA0AziXVmpi/TYhYd1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEvwR6B+
BLDs3e0UDDw7p+sA2s9FMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC
MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRR
NWY0OS1CV0lDeUExa1Bzbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJtAE6LSLPrqtaNT/THHOXppNaRBIA5DXAf94mf0QtIPxiNXwYtbzP7R4IDup
I5BXD9LmcqefK/9ntx4oq3JdSpONpJu2JA9eYZh7HhnYtYmGau4YtakWQERlBLyB
gfg4nEyrD2iCI3zrrMZaqFYFGxkWTuPYpFoyac/Td0/vUfB6zz8uhSQr+sZBAbSX
CgknUC5zXYS/JjwWvSxBRT+M6XROMnnzjZidWJH1gTLBh3Dvg3z1/rwbM4AtzXeB
8Nb93NrUazLNs1+RCY283/8ep4X69fopzxjcS7wF5tZJwYQFISUHZO0lfeX90tkY
mkGbP4YELOJTccqs7jVmqXlhGQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 01:51:13 2026 by rpki-client