Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File:                     Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier:          RsTcD93PkSkhaXjc28UD/ue0IW37KMhusXFQSqnAimw=
Subject key identifier:   DF:4D:FD:43:71:3C:C7:12:A5:63:16:05:D4:4D:3D:B6:8A:5C:C1:87
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer:       /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial:       0751
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number:          0746
Signing time:             Tue 22 Sep 2026 21:35:43 +0000
Manifest this update:     Tue 22 Sep 2026 21:35:42 +0000
Manifest next update:     Tue 29 Sep 2026 21:35:42 +0000
Files and hashes:         1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: rnW31SE8igbRovNMo7aqjEZs59/tAwDOHS8P7W08B3Y=)
                          2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: YDCZOZA5hCri+gJHNjoyBzUnNsUwszBPU7LfQafrIJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
                          rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1873 (0x751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
        Validity
            Not Before: Sep 22 21:35:42 2026 GMT
            Not After : Sep 29 21:35:42 2026 GMT
        Subject: CN=6ab2f4ae-75a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:df:78:4b:4f:42:3b:63:63:05:45:d4:c4:
                    96:81:b2:48:c5:e8:39:c2:44:ee:6d:fe:89:f2:59:
                    d0:35:57:c4:b7:83:31:29:dc:a5:81:e9:04:08:0b:
                    ae:3c:0a:26:84:db:d6:e0:f1:ac:3e:67:77:82:a0:
                    cc:57:cf:81:17:d0:ce:eb:b0:7b:8f:30:96:33:79:
                    a6:94:cd:50:2b:6c:24:5f:d5:95:65:6b:32:39:15:
                    b1:00:29:d3:28:77:70:99:53:0b:c1:98:6c:b3:d9:
                    11:49:e6:cc:61:86:32:69:47:48:d6:d4:64:fe:2e:
                    84:3b:6d:f7:9d:bf:c9:e2:86:57:49:d5:be:c5:73:
                    d5:66:e0:bb:5b:a9:57:08:f4:67:2f:6a:d1:de:b7:
                    dc:3c:46:8b:90:39:6f:ab:c2:86:10:08:ca:4b:b2:
                    82:ab:21:80:6a:9b:61:1c:31:19:25:7f:e3:d2:31:
                    db:c6:e0:a7:9b:f3:8d:42:c1:b7:42:4a:27:8c:5d:
                    82:0c:77:6a:ca:fa:99:1a:4e:eb:dd:14:80:7a:f4:
                    83:5f:01:ce:7e:3b:48:77:c5:de:e6:ba:78:51:cc:
                    ec:ef:a8:e0:9b:ab:43:30:50:46:90:ac:d4:de:43:
                    78:74:19:bd:36:34:5d:d4:be:c9:83:39:8d:7c:bd:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:FD:43:71:3C:C7:12:A5:63:16:05:D4:4D:3D:B6:8A:5C:C1:87
            X509v3 Authority Key Identifier:
                keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:45:30:1d:dd:50:c4:23:ed:8b:70:e3:f2:e6:28:61:0e:
         8a:6d:85:60:ca:d0:37:cd:2b:c5:ed:44:6d:05:46:f0:75:11:
         9a:c3:78:f3:7c:c6:78:1f:9c:ba:51:08:37:e8:b6:5b:87:36:
         e9:44:47:03:fc:9f:05:b8:25:51:73:94:8b:09:db:95:73:ab:
         eb:61:0d:7e:32:a3:df:54:17:c4:51:1e:8b:9f:a3:48:2a:2c:
         39:ee:56:10:ac:76:ee:96:1f:17:75:d6:34:5c:d6:12:ff:34:
         9c:a9:4b:bd:3e:4a:c0:b8:cb:da:a0:75:c7:4b:fb:2c:d8:bd:
         02:48:b2:4a:6e:dc:db:d8:9d:7f:30:15:9a:a7:43:dd:55:ee:
         47:b5:f5:d5:bf:ee:d4:88:ed:5e:33:ef:cb:36:1e:87:66:a5:
         e6:35:8d:eb:6f:76:71:96:74:80:5e:40:29:e4:f0:3d:45:32:
         58:fc:56:19:f9:e4:0b:f4:af:93:9d:ec:5d:66:1f:99:17:30:
         e9:1c:aa:1d:fe:2d:b5:15:32:4d:df:ce:7b:40:21:00:ef:00:
         a2:16:19:fd:6c:4d:5b:b1:04:a8:ad:b4:e9:de:33:17:d8:c5:
         38:13:f9:ed:87:48:dd:45:35:ae:4c:e6:25:6e:33:31:a2:ea:
         6a:09:4e:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzNUQxMTAvBgNVBAUTKDYzNTkzMDlFRjQ5QjQ0NUY2RUI1MzMxQkRGMEE5NEM1
QzZFRkMzN0IwHhcNMjYwOTIyMjEzNTQyWhcNMjYwOTI5MjEzNTQyWjAYMRYwFAYD
VQQDEw02YWIyZjRhZS03NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfrfeEtPQjtjYwVF1MSWgbJIxeg5wkTubf6J8lnQNVfEt4MxKdylgekECAuu
PAomhNvW4PGsPmd3gqDMV8+BF9DO67B7jzCWM3mmlM1QK2wkX9WVZWsyORWxACnT
KHdwmVMLwZhss9kRSebMYYYyaUdI1tRk/i6EO233nb/J4oZXSdW+xXPVZuC7W6lX
CPRnL2rR3rfcPEaLkDlvq8KGEAjKS7KCqyGAapthHDEZJX/j0jHbxuCnm/ONQsG3
QkonjF2CDHdqyvqZGk7r3RSAevSDXwHOfjtId8Xe5rp4Uczs76jgm6tDMFBGkKzU
3kN4dBm9NjRd1L7JgzmNfL2TOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9N/UNx
PMcSpWMWBdRNPbaKXMGHMB8GA1UdIwQYMBaAFGNZMJ70m0RfbrUzG98KlMXG78N7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTM1RC9GNTAwRjcyODhB
QjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJGOXV0VE1iM3dxVXhjYnZ3
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxa3dudlNiUkY5dXRUTWIzd3FVeGNidnczcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTM1RC9GNTAwRjcyODhBQjgxMUVCODcwN0UxMUFDNEY5QUUwMi9ZMWt3bnZTYlJG
OXV0VE1iM3dxVXhjYnZ3M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATxlFMB3dUMQj7Ytw4/LmKGEOim2FYMrQN80rxe1EbQVG8HURmsN483zGeB+c
ulEIN+i2W4c26URHA/yfBbglUXOUiwnblXOr62ENfjKj31QXxFEei5+jSCosOe5W
EKx27pYfF3XWNFzWEv80nKlLvT5KwLjL2qB1x0v7LNi9AkiySm7c29idfzAVmqdD
3VXuR7X11b/u1IjtXjPvyzYeh2al5jWN6292cZZ0gF5AKeTwPUUyWPxWGfnkC/Sv
k53sXWYfmRcw6RyqHf4ttRUyTd/Oe0AhAO8AohYZ/WxNW7EEqK206d4zF9jFOBP5
7YdI3UU1rkzmJW4zMaLqaglOcQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:01:49 2026 by rpki-client