Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
File:                     yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft (raw, json)
Hash identifier:          y9iMfpOatq1Mj2YexYe7ZYdo5xdKUHZ+y2vFpjN/sqA=
Subject key identifier:   DA:DF:FF:40:FE:34:F5:1D:AB:DD:44:F3:8D:AB:C3:02:E5:DC:AC:D7
Authority key identifier: C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5
Certificate issuer:       /CN=A91AB3E3/serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
Certificate serial:       0295
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
Manifest number:          0290
Signing time:             Mon 27 Jul 2026 03:05:52 +0000
Manifest this update:     Mon 27 Jul 2026 03:05:51 +0000
Manifest next update:     Mon 03 Aug 2026 03:05:51 +0000
Files and hashes:         1: yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl (hash: GF+v0Mw8fSwfgOMP5578vMJo9Jg8XyI2cKE2WdCzrMU=)
                          2: 1E7B7BB4996C11EDA107E666C4F9AE02.roa (hash: 0zxYrdPrMBfjgPj6RJV7ZvcXItqtU0NYSlHoSwv7daw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB3E3, serialNumber=C8E0591E7E517D419CFC86171CDCA9FDE626E8F5
        Validity
            Not Before: Jul 27 03:05:51 2026 GMT
            Not After : Aug  3 03:05:51 2026 GMT
        Subject: CN=6a66cb10-0fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:53:be:a5:be:b3:a5:58:22:aa:47:fc:ee:b7:
                    70:92:d8:af:d9:fd:e8:cd:96:a6:c3:12:78:40:eb:
                    d3:67:24:62:83:c2:40:78:57:34:dd:d8:16:fb:e1:
                    22:c4:93:9d:46:17:cc:02:94:23:6d:09:94:00:74:
                    3f:01:cb:83:12:fc:32:94:b3:cc:4b:65:39:66:78:
                    0f:3b:b6:60:3f:ef:8b:36:71:99:71:1b:a7:de:fe:
                    be:47:86:6f:55:d8:3a:45:df:2b:f0:ea:1d:8c:31:
                    66:fe:89:fc:75:bb:2d:d7:41:52:96:b5:d8:71:04:
                    fe:12:c4:b4:ef:b9:05:d3:71:a5:4c:9d:d7:6d:b3:
                    6b:bc:80:82:b7:23:cd:f7:0e:a5:b3:95:8c:f8:16:
                    3d:02:25:28:15:e0:2e:5e:4a:ef:ef:d7:84:45:98:
                    d3:19:52:7b:62:e9:fc:a1:0b:49:f3:af:ab:6b:c6:
                    d2:70:d9:70:bd:37:49:5c:2d:d5:1a:b3:42:b1:89:
                    49:0e:a4:00:8d:b5:4e:44:79:ea:a2:d9:7c:e6:79:
                    b4:56:be:21:ee:e2:08:d7:6c:06:c1:0d:18:ce:90:
                    76:9b:fb:61:e0:08:71:2b:24:2f:aa:cd:f9:9b:68:
                    ea:ae:0f:14:ad:03:1c:55:5c:99:8a:68:09:96:e8:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:FF:40:FE:34:F5:1D:AB:DD:44:F3:8D:AB:C3:02:E5:DC:AC:D7
            X509v3 Authority Key Identifier:
                keyid:C8:E0:59:1E:7E:51:7D:41:9C:FC:86:17:1C:DC:A9:FD:E6:26:E8:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOBZHn5RfUGc_IYXHNyp_eYm6PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E3/A94624B4996811EDB162F861C4F9AE02/yOBZHn5RfUGc_IYXHNyp_eYm6PU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0e:c0:2d:2b:a2:30:74:8e:cd:c4:27:dc:6e:f2:f7:f0:e5:
         1c:f5:7a:f5:aa:10:40:5f:e1:19:61:7c:b6:6d:96:0a:43:f2:
         54:02:49:6f:f7:6d:71:f7:6f:d1:d0:3e:61:db:89:79:99:71:
         0d:aa:66:9c:cb:ba:47:f2:b0:51:fc:9a:0c:56:85:3b:71:db:
         46:7d:34:a3:78:7a:ae:86:7d:e6:9a:2b:1b:40:89:47:5d:ad:
         1a:97:26:10:f5:92:e7:70:ba:42:57:52:9c:5f:d7:d2:51:93:
         9b:ab:88:58:d8:1a:ef:56:b3:d9:e5:3f:e5:7c:53:08:fc:12:
         14:88:10:eb:16:97:cd:a6:89:75:93:33:c2:60:b6:3b:fd:75:
         4f:11:e6:e0:ec:23:30:3c:89:a7:bf:34:20:b9:28:4c:3a:80:
         a1:0e:fa:e5:22:e9:fc:7b:e6:63:ab:13:90:84:66:2f:6d:09:
         a2:42:09:b1:b9:41:68:fa:6a:a6:bd:66:d3:7e:60:36:a7:58:
         ec:0e:d2:e3:4e:4d:f5:8d:20:d0:a9:bf:73:bc:b9:a4:4e:75:
         53:92:a9:d7:92:26:6a:70:f1:0e:93:c6:15:87:46:a4:9f:1a:
         e0:2d:1d:d8:08:72:e6:6f:eb:6a:e4:5f:e3:46:cc:86:50:8d:
         2f:8c:6e:7f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUIzRTMxMTAvBgNVBAUTKEM4RTA1OTFFN0U1MTdENDE5Q0ZDODYxNzFDRENBOUZE
RTYyNkU4RjUwHhcNMjYwNzI3MDMwNTUxWhcNMjYwODAzMDMwNTUxWjAYMRYwFAYD
VQQDEw02YTY2Y2IxMC0wZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA61O+pb6zpVgiqkf87rdwktiv2f3ozZamwxJ4QOvTZyRig8JAeFc03dgW++Ei
xJOdRhfMApQjbQmUAHQ/AcuDEvwylLPMS2U5ZngPO7ZgP++LNnGZcRun3v6+R4Zv
Vdg6Rd8r8OodjDFm/on8dbst10FSlrXYcQT+EsS077kF03GlTJ3XbbNrvICCtyPN
9w6ls5WM+BY9AiUoFeAuXkrv79eERZjTGVJ7Yun8oQtJ86+ra8bScNlwvTdJXC3V
GrNCsYlJDqQAjbVORHnqotl85nm0Vr4h7uII12wGwQ0YzpB2m/th4AhxKyQvqs35
m2jqrg8UrQMcVVyZimgJlugy7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrf/0D+
NPUdq91E842rwwLl3KzXMB8GA1UdIwQYMBaAFMjgWR5+UX1BnPyGFxzcqf3mJuj1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFMy9BOTQ2MjRCNDk5
NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZVR2NfSVlYSE55cF9lWW02
UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lPQlpIbjVSZlVHY19JWVhITnlwX2VZbTZQVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjNFMy9BOTQ2MjRCNDk5NjgxMUVEQjE2MkY4NjFDNEY5QUUwMi95T0JaSG41UmZV
R2NfSVlYSE55cF9lWW02UFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZA7ALSuiMHSOzcQn3G7y9/DlHPV69aoQQF/hGWF8tm2WCkPyVAJJb/dtcfdv
0dA+YduJeZlxDapmnMu6R/KwUfyaDFaFO3HbRn00o3h6roZ95porG0CJR12tGpcm
EPWS53C6QldSnF/X0lGTm6uIWNga71az2eU/5XxTCPwSFIgQ6xaXzaaJdZMzwmC2
O/11TxHm4OwjMDyJp780ILkoTDqAoQ765SLp/HvmY6sTkIRmL20JokIJsblBaPpq
pr1m035gNqdY7A7S405N9Y0g0Km/c7y5pE51U5Kp15ImanDxDpPGFYdGpJ8a4C0d
2Ahy5m/rauRf40bMhlCNL4xufw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:57:42 2026 by rpki-client