Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
File:                     1ybobzALJko1PClnPgdxb1RUteI.mft (raw, json)
Hash identifier:          IOcCaXv6czeZTvHg98GJRkPzojXwBQv8r54RAhmYILs=
Subject key identifier:   74:32:59:7B:AE:E7:42:B5:81:95:D8:58:DE:0F:1E:9F:52:A5:35:B6
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Certificate issuer:       /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial:       D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
Manifest number:          D0
Signing time:             Mon 27 Jul 2026 08:53:44 +0000
Manifest this update:     Mon 27 Jul 2026 08:53:44 +0000
Manifest next update:     Mon 03 Aug 2026 08:53:44 +0000
Files and hashes:         1: 1ybobzALJko1PClnPgdxb1RUteI.crl (hash: NGySqMEZjxq0ctnES0xTXyiuTtJo9L3n9BIqks2Dw4A=)
                          2: D28B7DD450E411F081600061C4F9AE02.roa (hash: oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 08:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
        Validity
            Not Before: Jul 27 08:53:44 2026 GMT
            Not After : Aug  3 08:53:44 2026 GMT
        Subject: CN=6a671c98-05e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:71:aa:38:1c:91:38:ec:e7:7d:df:6f:19:
                    c2:4f:4f:12:a1:d6:c7:ad:60:b2:a5:0f:da:ef:32:
                    6d:93:30:96:68:c9:75:67:e6:2d:22:4d:4e:06:01:
                    41:95:e6:15:e7:7c:f7:89:19:09:92:5f:b1:a5:bc:
                    c3:b9:a3:09:89:5a:79:5e:5c:cd:4b:4e:12:6b:ad:
                    c4:d5:c6:b9:25:a3:24:16:82:ee:4d:b9:5b:3d:c5:
                    a7:f4:58:b1:e0:59:61:eb:ba:ec:7d:be:33:99:c4:
                    4a:97:f4:93:c1:7a:31:7f:6d:cc:2c:23:2f:cf:a4:
                    ca:e7:18:23:0f:0d:8f:26:a0:e4:ec:19:54:3e:e1:
                    99:06:8f:06:61:ff:8c:be:25:cd:57:83:27:7f:45:
                    7c:0c:8a:52:b5:03:c4:59:3b:24:5a:eb:12:38:ca:
                    24:e8:0a:75:19:ae:85:34:4d:0c:38:4a:c8:24:f0:
                    b2:c0:f3:d9:27:e8:63:ae:96:08:b2:63:b6:a8:5e:
                    28:cd:2a:62:25:dd:0e:df:58:52:6f:12:aa:d9:3b:
                    7f:23:fd:bc:56:6d:d7:17:a2:5a:ca:36:68:93:dd:
                    3b:69:9c:d1:5e:4b:df:4a:96:96:ad:22:d1:be:5a:
                    d2:df:4f:15:59:52:b1:40:1f:e2:2f:44:98:b0:21:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:59:7B:AE:E7:42:B5:81:95:D8:58:DE:0F:1E:9F:52:A5:35:B6
            X509v3 Authority Key Identifier:
                keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:db:1e:cc:2b:1e:65:0e:47:5b:f6:bf:34:d2:76:77:87:32:
         67:83:0b:97:10:ce:a5:87:f2:61:3b:b1:f2:35:13:ad:7d:00:
         60:04:f8:b0:a8:0c:fa:60:5b:a4:de:03:1e:a7:54:10:ab:24:
         93:db:0a:90:d2:6e:f2:1d:8c:66:c1:b3:8b:ab:86:f7:c8:55:
         06:b7:6e:40:c1:09:7d:05:7b:02:90:9a:68:d0:b6:ee:00:e9:
         07:6b:36:36:d1:31:2c:91:bc:75:78:5b:72:9b:b6:4c:b0:9c:
         b7:77:9b:34:20:30:80:54:04:05:aa:9b:d9:01:7c:83:4c:e9:
         dc:2d:48:af:2a:df:80:f3:98:80:36:34:85:d5:eb:2f:53:03:
         c2:1e:45:a4:b4:9f:92:22:54:97:49:49:f0:6d:fa:c5:51:c8:
         50:e4:fe:59:42:de:35:a5:b6:54:67:a3:b7:21:f6:9f:fa:60:
         a3:de:93:86:16:eb:d6:17:88:8e:32:bb:76:67:6e:91:a2:41:
         8f:0e:5d:67:8c:83:ee:13:a1:22:63:25:56:46:e9:e3:34:37:
         6a:d8:16:6f:40:90:49:99:c4:f4:82:9b:f8:53:c0:4e:e5:4c:
         60:60:31:e1:ae:b3:5e:a8:12:92:66:6b:9d:3c:17:83:c9:fc:
         92:62:ef:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQwNTMxMTAvBgNVBAUTKEQ3MjZFODZGMzAwQjI2NEEzNTNDMjk2NzNFMDc3MTZG
NTQ1NEI1RTIwHhcNMjYwNzI3MDg1MzQ0WhcNMjYwODAzMDg1MzQ0WjAYMRYwFAYD
VQQDEw02YTY3MWM5OC0wNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtT5xqjgckTjs533fbxnCT08SodbHrWCypQ/a7zJtkzCWaMl1Z+YtIk1OBgFB
leYV53z3iRkJkl+xpbzDuaMJiVp5XlzNS04Sa63E1ca5JaMkFoLuTblbPcWn9Fix
4Flh67rsfb4zmcRKl/STwXoxf23MLCMvz6TK5xgjDw2PJqDk7BlUPuGZBo8GYf+M
viXNV4Mnf0V8DIpStQPEWTskWusSOMok6Ap1Ga6FNE0MOErIJPCywPPZJ+hjrpYI
smO2qF4ozSpiJd0O31hSbxKq2Tt/I/28Vm3XF6JayjZok907aZzRXkvfSpaWrSLR
vlrS308VWVKxQB/iL0SYsCGVowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQyWXuu
50K1gZXYWN4PHp9SpTW2MB8GA1UdIwQYMBaAFNcm6G8wCyZKNTwpZz4HcW9UVLXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zRURCODNGQzUw
RTExMUYwOTFDNEJCNzRDNEY5QUUwMi8xeWJvYnpBTEprbzFQQ2xuUGdkeGIxUlV0
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF5Ym9iekFMSmtvMVBDbG5QZ2R4YjFSVXRlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDA1My8zRURCODNGQzUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi8xeWJvYnpBTEpr
bzFQQ2xuUGdkeGIxUlV0ZUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA3tsezCseZQ5HW/a/NNJ2d4cyZ4MLlxDOpYfyYTux8jUTrX0AYAT4sKgM+mBb
pN4DHqdUEKskk9sKkNJu8h2MZsGzi6uG98hVBrduQMEJfQV7ApCaaNC27gDpB2s2
NtExLJG8dXhbcpu2TLCct3ebNCAwgFQEBaqb2QF8g0zp3C1IryrfgPOYgDY0hdXr
L1MDwh5FpLSfkiJUl0lJ8G36xVHIUOT+WULeNaW2VGejtyH2n/pgo96Thhbr1heI
jjK7dmdukaJBjw5dZ4yD7hOhImMlVkbp4zQ3atgWb0CQSZnE9IKb+FPATuVMYGAx
4a6zXqgSkmZrnTwXg8n8kmLvvw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:49 2026 by rpki-client