Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
File:                     yq3LrMUbKkZS3XMHTygsM00BAnc.mft (raw, json)
Hash identifier:          VtZ3OL/7Dp3Or9FyuQcIsT2gA6uXHLo37xFViMebps8=
Subject key identifier:   5C:30:E4:2E:A3:E6:4F:B6:81:5F:F5:22:F8:60:6D:ED:D8:5C:A2:2C
Authority key identifier: CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77
Certificate issuer:       /CN=A91DCCB3/serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
Certificate serial:       0A68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
Manifest number:          0A5F
Signing time:             Fri 12 Jun 2026 19:40:08 +0000
Manifest this update:     Fri 12 Jun 2026 19:40:07 +0000
Manifest next update:     Fri 19 Jun 2026 19:40:07 +0000
Files and hashes:         1: yq3LrMUbKkZS3XMHTygsM00BAnc.crl (hash: 8AwdK9oCiLi//lB/N9wYWGl79GSsCqG3Qs9FlRhOhgY=)
                          2: 57EE11D0895D11EA81B43245C4F9AE02.roa (hash: VjRNecW0vXmHI7IX4ZkzrAT4JcWtKoRZ3oauY1DQFzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl
                          rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:40:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2664 (0xa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCCB3, serialNumber=CAADCBACC51B2A4652DD73074F282C334D010277
        Validity
            Not Before: Jun 12 19:40:07 2026 GMT
            Not After : Jun 19 19:40:07 2026 GMT
        Subject: CN=6a2c6097-2057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:11:7b:56:cf:e0:cc:fd:2c:73:79:03:1c:
                    95:77:94:e2:75:35:4e:4a:34:60:05:2c:7c:4f:71:
                    5d:3d:1b:91:2a:1f:a5:75:52:c8:20:28:af:f0:35:
                    56:16:bc:25:97:de:9b:37:7a:dd:2d:ec:e2:b6:23:
                    46:19:94:dd:1f:e9:26:27:cd:0d:af:d7:54:40:c9:
                    91:59:1d:98:83:12:8d:61:f4:04:3d:26:ab:68:5a:
                    a2:2e:0f:55:29:46:fd:58:20:67:22:c9:e0:ec:ff:
                    78:a4:0a:80:7d:0c:b1:0e:91:04:21:d9:1c:76:25:
                    5e:7d:1a:bc:ff:8c:52:e4:32:b7:16:c6:80:6a:0a:
                    50:6f:8b:66:ba:c0:81:c6:1e:df:ef:dc:ac:af:a2:
                    15:2f:13:64:93:8f:bd:ac:55:37:36:4a:3a:f1:64:
                    b9:54:eb:15:75:25:d7:cd:2c:71:7c:e1:7e:fe:05:
                    bf:af:6a:34:e8:0f:f8:1a:a7:49:2b:2a:a0:1d:1b:
                    f7:98:dc:36:af:4c:40:75:c5:e4:cd:11:2d:5b:fa:
                    d0:7f:3c:5a:4a:7f:85:cf:81:30:6a:60:f9:75:f7:
                    6a:08:6d:67:63:78:a6:d2:6a:ff:05:15:fe:5a:31:
                    a2:9d:1b:bd:cb:b5:6f:2b:c4:5d:06:07:9d:b6:c4:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:E4:2E:A3:E6:4F:B6:81:5F:F5:22:F8:60:6D:ED:D8:5C:A2:2C
            X509v3 Authority Key Identifier:
                keyid:CA:AD:CB:AC:C5:1B:2A:46:52:DD:73:07:4F:28:2C:33:4D:01:02:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yq3LrMUbKkZS3XMHTygsM00BAnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCCB3/41FD6016895C11EA890C6343C4F9AE02/yq3LrMUbKkZS3XMHTygsM00BAnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:25:61:9d:56:68:80:33:e6:76:06:1d:eb:4c:a6:a4:8c:
         ed:47:8f:5e:3e:5e:d3:f1:89:df:67:8d:1b:ca:76:36:b3:99:
         a9:cb:40:e3:34:61:93:a3:fb:3d:ff:d2:c1:28:02:8d:ed:18:
         9f:a4:12:f2:eb:be:7d:6f:80:df:2b:91:30:46:a0:e9:ed:96:
         46:7a:9e:b8:2e:49:38:64:7d:e0:b0:d9:c6:81:31:d0:ee:83:
         ef:46:77:70:50:15:a1:1d:84:3f:ef:35:40:38:43:bf:92:41:
         0b:42:23:97:67:c3:31:8b:86:10:01:d8:d2:b2:5b:2d:3e:46:
         46:2d:c8:05:d2:8f:e2:e4:58:f4:42:f1:45:17:d1:0a:58:36:
         e3:62:aa:5b:5b:f3:ee:e4:6a:eb:5a:12:59:e8:80:72:0a:85:
         34:d5:41:e6:f1:23:7e:3f:2a:65:a5:bb:57:1c:c1:61:4c:1a:
         2e:68:78:25:7e:92:67:e4:6c:10:e8:5d:bd:aa:45:19:0c:36:
         79:34:32:e8:4d:60:6c:51:ca:c4:ac:28:ec:06:0c:18:4c:2d:
         93:8c:7d:db:c2:8f:ba:77:7e:9a:b5:d8:16:f9:54:23:96:a5:
         5d:80:25:5c:89:7f:d0:b5:a5:e9:0f:52:bd:40:ae:5a:35:3e:
         aa:0c:d0:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RENDQjMxMTAvBgNVBAUTKENBQURDQkFDQzUxQjJBNDY1MkRENzMwNzRGMjgyQzMz
NEQwMTAyNzcwHhcNMjYwNjEyMTk0MDA3WhcNMjYwNjE5MTk0MDA3WjAYMRYwFAYD
VQQDEw02YTJjNjA5Ny0yMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJcRe1bP4Mz9LHN5AxyVd5TidTVOSjRgBSx8T3FdPRuRKh+ldVLIICiv8DVW
Frwll96bN3rdLezitiNGGZTdH+kmJ80Nr9dUQMmRWR2YgxKNYfQEPSaraFqiLg9V
KUb9WCBnIsng7P94pAqAfQyxDpEEIdkcdiVefRq8/4xS5DK3FsaAagpQb4tmusCB
xh7f79ysr6IVLxNkk4+9rFU3Nko68WS5VOsVdSXXzSxxfOF+/gW/r2o06A/4GqdJ
KyqgHRv3mNw2r0xAdcXkzREtW/rQfzxaSn+Fz4EwamD5dfdqCG1nY3im0mr/BRX+
WjGinRu9y7VvK8RdBgedtsR5hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFww5C6j
5k+2gV/1Ivhgbe3YXKIsMB8GA1UdIwQYMBaAFMqty6zFGypGUt1zB08oLDNNAQJ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0NCMy80MUZENjAxNjg5
NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktrWlMzWE1IVHlnc00wMEJB
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lxM0xyTVViS2taUzNYTUhUeWdzTTAwQkFuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Q0NCMy80MUZENjAxNjg5NUMxMUVBODkwQzYzNDNDNEY5QUUwMi95cTNMck1VYktr
WlMzWE1IVHlnc00wMEJBbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAPYYlYZ1WaIAz5nYGHetMpqSM7UePXj5e0/GJ32eNG8p2NrOZqctA4zRhk6P7
Pf/SwSgCje0Yn6QS8uu+fW+A3yuRMEag6e2WRnqeuC5JOGR94LDZxoEx0O6D70Z3
cFAVoR2EP+81QDhDv5JBC0Ijl2fDMYuGEAHY0rJbLT5GRi3IBdKP4uRY9ELxRRfR
Clg242KqW1vz7uRq61oSWeiAcgqFNNVB5vEjfj8qZaW7VxzBYUwaLmh4JX6SZ+Rs
EOhdvapFGQw2eTQy6E1gbFHKxKwo7AYMGEwtk4x928KPund+mrXYFvlUI5alXYAl
XIl/0LWl6Q9SvUCuWjU+qgzQ4w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:42 2026 by rpki-client