Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File:                     YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier:          zHTN6rEfm1MllU5JUa047rTpE8r74s0IxlbKwNDwVgc=
Subject key identifier:   2E:CE:E4:64:93:22:E7:36:72:B2:FE:C9:93:44:76:78:4C:34:C1:E6
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer:       /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial:       0129
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number:          0121
Signing time:             Mon 27 Jul 2026 07:46:29 +0000
Manifest this update:     Mon 27 Jul 2026 07:46:29 +0000
Manifest next update:     Mon 03 Aug 2026 07:46:29 +0000
Files and hashes:         1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: 0pnNfErF9sNifWsq97iflAU6SDWGhJy5Gd0dRoE+Bf4=)
                          2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: rcro9dP46E34GMHce4QAeTN8arZ/RvTtUrO6lFBK5gg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
                          rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
        Validity
            Not Before: Jul 27 07:46:29 2026 GMT
            Not After : Aug  3 07:46:29 2026 GMT
        Subject: CN=6a670cd5-d758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c6:03:de:52:1c:7a:32:32:d8:16:24:10:94:
                    ed:32:a9:62:06:22:31:b9:c8:79:6e:17:4e:e3:bf:
                    bd:29:fd:8e:f9:08:c5:e6:f7:c8:c5:d8:20:a9:a0:
                    8c:ea:f9:a5:a0:1a:46:06:4f:84:7c:51:31:14:a4:
                    76:bc:1f:d4:82:88:25:2e:8d:0b:16:ee:20:f9:ae:
                    30:de:6f:d5:76:92:c5:73:50:49:12:a0:d7:a5:56:
                    a4:0d:f0:d7:bb:a0:48:a5:a4:88:2a:f9:53:75:4f:
                    9f:46:02:67:54:6a:fa:62:ec:3b:72:d8:6c:61:b7:
                    54:5b:b5:d4:53:54:c8:d7:96:7b:d4:ea:32:25:44:
                    a2:03:96:5d:bb:cf:44:65:2c:91:91:65:de:c6:0c:
                    c8:e3:d4:96:37:7e:a7:ef:35:34:7e:61:13:d3:4d:
                    5c:a2:89:38:39:70:16:f0:fe:b2:cc:83:e2:64:d8:
                    c9:bf:27:da:0d:7f:61:2d:60:d7:62:6c:1f:e9:ce:
                    f2:20:7d:6e:12:fd:39:cd:64:46:26:79:62:75:c8:
                    a3:43:84:fe:df:b5:34:89:10:cd:80:3e:95:bf:5e:
                    3c:be:6b:c7:3d:37:62:1d:e6:69:de:68:66:ca:5c:
                    22:23:39:04:ad:9f:94:98:bb:8d:d8:fe:29:a3:61:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CE:E4:64:93:22:E7:36:72:B2:FE:C9:93:44:76:78:4C:34:C1:E6
            X509v3 Authority Key Identifier:
                keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:af:44:6c:9c:f3:98:e7:d2:81:20:3f:3a:8d:c2:f9:bf:3a:
         6c:04:29:a0:0a:9a:62:39:28:b4:13:b6:18:8a:8b:00:8e:e9:
         af:a9:41:fc:b1:b0:ca:d1:a5:4a:2c:37:c6:22:d3:5c:8a:c9:
         9f:ae:c1:97:cd:68:15:ef:29:97:25:ba:77:cd:f1:3b:3d:3c:
         98:9a:7b:77:03:90:b4:41:b7:44:cf:57:ee:3c:11:90:21:a0:
         4f:5d:2c:ee:83:b0:56:91:a3:b9:5e:be:a9:2f:8b:fc:e4:77:
         c7:48:e9:9c:ac:71:33:b6:c2:1d:ad:e4:a9:f5:6b:69:09:ee:
         11:27:0c:e8:89:20:08:2b:59:55:8b:16:cc:38:ff:be:95:1e:
         57:88:09:1c:0a:97:0e:3f:03:92:9b:52:a9:68:c8:64:92:9d:
         6d:ba:6d:b3:5c:77:22:6d:a0:89:c5:70:2c:64:b9:de:27:ca:
         bd:60:c6:f4:59:df:85:fb:b7:7a:4e:9a:69:8b:ee:39:ae:88:
         cc:80:cc:39:98:8b:e2:77:2d:2c:51:09:e3:fb:ae:b8:01:8c:
         31:af:25:aa:45:c4:19:74:ab:8a:e8:ca:e3:79:41:aa:03:8a:
         48:35:2c:2a:b4:7b:57:1f:7b:0a:ef:fe:fa:64:57:ec:c5:fe:
         3a:1a:15:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU4MzIxMTAvBgNVBAUTKDYxNDdBMkE2RjEwNkRDNTYwMTNEQzNCQ0ZCQTBCNEI3
NTNFQ0QxQkMwHhcNMjYwNzI3MDc0NjI5WhcNMjYwODAzMDc0NjI5WjAYMRYwFAYD
VQQDEw02YTY3MGNkNS1kNzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8YD3lIcejIy2BYkEJTtMqliBiIxuch5bhdO47+9Kf2O+QjF5vfIxdggqaCM
6vmloBpGBk+EfFExFKR2vB/UgoglLo0LFu4g+a4w3m/VdpLFc1BJEqDXpVakDfDX
u6BIpaSIKvlTdU+fRgJnVGr6Yuw7cthsYbdUW7XUU1TI15Z71OoyJUSiA5Zdu89E
ZSyRkWXexgzI49SWN36n7zU0fmET001cook4OXAW8P6yzIPiZNjJvyfaDX9hLWDX
Ymwf6c7yIH1uEv05zWRGJnlidcijQ4T+37U0iRDNgD6Vv148vmvHPTdiHeZp3mhm
ylwiIzkErZ+UmLuN2P4po2ECTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7O5GST
Iuc2crL+yZNEdnhMNMHmMB8GA1UdIwQYMBaAFGFHoqbxBtxWAT3DvPugtLdT7NG8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTgzMi8xRUQ0NTJBQ0Qw
QkExMUVGODk2Q0QwMjZDNEY5QUUwMi9ZVWVpcHZFRzNGWUJQY084LTZDMHQxUHMw
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lVZWlwdkVHM0ZZQlBjTzgtNkMwdDFQczBidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTgzMi8xRUQ0NTJBQ0QwQkExMUVGODk2Q0QwMjZDNEY5QUUwMi9ZVWVpcHZFRzNG
WUJQY084LTZDMHQxUHMwYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ69EbJzzmOfSgSA/Oo3C+b86bAQpoAqaYjkotBO2GIqLAI7pr6lB/LGwytGl
Siw3xiLTXIrJn67Bl81oFe8plyW6d83xOz08mJp7dwOQtEG3RM9X7jwRkCGgT10s
7oOwVpGjuV6+qS+L/OR3x0jpnKxxM7bCHa3kqfVraQnuEScM6IkgCCtZVYsWzDj/
vpUeV4gJHAqXDj8DkptSqWjIZJKdbbpts1x3Im2gicVwLGS53ifKvWDG9Fnfhfu3
ek6aaYvuOa6IzIDMOZiL4nctLFEJ4/uuuAGMMa8lqkXEGXSriujK43lBqgOKSDUs
KrR7Vx97Cu/++mRX7MX+OhoVvQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:23:10 2026 by rpki-client