Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File:                     yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier:          zGsbYWGkEpZUEMWkhEH+IEU1s9N3JXdQ5D+kFZlOGZg=
Subject key identifier:   E0:79:65:3E:F2:11:ED:8F:3C:7F:F9:48:79:A0:3C:3A:C7:1B:98:C1
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer:       /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number:          0186
Signing time:             Mon 27 Jul 2026 06:24:15 +0000
Manifest this update:     Mon 27 Jul 2026 06:24:15 +0000
Manifest next update:     Mon 03 Aug 2026 06:24:15 +0000
Files and hashes:         1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: dK9ZDDFmqzmI/IaIoRhbkGMJ7mv7UbZwq/kAJWQ+TWQ=)
                          2: 09799D96F36811F0BB995E0C666F56BC.roa (hash: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs=)
                          3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: QjR9A/HMp05od+zO3VCnyHZYpiHXbBVwXb61oJSOZeY=)
                          4: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: iZo2C57Z9aeJt224wtweP1I+ZMSYFsBAndFJeCnjn1U=)
                          5: 09F2AE3EF36811F0BB995E0C666F56BC.roa (hash: 3qyXQf9X9ypzRtr6ed01ZGzQMiK+H459JYw687uWAE4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
        Validity
            Not Before: Jul 27 06:24:15 2026 GMT
            Not After : Aug  3 06:24:15 2026 GMT
        Subject: CN=6a66f98f-9a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:76:fb:bb:1c:35:6e:55:c5:f9:62:19:8a:
                    50:8f:75:01:e5:bd:2d:fa:09:cf:5b:e2:17:a3:bd:
                    b2:88:7f:18:52:8e:2d:a6:d2:bc:46:d9:0a:40:2d:
                    fe:ad:3b:ad:4e:12:0a:05:e2:62:e6:ee:15:0c:ca:
                    4f:73:52:3c:c3:b7:fc:af:5b:98:c3:92:8a:e8:8b:
                    7d:a0:23:59:a7:a0:60:7d:0c:19:8a:a5:ae:61:2c:
                    17:e9:3a:2d:e4:e8:51:a9:13:97:b1:9f:f1:4c:3c:
                    01:a9:93:6c:03:29:05:f1:f4:84:49:b3:f4:9d:e3:
                    51:c8:4f:95:26:43:95:9e:77:a0:ac:f9:95:e9:d3:
                    64:cb:95:25:ef:6c:94:74:55:67:24:cd:6d:60:0c:
                    6f:ac:72:9a:0f:09:fe:3b:d3:5a:ac:99:5c:26:93:
                    0e:04:5f:82:8b:62:7f:9e:8b:d7:92:3f:b6:79:39:
                    4c:26:3d:54:db:6d:2a:75:ed:b3:26:de:56:6c:39:
                    bf:8a:01:1b:02:73:5e:82:f4:fa:a2:a7:7b:08:18:
                    52:3c:fd:ac:e1:b0:49:e8:09:92:ac:e1:ad:51:74:
                    9c:2e:68:e2:93:d2:03:a0:5d:59:57:7a:72:41:aa:
                    9f:d0:83:8c:5d:16:35:96:66:6c:33:d1:10:70:6c:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:79:65:3E:F2:11:ED:8F:3C:7F:F9:48:79:A0:3C:3A:C7:1B:98:C1
            X509v3 Authority Key Identifier:
                keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:95:62:c1:4e:27:7a:de:ee:df:01:8f:d2:4b:0f:e2:e2:8b:
         d6:e2:a8:5d:c8:b2:79:f5:9b:2a:e0:a4:1a:24:97:2b:e1:8f:
         37:3b:04:bd:31:91:ec:90:ae:8d:86:13:b0:76:53:94:06:da:
         d9:2a:3f:96:e1:db:68:a5:2a:da:9c:44:50:47:74:37:b2:84:
         45:5d:95:c5:47:8a:84:a0:84:d9:c9:02:66:09:93:87:51:60:
         be:f0:2d:3d:b2:7d:4a:f9:91:eb:98:48:62:20:db:9f:88:e5:
         a9:65:78:e9:3d:0f:ff:0a:73:b3:80:6c:98:ba:d4:a1:51:b1:
         76:d4:aa:4c:a1:e0:5c:80:af:39:07:29:00:ee:cd:95:e6:57:
         12:6d:86:c4:91:25:26:b7:54:05:96:26:0e:46:2b:86:27:27:
         be:cd:50:9c:9a:81:91:3e:79:35:b7:65:bf:92:45:58:cd:57:
         c9:5b:41:cd:7c:61:24:1a:33:d9:b8:5e:49:72:d2:1e:cb:4d:
         8c:a6:77:e8:32:cc:0f:bd:a5:3c:aa:e5:62:ea:fe:7c:38:b8:
         15:18:59:8f:58:3a:ca:a7:b4:d9:b6:f7:87:88:5d:a6:64:82:
         79:4a:1c:d0:f6:6b:6d:61:f6:48:45:d8:dc:e0:7d:6c:f8:85:
         9e:e0:74:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw
RjAzQkY3QzYwHhcNMjYwNzI3MDYyNDE1WhcNMjYwODAzMDYyNDE1WjAYMRYwFAYD
VQQDEw02YTY2Zjk4Zi05YTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwzV2+7scNW5VxfliGYpQj3UB5b0t+gnPW+IXo72yiH8YUo4tptK8RtkKQC3+
rTutThIKBeJi5u4VDMpPc1I8w7f8r1uYw5KK6It9oCNZp6BgfQwZiqWuYSwX6Tot
5OhRqROXsZ/xTDwBqZNsAykF8fSESbP0neNRyE+VJkOVnnegrPmV6dNky5Ul72yU
dFVnJM1tYAxvrHKaDwn+O9NarJlcJpMOBF+Ci2J/novXkj+2eTlMJj1U220qde2z
Jt5WbDm/igEbAnNegvT6oqd7CBhSPP2s4bBJ6AmSrOGtUXScLmjik9IDoF1ZV3py
Qaqf0IOMXRY1lmZsM9EQcGyuQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOB5ZT7y
Ee2PPH/5SHmgPDrHG5jBMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw
NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5
OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzgyRi82RDIwNzVGNjQwNzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NP
MWJ1dTF4Y2swaUlQQTc5OFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFJViwU4net7u3wGP0ksP4uKL1uKoXciyefWbKuCkGiSXK+GPNzsEvTGR7JCu
jYYTsHZTlAba2So/luHbaKUq2pxEUEd0N7KERV2VxUeKhKCE2ckCZgmTh1FgvvAt
PbJ9SvmR65hIYiDbn4jlqWV46T0P/wpzs4BsmLrUoVGxdtSqTKHgXICvOQcpAO7N
leZXEm2GxJElJrdUBZYmDkYrhicnvs1QnJqBkT55Nbdlv5JFWM1XyVtBzXxhJBoz
2bheSXLSHstNjKZ36DLMD72lPKrlYur+fDi4FRhZj1g6yqe02bb3h4hdpmSCeUoc
0PZrbWH2SEXY3OB9bPiFnuB0pA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:59 2026 by rpki-client