Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
File:                     bWlDJ6eLD158LQx0Y3dIHe3doAI.mft (raw, json)
Hash identifier:          LSCYEtXu5E29rEpPhSdlwVCActpPfW8cxmiwYpFv/0c=
Subject key identifier:   AF:7D:C7:41:64:6C:E5:D8:D7:B7:7B:F2:66:64:1F:A5:2C:E2:2A:C5
Authority key identifier: 6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02
Certificate issuer:       /CN=A9186392/serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
Manifest number:          0292
Signing time:             Sat 03 Oct 2026 02:23:38 +0000
Manifest this update:     Sat 03 Oct 2026 02:23:38 +0000
Manifest next update:     Sat 10 Oct 2026 02:23:38 +0000
Files and hashes:         1: bWlDJ6eLD158LQx0Y3dIHe3doAI.crl (hash: wOS8iNcLDCutWdN3NQxaGux4DEOf0/w39yKIx2eeZ28=)
                          2: 3CF4087AD90611ED890F5D5FC4F9AE02.roa (hash: 4ZmDz0huIaWm/DTwuUb93xnXK/d7kmZ8GktldPFPCz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl
                          rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186392, serialNumber=6D694327A78B0F5E7C2D0C746377481DEDDDA002
        Validity
            Not Before: Oct  3 02:23:38 2026 GMT
            Not After : Oct 10 02:23:38 2026 GMT
        Subject: CN=6ac0672a-b153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:54:8b:b2:b4:c2:a8:b4:0b:87:58:1e:e6:3f:
                    21:f9:23:05:90:44:30:1b:b0:f1:07:7b:3f:c2:21:
                    65:be:54:8b:b4:c7:9c:c5:33:78:67:67:b2:19:6e:
                    d8:c5:f7:bf:93:df:71:8a:52:54:9e:a0:b8:b4:ce:
                    4d:4b:23:03:5e:be:ee:db:7a:21:35:a5:38:a5:0e:
                    fd:e6:6e:26:86:32:2e:06:1f:03:dc:8a:1d:21:ce:
                    8a:c8:f5:96:7a:9a:fa:15:f6:06:3f:96:65:c6:d5:
                    e4:24:6e:79:39:a9:a2:79:8e:09:5f:84:c2:7e:2b:
                    e6:d9:12:04:52:d2:2f:ee:54:4e:a7:d9:62:c1:0e:
                    0c:69:7f:53:16:01:c6:6b:22:7d:d9:09:2b:16:aa:
                    ea:f4:af:a4:d2:41:6d:93:12:2e:c3:bf:8a:65:70:
                    c3:97:4a:4b:20:3d:64:6a:51:a7:53:c5:26:27:8a:
                    45:ac:05:49:be:ed:bf:38:2f:dd:98:27:f2:4f:eb:
                    0a:3b:ea:85:10:59:26:d7:b9:a9:37:db:c5:10:13:
                    cd:07:57:7e:49:49:73:70:e6:1f:9f:a0:ca:28:17:
                    66:f4:16:6b:36:23:32:39:57:7b:e0:81:1f:b2:53:
                    8b:46:96:5f:a4:42:a1:d4:a4:1c:f5:01:51:b0:51:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7D:C7:41:64:6C:E5:D8:D7:B7:7B:F2:66:64:1F:A5:2C:E2:2A:C5
            X509v3 Authority Key Identifier:
                keyid:6D:69:43:27:A7:8B:0F:5E:7C:2D:0C:74:63:77:48:1D:ED:DD:A0:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bWlDJ6eLD158LQx0Y3dIHe3doAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186392/19FD4CC2D90211ED87844959C4F9AE02/bWlDJ6eLD158LQx0Y3dIHe3doAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:91:4a:05:8d:07:02:b0:79:72:5c:d2:84:26:46:4b:fe:
         77:84:10:bc:22:0e:b1:32:cd:1a:ac:a4:8a:8e:b9:9c:5c:28:
         13:94:52:7a:db:ed:f5:1a:43:25:56:bf:0f:85:84:18:8b:05:
         dd:0c:00:66:4d:db:4f:17:f0:92:23:68:7a:7f:78:16:80:33:
         01:15:85:f1:ef:1d:f6:bf:d4:c6:a1:a3:34:c7:6f:ab:13:b9:
         4b:fa:95:23:73:43:4e:e0:bf:21:ce:8c:95:97:39:10:cd:22:
         95:54:85:90:0e:08:1e:d4:82:85:57:56:79:16:b1:81:42:0a:
         67:74:0f:00:9b:71:c8:36:b2:5b:41:31:dc:00:85:ec:e2:06:
         d5:83:51:85:48:8f:3e:ff:30:b6:3a:5b:ea:75:c2:fd:99:3f:
         5e:d7:9a:5d:53:fb:b2:ef:2a:e7:97:6a:6d:c0:80:6e:68:3e:
         c6:a0:19:75:36:71:56:30:de:79:9e:75:c3:50:c7:9b:11:52:
         6b:fd:64:bd:a6:85:5b:ab:e3:17:04:77:40:93:08:a6:06:9b:
         b8:9f:3b:52:6c:b5:da:90:17:8f:ba:b6:3a:09:a0:0b:97:b3:
         f9:18:9d:14:d6:fc:c9:02:f1:10:0b:fb:ad:30:12:8a:c0:c0:
         6a:f2:6d:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzOTIxMTAvBgNVBAUTKDZENjk0MzI3QTc4QjBGNUU3QzJEMEM3NDYzNzc0ODFE
RUREREEwMDIwHhcNMjYxMDAzMDIyMzM4WhcNMjYxMDEwMDIyMzM4WjAYMRYwFAYD
VQQDEw02YWMwNjcyYS1iMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5FSLsrTCqLQLh1ge5j8h+SMFkEQwG7DxB3s/wiFlvlSLtMecxTN4Z2eyGW7Y
xfe/k99xilJUnqC4tM5NSyMDXr7u23ohNaU4pQ795m4mhjIuBh8D3IodIc6KyPWW
epr6FfYGP5ZlxtXkJG55OamieY4JX4TCfivm2RIEUtIv7lROp9liwQ4MaX9TFgHG
ayJ92QkrFqrq9K+k0kFtkxIuw7+KZXDDl0pLID1kalGnU8UmJ4pFrAVJvu2/OC/d
mCfyT+sKO+qFEFkm17mpN9vFEBPNB1d+SUlzcOYfn6DKKBdm9BZrNiMyOVd74IEf
slOLRpZfpEKh1KQc9QFRsFHSAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK99x0Fk
bOXY17d78mZkH6Us4irFMB8GA1UdIwQYMBaAFG1pQyeniw9efC0MdGN3SB3t3aAC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM5Mi8xOUZENENDMkQ5
MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQxNThMUXgwWTNkSUhlM2Rv
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JXbERKNmVMRDE1OExReDBZM2RJSGUzZG9BSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjM5Mi8xOUZENENDMkQ5MDIxMUVEODc4NDQ5NTlDNEY5QUUwMi9iV2xESjZlTEQx
NThMUXgwWTNkSUhlM2RvQUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKuWRSgWNBwKweXJc0oQmRkv+d4QQvCIOsTLNGqykio65nFwoE5RSetvt9RpD
JVa/D4WEGIsF3QwAZk3bTxfwkiNoen94FoAzARWF8e8d9r/UxqGjNMdvqxO5S/qV
I3NDTuC/Ic6MlZc5EM0ilVSFkA4IHtSChVdWeRaxgUIKZ3QPAJtxyDayW0Ex3ACF
7OIG1YNRhUiPPv8wtjpb6nXC/Zk/XteaXVP7su8q55dqbcCAbmg+xqAZdTZxVjDe
eZ51w1DHmxFSa/1kvaaFW6vjFwR3QJMIpgabuJ87Umy12pAXj7q2OgmgC5ez+Rid
FNb8yQLxEAv7rTASisDAavJtIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:55 2026 by rpki-client