Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
File:                     yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft (raw, json)
Hash identifier:          4SSxCz3Opm8iy/CftQc6axTeEevGSRuqt0piCNdOfys=
Subject key identifier:   27:C6:D2:97:52:6B:A6:EE:81:D5:6E:9B:0E:71:98:90:46:1B:B9:4C
Authority key identifier: C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9
Certificate issuer:       /CN=A91CCDF3/serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
Certificate serial:       0286
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
Manifest number:          0280
Signing time:             Thu 29 Oct 2026 02:27:59 +0000
Manifest this update:     Thu 29 Oct 2026 02:27:58 +0000
Manifest next update:     Thu 05 Nov 2026 02:27:58 +0000
Files and hashes:         1: yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl (hash: RabKBbyf4TT9umJJ0qMhhNhOX1W58LBg/quGRliLmTE=)
                          2: 851A7AD6FF7F11EDA505D70EC4F9AE02.roa (hash: Cd3ka8bb5R3DYUTF/v0b6ivGnboKPrlUrUoM7/Vgbdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 02:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDF3, serialNumber=C915FD3BD45B8218B95F573749D3AA498016AAA9
        Validity
            Not Before: Oct 29 02:27:58 2026 GMT
            Not After : Nov  5 02:27:58 2026 GMT
        Subject: CN=6ae2af2f-b2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:98:02:c6:4b:35:23:9d:ee:9e:86:a0:a9:4f:
                    22:36:f8:e3:ee:ef:0e:71:7a:9a:cc:09:55:a7:ea:
                    94:e9:ee:92:da:10:1d:f1:5c:61:d7:c2:17:3d:f6:
                    48:90:a7:d4:d5:5c:09:ea:75:42:c4:bf:f7:67:83:
                    37:74:a4:c8:cd:82:fd:49:9e:f3:2b:52:07:03:86:
                    41:dd:df:9f:75:cb:c1:bf:a3:6e:df:36:8d:6c:80:
                    83:bb:16:82:6e:02:e7:76:ef:5e:4f:a6:bf:9b:a2:
                    38:cd:50:02:8f:7f:87:fe:66:7b:a1:43:ea:ab:d4:
                    91:d8:ed:73:74:59:34:8f:8b:d2:d4:a8:33:2e:c0:
                    8f:1d:25:72:41:37:49:c4:71:63:49:1f:72:62:db:
                    2f:d5:5d:dd:8d:4f:60:20:c4:2e:29:ad:16:bb:55:
                    17:06:6d:73:4f:b8:36:87:ed:d1:5b:1b:d4:7f:33:
                    07:24:c2:03:f9:42:06:6b:d8:f6:57:0c:c2:9a:f7:
                    89:8e:76:90:78:77:4c:9f:8b:25:aa:df:7f:b7:1c:
                    56:27:f8:91:35:30:c4:03:9b:12:9d:de:f5:1e:f4:
                    22:6e:37:e2:ba:b0:e6:95:81:ea:13:b9:3a:7e:b7:
                    53:c7:ea:93:9b:de:d5:3e:db:33:79:37:71:8c:a7:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:D2:97:52:6B:A6:EE:81:D5:6E:9B:0E:71:98:90:46:1B:B9:4C
            X509v3 Authority Key Identifier:
                keyid:C9:15:FD:3B:D4:5B:82:18:B9:5F:57:37:49:D3:AA:49:80:16:AA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yRX9O9Rbghi5X1c3SdOqSYAWqqk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDF3/42DE4836FF7611EDB8981558C4F9AE02/yRX9O9Rbghi5X1c3SdOqSYAWqqk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:47:39:53:12:e0:96:64:25:57:70:6e:d9:49:d4:2c:68:09:
         09:8a:01:07:e0:13:df:41:18:ed:d6:c0:1b:e5:99:ab:80:e0:
         c4:98:e9:a0:78:c5:a8:98:a0:0f:05:2d:3a:fc:95:fa:cd:9c:
         b0:58:80:11:d8:b6:30:2e:22:8e:d1:bb:ae:2b:88:b2:3d:2f:
         56:4f:af:ba:f5:85:08:2c:99:5f:ba:f4:1e:5f:ab:02:5a:a0:
         b7:69:af:fe:75:64:2a:53:ad:1a:a4:49:a8:12:49:3a:65:fa:
         e0:97:aa:dc:44:30:69:c4:cf:e3:cd:ce:df:b2:8d:cd:2a:c6:
         ea:e8:09:62:6f:1a:4e:4c:37:47:c6:4e:6b:ee:ab:5e:33:d7:
         77:30:e0:3a:7d:61:fa:6d:68:21:f5:d2:9c:5f:b3:93:25:5e:
         51:1d:bf:f6:75:07:e4:44:af:c2:11:2c:03:ac:af:b7:00:74:
         45:af:e7:91:50:7f:27:3c:45:74:7d:39:d5:3e:c1:7f:73:50:
         ac:e6:b5:40:cb:e4:bf:be:a3:f6:d3:cf:31:5c:b9:1f:19:67:
         cd:16:4f:08:32:62:55:bf:01:79:54:d0:1a:18:c1:26:d3:92:
         26:f9:fc:ef:77:77:65:bb:32:43:d0:ff:d5:2c:bf:80:27:a3:
         e0:9e:78:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NERjMxMTAvBgNVBAUTKEM5MTVGRDNCRDQ1QjgyMThCOTVGNTczNzQ5RDNBQTQ5
ODAxNkFBQTkwHhcNMjYxMDI5MDIyNzU4WhcNMjYxMTA1MDIyNzU4WjAYMRYwFAYD
VQQDEw02YWUyYWYyZi1iMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArpgCxks1I53unoagqU8iNvjj7u8OcXqazAlVp+qU6e6S2hAd8Vxh18IXPfZI
kKfU1VwJ6nVCxL/3Z4M3dKTIzYL9SZ7zK1IHA4ZB3d+fdcvBv6Nu3zaNbICDuxaC
bgLndu9eT6a/m6I4zVACj3+H/mZ7oUPqq9SR2O1zdFk0j4vS1KgzLsCPHSVyQTdJ
xHFjSR9yYtsv1V3djU9gIMQuKa0Wu1UXBm1zT7g2h+3RWxvUfzMHJMID+UIGa9j2
VwzCmveJjnaQeHdMn4slqt9/txxWJ/iRNTDEA5sSnd71HvQibjfiurDmlYHqE7k6
frdTx+qTm97VPtszeTdxjKf1vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfG0pdS
a6bugdVumw5xmJBGG7lMMB8GA1UdIwQYMBaAFMkV/TvUW4IYuV9XN0nTqkmAFqqp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0RGMy80MkRFNDgzNkZG
NzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdoaTVYMWMzU2RPcVNZQVdx
cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lSWDlPOVJiZ2hpNVgxYzNTZE9xU1lBV3Fxay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0RGMy80MkRFNDgzNkZGNzYxMUVEQjg5ODE1NThDNEY5QUUwMi95Ulg5TzlSYmdo
aTVYMWMzU2RPcVNZQVdxcWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdkc5UxLglmQlV3Bu2UnULGgJCYoBB+AT30EY7dbAG+WZq4DgxJjpoHjFqJig
DwUtOvyV+s2csFiAEdi2MC4ijtG7riuIsj0vVk+vuvWFCCyZX7r0Hl+rAlqgt2mv
/nVkKlOtGqRJqBJJOmX64Jeq3EQwacTP483O37KNzSrG6ugJYm8aTkw3R8ZOa+6r
XjPXdzDgOn1h+m1oIfXSnF+zkyVeUR2/9nUH5ESvwhEsA6yvtwB0Ra/nkVB/JzxF
dH051T7Bf3NQrOa1QMvkv76j9tPPMVy5HxlnzRZPCDJiVb8BeVTQGhjBJtOSJvn8
73d3ZbsyQ9D/1Sy/gCej4J54Eg==
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:46:59 2026 by rpki-client