Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
File:                     i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json)
Hash identifier:          5eOD/L8jTq/Q0sfsX0R7riL53enOUZU8kKQQtfb41oE=
Subject key identifier:   FA:DC:8C:BB:EC:DE:DB:13:D9:DE:60:F4:96:26:A4:26:BA:67:00:EA
Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14
Certificate issuer:       /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
Certificate serial:       074E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
Manifest number:          0746
Signing time:             Fri 02 Oct 2026 22:08:32 +0000
Manifest this update:     Fri 02 Oct 2026 22:08:31 +0000
Manifest next update:     Fri 09 Oct 2026 22:08:31 +0000
Files and hashes:         1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: qtqJCZsTTiwwInXJ5OIR1cUUsrsfa98wS+RQLa1M3nc=)
                          2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: GFVauPq5fJh/s7MjoQc/i7d6D36WUmsf38yMr3GXmuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1870 (0x74e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14
        Validity
            Not Before: Oct  2 22:08:31 2026 GMT
            Not After : Oct  9 22:08:31 2026 GMT
        Subject: CN=6ac02b60-6cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a6:a2:21:77:1f:9a:c0:1a:60:d7:5b:08:e3:
                    f4:15:a5:ff:a0:bf:bb:6c:d2:84:7a:31:09:b0:8e:
                    94:7c:43:a2:bd:fc:d0:5e:a1:2f:a6:2e:a8:28:f6:
                    a7:f8:aa:0a:1c:d2:27:2e:88:9c:11:41:b1:12:e9:
                    1c:c6:9f:ec:79:ab:2e:64:c0:89:da:4a:94:3c:66:
                    b7:69:bb:6c:b1:83:af:47:2b:89:f3:69:f4:7b:ef:
                    43:2e:a0:44:fa:e4:8f:9a:99:2b:74:c1:ed:d2:00:
                    07:e0:14:15:47:3a:9a:d9:2f:cb:66:be:61:f6:20:
                    c1:aa:0e:cd:cb:53:90:4a:0c:9d:c7:28:bb:4c:db:
                    0c:98:46:c8:e5:87:8f:39:2f:17:91:7c:75:1d:81:
                    f3:4c:dd:de:22:85:8a:57:5e:75:11:5c:5f:71:d0:
                    2b:83:94:38:5a:2f:ee:90:60:27:21:9f:19:0f:7b:
                    07:fd:4a:50:d5:50:39:c7:0f:13:df:12:4f:4a:8f:
                    4a:c9:ae:d1:92:db:a5:6e:1a:69:43:a5:d5:8c:a1:
                    90:62:8b:a5:c1:59:07:40:57:c4:31:06:c8:29:82:
                    16:2c:a1:f1:4f:d3:12:09:c6:df:c8:6b:14:c4:3a:
                    5f:9e:d2:d0:73:44:70:46:61:06:2d:12:f8:cd:44:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DC:8C:BB:EC:DE:DB:13:D9:DE:60:F4:96:26:A4:26:BA:67:00:EA
            X509v3 Authority Key Identifier:
                keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:ac:2d:c5:2d:a3:cb:9d:60:5e:35:7f:05:07:f8:4e:71:
         ff:d5:1b:61:fe:8e:3c:2f:0b:49:e4:bb:77:8f:6d:3e:de:57:
         33:3b:fc:19:d2:51:60:dc:23:91:0b:1e:dc:1d:65:59:e3:30:
         c9:a0:67:d3:9f:33:45:cf:ac:11:3b:46:9f:26:79:ca:78:9b:
         b8:00:5e:41:bd:35:10:91:26:bb:cb:31:d5:ec:c3:59:09:39:
         d5:c2:31:7b:5a:b3:e9:08:e1:c7:3d:8d:14:1d:51:38:6c:f3:
         16:0d:09:89:41:a1:6a:f3:6f:07:54:fc:41:04:1f:79:d8:ed:
         89:72:d1:a4:42:e4:32:99:c3:ae:c3:23:96:2d:d4:e8:47:92:
         cd:76:58:42:17:47:b3:82:9f:b8:d8:f3:b4:d7:90:e5:07:2c:
         d2:8a:14:88:d8:c2:99:14:a9:d0:6d:82:64:f1:f3:75:de:1a:
         70:20:98:48:10:73:9d:b3:ab:08:d9:7c:83:2e:99:9d:ec:c6:
         bf:d7:67:87:4d:bf:66:0c:6f:24:b7:08:73:0a:f0:a9:bc:92:
         2e:2e:7d:5c:73:90:ee:c9:5f:ee:5c:a5:f9:40:5b:7b:b2:36:
         79:a6:5b:0e:4d:50:1f:a7:32:4e:5b:33:88:09:aa:40:6e:89:
         16:ab:5c:94
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz
QkY1QzVEMTQwHhcNMjYxMDAyMjIwODMxWhcNMjYxMDA5MjIwODMxWjAYMRYwFAYD
VQQDEw02YWMwMmI2MC02Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2qaiIXcfmsAaYNdbCOP0FaX/oL+7bNKEejEJsI6UfEOivfzQXqEvpi6oKPan
+KoKHNInLoicEUGxEukcxp/seasuZMCJ2kqUPGa3abtssYOvRyuJ82n0e+9DLqBE
+uSPmpkrdMHt0gAH4BQVRzqa2S/LZr5h9iDBqg7Ny1OQSgydxyi7TNsMmEbI5YeP
OS8XkXx1HYHzTN3eIoWKV151EVxfcdArg5Q4Wi/ukGAnIZ8ZD3sH/UpQ1VA5xw8T
3xJPSo9Kya7RktulbhppQ6XVjKGQYoulwVkHQFfEMQbIKYIWLKHxT9MSCcbfyGsU
xDpfntLQc0RwRmEGLRL4zUR9YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrcjLvs
3tsT2d5g9JYmpCa6ZwDqMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD
NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY
UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm
RmU3bWRVZUJqaVk3OWNYUlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZ3ysLcUto8udYF41fwUH+E5x/9UbYf6OPC8LSeS7d49tPt5XMzv8GdJRYNwj
kQse3B1lWeMwyaBn058zRc+sETtGnyZ5ynibuABeQb01EJEmu8sx1ezDWQk51cIx
e1qz6Qjhxz2NFB1ROGzzFg0JiUGhavNvB1T8QQQfedjtiXLRpELkMpnDrsMjli3U
6EeSzXZYQhdHs4KfuNjztNeQ5Qcs0ooUiNjCmRSp0G2CZPHzdd4acCCYSBBznbOr
CNl8gy6ZnezGv9dnh02/ZgxvJLcIcwrwqbySLi59XHOQ7slf7lyl+UBbe7I2eaZb
Dk1QH6cyTlsziAmqQG6JFqtclA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:42:15 2026 by rpki-client