Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
File:                     Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft (raw, json)
Hash identifier:          9g4oXZ9WyeuGd8qkN0V8Mjrnq8bCJ5Oztf3IokSDxyM=
Subject key identifier:   5C:05:42:11:C6:79:E0:D3:19:36:5A:8E:3B:C2:9E:0A:29:D4:42:2F
Authority key identifier: 62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE
Certificate issuer:       /CN=A91EB46B/serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
Certificate serial:       0D87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
Manifest number:          0D74
Signing time:             Mon 26 Oct 2026 18:03:06 +0000
Manifest this update:     Mon 26 Oct 2026 18:03:05 +0000
Manifest next update:     Mon 02 Nov 2026 18:03:05 +0000
Files and hashes:         1: Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl (hash: ixoe9f6g2WjWsgk+6W0LFI21EBlPegWMEJKXsA2i9Vk=)
                          2: BE8369D6053711EA9A24E761C4F9AE02.roa (hash: KQXQWVKvFfDKiZ/mb3rYBqHTBLYMAEaG90VtAXLATr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl
                          rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 18:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB46B, serialNumber=622EE75436D6F2F39FB23D2CEB22337184573DFE
        Validity
            Not Before: Oct 26 18:03:05 2026 GMT
            Not After : Nov  2 18:03:05 2026 GMT
        Subject: CN=6adf95da-42f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:c2:89:a5:17:53:6a:35:6f:dd:fc:b6:b9:
                    a5:b3:a8:cc:7b:b8:c5:4d:10:26:ab:f1:3a:4b:b2:
                    4d:0e:dd:bf:0a:fe:06:23:de:67:34:73:4f:51:a1:
                    5e:ba:66:de:f2:07:29:6d:2f:4d:77:c0:f3:21:ca:
                    b1:13:6c:ae:12:17:55:5d:c9:d8:ac:c9:f3:70:17:
                    cc:49:de:1c:3a:6b:ac:c6:c4:84:e2:fe:9e:34:a9:
                    45:9f:fc:fa:98:5e:e1:dd:cf:48:5d:68:2d:15:41:
                    b5:5b:94:7a:f9:70:8e:a7:6c:18:83:25:71:7e:24:
                    67:87:75:07:12:e5:34:5c:ab:cf:ef:62:ef:04:f2:
                    70:af:15:85:c5:f8:49:07:da:e8:a0:81:c4:8c:28:
                    cd:f3:54:07:13:29:d8:e4:46:b7:aa:c7:11:48:57:
                    12:d3:c4:83:d4:d3:ad:db:4b:db:c1:ee:01:d3:da:
                    c4:e6:27:06:58:69:46:12:a1:a7:4e:f8:7c:23:d5:
                    7f:68:83:9b:21:23:89:fd:0d:45:11:7a:77:ff:06:
                    67:c2:24:9b:fe:04:80:56:14:d8:97:df:20:03:1e:
                    9b:5d:95:7c:09:48:61:52:80:92:8c:5d:89:18:fb:
                    f8:28:f1:d9:eb:03:0d:cd:1f:66:26:04:01:e2:49:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:05:42:11:C6:79:E0:D3:19:36:5A:8E:3B:C2:9E:0A:29:D4:42:2F
            X509v3 Authority Key Identifier:
                keyid:62:2E:E7:54:36:D6:F2:F3:9F:B2:3D:2C:EB:22:33:71:84:57:3D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB46B/4931EE46007D11EAB489131BC4F9AE02/Yi7nVDbW8vOfsj0s6yIzcYRXPf4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:86:70:8d:6b:2f:13:16:74:7c:f6:d6:f4:f3:f9:90:1d:3b:
         c7:5b:02:76:23:50:9a:ba:d3:ae:b4:96:e8:21:c7:fa:9e:07:
         7a:05:c1:13:17:61:22:d6:d9:57:0b:a7:c0:e5:94:14:8b:0e:
         59:fd:61:d2:ba:c7:6e:cc:ef:93:b0:91:25:52:b7:9d:a1:e1:
         a2:f6:35:72:9c:83:b5:3a:d7:ca:de:5c:b6:d7:fe:c1:af:93:
         c9:65:93:4a:21:11:96:6a:c4:f2:37:0a:03:3e:b1:b1:aa:a8:
         47:c3:70:1c:84:61:7d:5c:fd:ba:88:7b:a9:66:88:6b:72:44:
         b9:54:f4:76:c5:59:59:ac:98:bd:9d:0f:92:57:fb:47:f0:89:
         66:79:0e:b4:e8:1d:f5:4b:3c:d3:7b:49:98:bb:85:66:bc:ad:
         dd:fc:27:f4:0f:58:82:c9:cd:4b:7f:32:6f:22:e3:19:7e:88:
         27:27:66:ef:80:c8:93:5e:10:01:6e:a5:18:44:a7:05:4c:ad:
         52:bf:bd:ff:67:0a:8f:3c:99:be:48:78:a3:9f:2e:bf:84:e5:
         91:f4:3b:2a:03:a2:bd:79:fa:b1:b9:04:14:46:56:9f:26:64:
         aa:6a:da:99:8e:d1:3e:68:37:04:08:c8:1f:21:92:b0:d5:d5:
         4a:42:54:34
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI0NkIxMTAvBgNVBAUTKDYyMkVFNzU0MzZENkYyRjM5RkIyM0QyQ0VCMjIzMzcx
ODQ1NzNERkUwHhcNMjYxMDI2MTgwMzA1WhcNMjYxMTAyMTgwMzA1WjAYMRYwFAYD
VQQDEw02YWRmOTVkYS00MmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkwrCiaUXU2o1b938trmls6jMe7jFTRAmq/E6S7JNDt2/Cv4GI95nNHNPUaFe
umbe8gcpbS9Nd8DzIcqxE2yuEhdVXcnYrMnzcBfMSd4cOmusxsSE4v6eNKlFn/z6
mF7h3c9IXWgtFUG1W5R6+XCOp2wYgyVxfiRnh3UHEuU0XKvP72LvBPJwrxWFxfhJ
B9rooIHEjCjN81QHEynY5Ea3qscRSFcS08SD1NOt20vbwe4B09rE5icGWGlGEqGn
Tvh8I9V/aIObISOJ/Q1FEXp3/wZnwiSb/gSAVhTYl98gAx6bXZV8CUhhUoCSjF2J
GPv4KPHZ6wMNzR9mJgQB4knrMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFwFQhHG
eeDTGTZajjvCngop1EIvMB8GA1UdIwQYMBaAFGIu51Q21vLzn7I9LOsiM3GEVz3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjQ2Qi80OTMxRUU0NjAw
N0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2T2ZzajBzNnlJemNZUlhQ
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lpN25WRGJXOHZPZnNqMHM2eUl6Y1lSWFBmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjQ2Qi80OTMxRUU0NjAwN0QxMUVBQjQ4OTEzMUJDNEY5QUUwMi9ZaTduVkRiVzh2
T2ZzajBzNnlJemNZUlhQZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAYIZwjWsvExZ0fPbW9PP5kB07x1sCdiNQmrrTrrSW6CHH+p4HegXBExdhItbZ
VwunwOWUFIsOWf1h0rrHbszvk7CRJVK3naHhovY1cpyDtTrXyt5cttf+wa+TyWWT
SiERlmrE8jcKAz6xsaqoR8NwHIRhfVz9uoh7qWaIa3JEuVT0dsVZWayYvZ0Pklf7
R/CJZnkOtOgd9Us803tJmLuFZryt3fwn9A9YgsnNS38ybyLjGX6IJydm74DIk14Q
AW6lGESnBUytUr+9/2cKjzyZvkh4o58uv4TlkfQ7KgOivXn6sbkEFEZWnyZkqmra
mY7RPmg3BAjIHyGSsNXVSkJUNA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:18 2026 by rpki-client