Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
File:                     D429p9DJoeyhlFxhtykg9aoOlGc.mft (raw, json)
Hash identifier:          mEmw2hSl9SbMGGOzYR9z/ScDBOXf2pKw4qoHqGt2wkM=
Subject key identifier:   11:11:69:8B:A5:80:0E:89:E7:F2:72:97:A3:E0:C2:56:35:6D:FD:2A
Authority key identifier: 0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67
Certificate issuer:       /CN=A91FAF20/serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
Certificate serial:       1CF1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
Manifest number:          1CDB
Signing time:             Wed 30 Sep 2026 16:15:45 +0000
Manifest this update:     Wed 30 Sep 2026 16:15:44 +0000
Manifest next update:     Wed 07 Oct 2026 16:15:44 +0000
Files and hashes:         1: D429p9DJoeyhlFxhtykg9aoOlGc.crl (hash: zB9IIkDbgQVEIH4maTqZ5Qqd2K6iI9aqJn3T2zvYm3E=)
                          2: D59EA6F4F5C611E6A4FFEF0AC4F9AE02.roa (hash: Mltlh2bx7WYK1xzaK+H07Yqp+mKuF+w3gv8nIlWhSn8=)
                          3: C3ACDB568E9311E9AA8A2877C4F9AE02.roa (hash: GM2/Zg+eI19YNP6sUwovNgmANsfWwnnAjBpybeU+09Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl
                          rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 16:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7409 (0x1cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAF20, serialNumber=0F8DBDA7D0C9A1ECA1945C61B72920F5AA0E9467
        Validity
            Not Before: Sep 30 16:15:44 2026 GMT
            Not After : Oct  7 16:15:44 2026 GMT
        Subject: CN=6abd35b1-4ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:e3:03:0a:e4:c8:54:f0:68:dd:d1:a6:4c:
                    9d:e4:ea:d2:97:b7:c7:d7:a9:f4:b5:c6:45:42:59:
                    9a:19:2e:19:90:d4:55:8a:3b:a0:51:cb:8e:d2:4a:
                    3d:12:f5:be:dc:39:f8:a6:cb:76:ec:83:0e:e4:ee:
                    69:43:fe:3b:77:39:e4:18:5b:75:26:10:90:52:13:
                    f0:10:a2:ed:c6:88:45:4a:39:56:76:24:72:ad:df:
                    49:52:58:46:73:db:67:67:06:2f:48:20:6f:b1:3e:
                    c7:34:4d:b1:15:f1:26:28:03:da:01:81:b8:15:f9:
                    4d:68:66:9e:c7:16:f0:26:4d:68:11:a1:00:26:78:
                    e4:6f:1c:aa:e4:cb:47:bf:b6:a1:f3:2b:1f:56:bb:
                    9a:f4:9e:87:ea:9e:ef:0e:d6:7b:40:ff:15:51:12:
                    ab:99:6f:66:ec:e8:90:6d:8d:07:49:ad:dc:60:ad:
                    11:a5:81:df:58:04:39:40:1a:2e:69:a3:06:e7:b1:
                    0a:06:00:bf:c8:9b:16:58:60:16:80:23:24:a1:3a:
                    5e:25:11:37:a7:3e:2d:01:b3:b5:3f:5e:26:72:cf:
                    e6:6b:71:2f:cb:dd:84:6b:a6:b7:0e:41:43:73:13:
                    23:b5:43:ce:96:83:b3:2e:40:58:62:f5:8e:ea:95:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:11:69:8B:A5:80:0E:89:E7:F2:72:97:A3:E0:C2:56:35:6D:FD:2A
            X509v3 Authority Key Identifier:
                keyid:0F:8D:BD:A7:D0:C9:A1:EC:A1:94:5C:61:B7:29:20:F5:AA:0E:94:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D429p9DJoeyhlFxhtykg9aoOlGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAF20/65A9A242F5C411E68AAA0085C4F9AE02/D429p9DJoeyhlFxhtykg9aoOlGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:5c:8d:67:9c:be:48:a9:e0:a6:7f:ac:e0:2c:f9:5f:08:
         19:ee:6f:ee:65:21:9f:73:c0:4f:07:b7:7e:7b:83:51:04:d5:
         8f:cb:47:54:07:95:68:57:b5:ff:d1:b8:d7:e5:39:88:ff:2c:
         39:68:25:d4:2d:ff:a2:bc:12:61:7a:97:7e:d0:43:db:b3:63:
         e7:98:93:7e:20:25:8c:55:99:ee:a0:98:9e:b2:58:9b:8e:1d:
         c2:7d:0e:61:ad:a4:c9:cd:3d:9d:92:d6:c9:4b:22:b0:2f:f4:
         24:84:e0:b8:9e:8e:81:96:2a:22:ee:03:8f:0f:91:ec:6d:60:
         1c:0e:14:ac:4b:76:46:0c:6d:5f:20:e1:16:74:6c:11:87:df:
         70:66:73:dc:3c:6a:ce:d2:fe:c8:f0:05:62:4f:03:88:e6:57:
         b9:c0:a8:70:fb:f2:03:20:bc:92:dc:4c:4a:d4:4b:2f:be:20:
         64:f5:47:2a:ba:2b:86:23:fe:c2:f9:48:fa:e7:a1:ee:9d:20:
         62:1c:6f:88:55:c9:e4:e5:07:5a:d7:d9:58:82:13:4d:3f:a5:
         c8:1b:8d:37:c0:3f:ac:6d:0b:34:77:3e:af:23:3a:f0:cf:73:
         48:cb:8a:26:fe:e5:e5:69:05:8e:a0:fb:0b:cc:15:19:69:e1:
         0f:6e:8f:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICHPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFGMjAxMTAvBgNVBAUTKDBGOERCREE3RDBDOUExRUNBMTk0NUM2MUI3MjkyMEY1
QUEwRTk0NjcwHhcNMjYwOTMwMTYxNTQ0WhcNMjYxMDA3MTYxNTQ0WjAYMRYwFAYD
VQQDEw02YWJkMzViMS00YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBzjAwrkyFTwaN3Rpkyd5OrSl7fH16n0tcZFQlmaGS4ZkNRVijugUcuO0ko9
EvW+3Dn4pst27IMO5O5pQ/47dznkGFt1JhCQUhPwEKLtxohFSjlWdiRyrd9JUlhG
c9tnZwYvSCBvsT7HNE2xFfEmKAPaAYG4FflNaGaexxbwJk1oEaEAJnjkbxyq5MtH
v7ah8ysfVrua9J6H6p7vDtZ7QP8VURKrmW9m7OiQbY0HSa3cYK0RpYHfWAQ5QBou
aaMG57EKBgC/yJsWWGAWgCMkoTpeJRE3pz4tAbO1P14mcs/ma3Evy92Ea6a3DkFD
cxMjtUPOloOzLkBYYvWO6pWExwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBERaYul
gA6J5/Jyl6PgwlY1bf0qMB8GA1UdIwQYMBaAFA+NvafQyaHsoZRcYbcpIPWqDpRn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUYyMC82NUE5QTI0MkY1
QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9leWhsRnhodHlrZzlhb09s
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q0MjlwOURKb2V5aGxGeGh0eWtnOWFvT2xHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUYyMC82NUE5QTI0MkY1QzQxMUU2OEFBQTAwODVDNEY5QUUwMi9ENDI5cDlESm9l
eWhsRnhodHlrZzlhb09sR2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4NcjWecvkip4KZ/rOAs+V8IGe5v7mUhn3PATwe3fnuDUQTVj8tHVAeVaFe1
/9G41+U5iP8sOWgl1C3/orwSYXqXftBD27Nj55iTfiAljFWZ7qCYnrJYm44dwn0O
Ya2kyc09nZLWyUsisC/0JITguJ6OgZYqIu4Djw+R7G1gHA4UrEt2RgxtXyDhFnRs
EYffcGZz3DxqztL+yPAFYk8DiOZXucCocPvyAyC8ktxMStRLL74gZPVHKrorhiP+
wvlI+ueh7p0gYhxviFXJ5OUHWtfZWIITTT+lyBuNN8A/rG0LNHc+ryM68M9zSMuK
Jv7l5WkFjqD7C8wVGWnhD26Pww==
-----END CERTIFICATE-----
Generated at Thu Oct 1 22:38:34 2026 by rpki-client