Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          Rx5x7zKee2tZ7oAnwEnTxM8uhYxuhpxSBgWQVurVsuA=
Subject key identifier:   E0:5B:41:98:97:65:B3:32:01:7F:B2:79:6E:7C:20:24:AA:93:18:D9
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          90
Signing time:             Mon 21 Sep 2026 07:38:04 +0000
Manifest this update:     Mon 21 Sep 2026 07:38:03 +0000
Manifest next update:     Mon 28 Sep 2026 07:38:03 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: Q4Xtfqr69OyNCBhcSi4WkOo/iEgwOcNhbPgP05s+Yzg=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Sep 21 07:38:03 2026 GMT
            Not After : Sep 28 07:38:03 2026 GMT
        Subject: CN=6ab0dedc-e623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:76:7c:e6:3b:8c:df:87:af:67:69:23:7a:
                    5e:76:aa:92:8a:bd:f9:42:c7:fa:8e:26:a3:6d:06:
                    b0:0a:1c:ec:16:a9:ae:f2:64:60:db:76:4f:1d:59:
                    86:07:e1:7f:9a:a2:1e:6a:29:47:5d:0c:1a:a1:34:
                    d0:80:86:f3:a1:f3:b8:09:3d:a2:56:d0:4f:23:39:
                    f4:06:05:b9:e3:a1:1f:87:6e:e9:85:40:9d:1b:4f:
                    2e:a0:3b:35:a3:9f:47:0f:ac:04:f6:5a:8f:18:1b:
                    8a:78:14:eb:57:5b:7d:c4:72:0f:dd:04:fa:32:b4:
                    a9:f4:3d:b6:61:d9:7c:da:b0:1a:f8:e8:87:f2:03:
                    7a:32:fc:28:f7:93:66:b7:78:ce:f6:cd:13:66:de:
                    41:a6:96:aa:77:4b:67:1f:e9:80:df:b7:63:aa:da:
                    a4:db:fa:7f:9e:22:48:e2:ed:14:a4:e3:cb:0f:b8:
                    6d:64:4e:57:36:19:47:8d:22:b5:47:a5:7c:10:07:
                    1c:72:0b:f6:52:b6:a6:44:b7:64:e1:84:92:8b:b2:
                    72:25:ec:15:ff:ab:80:ee:ae:b4:4e:9b:cc:ed:a5:
                    2f:f3:19:dd:27:58:36:9a:29:01:81:ca:34:88:69:
                    69:2e:a8:97:ce:ef:9c:ed:0a:ac:b8:86:59:4a:af:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5B:41:98:97:65:B3:32:01:7F:B2:79:6E:7C:20:24:AA:93:18:D9
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a3:63:9b:3e:fe:f3:b7:da:e7:c7:22:5f:d2:df:53:78:8f:
         b6:58:0e:b3:ea:1f:9c:5c:0c:c3:c3:4b:06:ea:00:7d:46:91:
         96:e6:e2:a5:71:d7:f3:f1:c1:6f:1a:11:fd:ad:ea:d3:38:d3:
         12:60:9e:7a:e0:e4:f3:95:b7:70:c0:f9:e4:99:92:30:5c:b3:
         9e:0e:02:7e:d8:89:68:e1:97:ba:86:35:aa:f2:a9:ec:fc:ff:
         af:ec:e9:93:40:9a:0c:86:67:a3:16:09:7e:6f:37:97:da:30:
         2f:d1:92:c9:9a:44:b5:54:15:e9:08:b9:a5:8f:75:bb:49:0d:
         71:c9:23:95:f7:bc:5e:8c:90:88:9f:ca:95:a3:39:5a:3c:9e:
         2f:fc:4b:fa:dc:8e:48:47:87:30:e5:9a:17:1e:e6:c6:da:92:
         ec:f3:a8:f4:ba:f3:85:1a:e4:39:7a:4b:06:23:68:84:48:42:
         78:d4:d7:57:b2:e0:b8:35:49:9c:aa:71:24:08:6f:0d:c9:25:
         6d:36:43:5f:ed:b1:94:12:a0:47:6b:38:c4:ad:01:b2:99:56:
         de:51:97:0b:ba:1a:13:05:5a:f8:17:22:43:2d:a6:38:86:e3:
         35:3e:e0:29:cb:14:e1:a9:31:19:31:87:ab:17:97:4a:c1:09:
         59:51:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:39:16 2026 by rpki-client