Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File:                     bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier:          lowPxkVatgD68S3QUEW3hQXUM9pwQndKzinSq5+SyMI=
Subject key identifier:   C6:54:09:BD:0E:27:53:E0:D9:36:A3:A8:81:15:5B:BE:56:58:B2:86
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number:          E1
Signing time:             Fri 09 Oct 2026 07:16:42 +0000
Manifest this update:     Fri 09 Oct 2026 07:16:41 +0000
Manifest next update:     Fri 16 Oct 2026 07:16:41 +0000
Files and hashes:         1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: bnNGv1Mxx1s6ajsOJqEwcptHuhc4XGzS67j4rLzMiP0=)
                          2: B25E5954768D11F091768048C4F9AE02.roa (hash: RC9a3zws+tyoLCWQ6sQTe148dGdXOqUjKpkkEG6FaAo=)
                          3: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: osWTaD90eaUod4M2mtFUGx/ILvZVLt6yce2mfjd99p4=)
                          4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: qht6l7pdsmXWxFYAqN2NfB4bqAV73xmMQkWh/+NgtnQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Oct  9 07:16:41 2026 GMT
            Not After : Oct 16 07:16:41 2026 GMT
        Subject: CN=6ac894da-553a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:1e:e4:c4:3e:41:1c:bd:81:f3:13:a3:cd:
                    15:a5:bf:52:4f:7b:18:cb:79:0c:ad:4c:8c:b4:6b:
                    e0:af:49:1e:75:df:d7:1b:5d:38:1e:e0:73:db:f6:
                    a8:d4:20:88:ae:8c:49:00:22:3d:a1:a6:c8:f2:79:
                    a8:30:d2:fb:20:d3:58:d2:3d:8b:0d:b3:ec:4a:b9:
                    49:35:14:bf:0d:fa:a0:df:4f:f5:f6:4a:59:d5:ed:
                    d8:f5:08:2f:bc:95:62:ea:2d:23:77:72:75:dc:22:
                    c3:a3:5f:26:79:bf:9f:d8:30:79:42:b7:2f:fd:23:
                    6e:0c:34:b2:31:17:d3:de:39:dd:87:5d:2a:c5:03:
                    ef:16:b5:0f:71:a9:f2:f5:46:29:58:d4:f6:24:08:
                    2c:68:b1:9e:4a:65:e8:40:c0:23:13:58:a9:3d:ec:
                    93:c6:69:3e:24:e8:bc:56:d1:ec:cf:92:03:7e:3a:
                    d9:0f:d2:e7:0a:a7:ec:44:d9:bb:9d:10:51:c7:72:
                    d5:dd:70:68:01:3f:41:0c:ad:36:61:41:9b:85:87:
                    aa:a3:8b:d1:78:bd:75:aa:1a:70:bd:37:6e:b1:00:
                    c1:09:f1:9a:af:c3:04:29:eb:35:81:a4:a1:81:1c:
                    b5:6c:d4:3e:33:0f:79:b8:68:98:4f:00:1e:5a:06:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:09:BD:0E:27:53:E0:D9:36:A3:A8:81:15:5B:BE:56:58:B2:86
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:b3:ce:ca:31:2f:d8:11:71:f2:f3:52:c8:18:08:e3:f3:
         95:eb:17:a3:dc:5d:01:96:90:a2:64:e0:a1:71:d1:34:8e:8c:
         fe:5d:b2:af:bb:40:28:5e:27:32:57:f6:9e:12:3f:20:92:30:
         09:5a:a3:43:59:65:0d:7e:3a:54:07:08:b3:26:54:3e:a4:4f:
         41:2f:e1:d9:74:48:3c:54:8c:58:4b:72:06:13:7b:00:49:58:
         7f:61:85:77:be:e4:95:be:40:96:6a:1d:90:2b:cf:f4:c7:ac:
         2d:21:04:0e:20:1b:ba:49:a4:5d:68:7b:27:74:cd:00:e2:78:
         5f:45:67:9c:1f:ee:14:a3:6c:dd:45:d2:93:f4:74:cb:72:12:
         8f:3b:4a:6e:45:89:df:48:db:28:aa:65:fa:49:ca:1d:50:c9:
         4e:0a:06:90:e6:69:a6:b5:87:09:e8:ce:7e:8d:82:e4:c0:45:
         af:fc:95:11:90:8f:d1:38:d0:87:f6:13:db:73:b2:21:9a:8b:
         e4:f9:c2:50:39:bc:cc:45:1b:12:54:63:26:a7:dc:62:ef:16:
         bf:d3:a4:5e:29:a0:39:07:f1:30:1a:2b:dd:27:7b:d5:02:cf:
         0f:f8:81:d2:ca:12:4d:9c:99:c2:fe:b3:cf:d6:b4:83:f9:d1:
         dc:dd:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:28:04 2026 by rpki-client