Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
File:                     b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json)
Hash identifier:          edCnv4w3gD0OyFbVteB2A9psZ0psa7HLeKb4NWItST8=
Subject key identifier:   8E:81:E4:1C:A4:AE:40:B8:BD:B3:31:52:81:56:60:1C:64:C2:4C:AC
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Certificate issuer:       /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
Manifest number:          FB
Signing time:             Mon 21 Sep 2026 06:13:33 +0000
Manifest this update:     Mon 21 Sep 2026 06:13:32 +0000
Manifest next update:     Mon 28 Sep 2026 06:13:32 +0000
Files and hashes:         1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: pyPseaHEE39RN/2j2DOWFiudUOc6R9ILHJfZbodOJD0=)
                          2: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: EWbmDsTGqQLpUfNOlcyjqkg7ey8/2rO6qBfbLaQNH74=)
                          3: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: THMYN1koeOfwnbK8AGxlReff3pZqD6xwEXO++zbayH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
                          rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
        Validity
            Not Before: Sep 21 06:13:32 2026 GMT
            Not After : Sep 28 06:13:32 2026 GMT
        Subject: CN=6ab0cb0d-0e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:94:9e:ec:ae:d4:35:ba:17:02:f4:66:2c:
                    b5:37:e3:dc:ce:6c:54:fb:f1:30:b2:3c:78:d5:8b:
                    ca:30:8f:ce:40:ab:89:b3:8a:60:bd:f8:b1:77:79:
                    da:88:77:1a:62:25:63:db:28:a3:06:14:51:85:a0:
                    03:ac:1a:cc:10:2e:02:70:f7:59:15:d4:91:8d:6d:
                    21:7c:cc:78:3b:de:f5:eb:2c:52:b9:14:e4:4b:09:
                    8e:c2:f7:17:0a:21:1b:e1:a7:b7:d2:3e:02:4c:71:
                    48:0f:5c:35:39:62:a0:50:c1:14:e3:4a:2a:f2:da:
                    d4:b4:8e:2b:9e:7b:9a:1e:3a:1a:be:4f:ae:ae:57:
                    bd:cb:30:d9:26:10:db:16:f5:b2:86:86:12:d1:02:
                    71:c3:6e:2f:f6:cf:e5:a0:95:3c:a6:c1:ae:62:d4:
                    de:12:bf:e0:09:fc:a2:69:dd:e5:58:e4:5a:2f:93:
                    55:e8:e5:fe:9d:34:cb:a3:98:9b:cc:c1:e8:df:22:
                    6c:2e:da:36:08:10:35:38:c7:da:98:23:74:f6:a4:
                    4b:4a:83:e0:67:a5:65:c9:50:fe:2f:19:da:2e:8f:
                    66:85:0d:25:43:7b:5a:06:a4:f6:40:71:4f:c8:37:
                    32:06:1a:58:f8:ab:05:de:3b:38:91:85:88:da:80:
                    46:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:E4:1C:A4:AE:40:B8:BD:B3:31:52:81:56:60:1C:64:C2:4C:AC
            X509v3 Authority Key Identifier:
                keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:99:81:f0:d8:91:5e:28:2f:4b:98:b2:27:89:41:fc:74:5c:
         fd:7b:6b:a9:3f:5b:4a:6a:44:9c:95:de:1a:23:ad:00:b6:c9:
         ce:6f:99:ec:64:2c:9b:86:e8:26:65:9d:e8:54:78:8c:b1:ae:
         c7:9d:14:41:ec:b3:39:a9:08:58:60:b2:e4:7c:6f:9a:39:69:
         c4:b6:4b:1c:4c:ee:00:49:e5:7a:1a:10:a2:12:b2:ce:78:81:
         00:fe:dc:da:a3:b4:8e:5b:6d:8b:77:e9:35:f4:8c:eb:65:c7:
         0f:c9:1c:4b:10:7d:58:fd:08:88:81:5c:1e:90:9e:a7:d5:fd:
         50:5d:b9:c4:52:e9:93:15:2a:f6:33:dc:a8:44:1a:29:81:20:
         fa:39:46:ad:74:69:4a:d2:8c:b3:d8:6a:e4:95:c0:39:65:ff:
         2a:6e:5d:83:26:ed:12:4c:ea:29:46:61:b0:f5:2f:61:71:02:
         77:4b:89:af:06:df:32:84:0b:0a:2c:5c:d4:0e:88:85:b3:bc:
         b3:2e:4f:26:61:fa:4b:90:61:68:a8:7d:2d:24:d1:8f:93:41:
         c3:08:37:48:f3:9b:1d:28:a3:91:dd:c6:a9:4d:b3:c5:2e:2e:
         7c:bc:c0:42:13:f2:cd:c6:ca:da:bf:ab:cc:4d:42:56:75:3c:
         e0:2c:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:19:28 2026 by rpki-client