Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
File:                     bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json)
Hash identifier:          wUzYjvyRAP65SEsvUZ1PSAfzp2LMupdJvx4DAq2Eduw=
Subject key identifier:   7B:67:78:48:02:22:FE:1F:D8:EC:0E:17:6A:19:37:D1:6B:5C:3C:F2
Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D
Certificate issuer:       /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
Manifest number:          015F
Signing time:             Sun 11 Oct 2026 05:45:03 +0000
Manifest this update:     Sun 11 Oct 2026 05:45:02 +0000
Manifest next update:     Sun 18 Oct 2026 05:45:02 +0000
Files and hashes:         1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: M0/ySyn7YNsq9InHJfwuC46Rb210hzuXnDxI+vyd3bg=)
                          2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: nV38DqB6S2s+obaWtL39HR2W0RXsAZejFz8xEU6bYCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl
                          rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D
        Validity
            Not Before: Oct 11 05:45:02 2026 GMT
            Not After : Oct 18 05:45:02 2026 GMT
        Subject: CN=6acb225e-9753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:6f:ec:85:d2:40:bb:90:01:d2:98:63:63:
                    bf:20:5c:61:41:b3:ce:f7:f8:3d:be:bf:9b:3a:a5:
                    d6:2e:ed:b2:13:0b:0c:aa:8e:9f:56:95:24:6b:01:
                    ed:d3:f0:23:7b:fd:09:86:f7:b3:cf:45:ed:a8:96:
                    2e:52:cf:51:97:07:05:c5:20:a4:bc:c9:af:87:28:
                    4a:21:07:da:f9:b8:3b:ac:84:9c:8a:ab:54:bc:e0:
                    82:ed:cb:2b:0c:c3:07:2a:a3:4e:ad:b0:df:ea:fe:
                    ed:6a:f1:70:a3:b5:5e:c9:37:f2:0a:d9:27:cf:ec:
                    42:0c:dc:95:6d:9c:e4:3c:29:c6:b0:b2:cf:85:91:
                    a8:8f:b3:43:1b:29:54:42:42:d2:23:0f:64:92:23:
                    b0:43:24:2d:a5:73:b9:7f:73:ee:22:77:0e:54:94:
                    3a:8b:e2:4b:22:d6:3b:66:5a:73:7b:aa:c0:e4:88:
                    20:06:44:b4:63:9c:a1:f9:fb:13:70:c1:a1:52:16:
                    a6:2f:c8:8a:c4:31:10:a6:9c:f9:42:9c:21:2f:68:
                    b5:ea:71:12:7e:cc:0a:ab:8f:89:30:3e:d6:e2:0b:
                    b6:58:c6:e9:05:f5:6e:61:90:88:d8:03:e2:22:a3:
                    96:05:77:f3:63:78:ec:47:ca:09:35:1a:9a:b8:35:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:78:48:02:22:FE:1F:D8:EC:0E:17:6A:19:37:D1:6B:5C:3C:F2
            X509v3 Authority Key Identifier:
                keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bb:18:f2:88:f9:55:cf:a7:1f:a8:44:35:dd:ce:cc:5a:5d:
         59:c8:a7:cb:92:22:98:41:f6:72:0e:3e:ff:a0:0c:3d:43:64:
         ad:68:8c:27:0b:ff:bd:07:32:fd:43:58:7b:a0:b8:29:83:60:
         67:b7:31:1d:4f:7a:11:9b:20:5d:0c:3c:30:d2:e4:ff:31:0a:
         66:b2:96:91:24:63:40:d2:b7:c6:1a:8d:8f:7b:2d:47:05:0e:
         60:db:a6:00:6a:b7:82:8f:e0:60:2c:e5:d1:b0:e9:70:2a:18:
         45:9c:68:1d:31:36:39:99:38:4b:69:e9:6c:51:27:b5:6f:a0:
         94:99:18:6c:66:14:80:0c:63:87:76:57:58:a7:1f:ad:c9:03:
         ba:db:58:e1:65:83:9e:6f:54:e6:dc:28:98:d0:b9:ed:84:f7:
         32:de:6f:f6:a6:9c:d5:5f:24:63:32:6f:84:cd:a9:99:c0:33:
         e1:18:77:57:91:d7:c3:b6:9b:4c:02:07:85:c7:8a:d7:8e:4e:
         f0:d1:68:13:62:ef:33:1b:7f:d0:ae:8b:7c:42:29:0f:9a:40:
         c6:a1:7b:56:1e:51:9c:b8:5f:72:6d:4f:1a:6f:56:7f:fd:7b:
         e5:f3:b3:07:2e:a7:d1:26:82:fa:98:f6:14:b1:94:cd:00:42:
         88:93:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:18:11 2026 by rpki-client