Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
File:                     BKM4-nsSbgfA74urj33BycGsMiE.mft (raw, json)
Hash identifier:          YvUuRp0Qa5GERClz77Ny6fRj5CU1XYVkd9ZpBdEg3CA=
Subject key identifier:   ED:DF:81:4C:8D:B8:D1:B9:04:6E:98:0C:EB:3B:59:5B:6C:AB:8C:D2
Authority key identifier: 04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21
Certificate issuer:       /CN=A91C146D/serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
Manifest number:          011E
Signing time:             Mon 21 Sep 2026 05:51:08 +0000
Manifest this update:     Mon 21 Sep 2026 05:51:07 +0000
Manifest next update:     Mon 28 Sep 2026 05:51:07 +0000
Files and hashes:         1: BKM4-nsSbgfA74urj33BycGsMiE.crl (hash: aeKJTRjkEuJcDLqwRCFbTJLvqKkBVawXPoSKGRy6c+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl
                          rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C146D, serialNumber=04A338FA7B126E07C0EF8BAB8F7DC1C9C1AC3221
        Validity
            Not Before: Sep 21 05:51:07 2026 GMT
            Not After : Sep 28 05:51:07 2026 GMT
        Subject: CN=6ab0c5cb-afae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:ca:2c:27:cb:a4:60:2f:3b:e2:60:08:ce:
                    b2:08:2b:7c:d8:eb:1f:15:e5:36:3a:56:70:f6:24:
                    a2:cd:a6:33:a8:93:fc:1d:7b:a0:c2:e7:77:3b:d8:
                    e0:60:df:cf:d6:ab:e0:c9:34:0f:89:13:22:21:be:
                    18:21:93:82:95:a6:ef:b9:0a:8f:be:58:a5:b5:c9:
                    10:cc:67:3e:1c:06:29:3a:ca:a0:bb:5f:7a:bc:e4:
                    19:25:fe:cb:1d:9f:c9:1d:58:98:1b:0a:b3:d2:8e:
                    ac:e3:10:48:0d:72:c1:5a:99:ea:62:6c:cc:bc:b2:
                    b9:8b:de:21:4c:a8:b9:70:40:b4:15:fa:92:da:a4:
                    d8:ce:3e:a4:5a:9b:f8:8e:93:3d:ec:9b:d1:de:69:
                    45:54:12:e1:2c:eb:18:71:05:4b:43:aa:ba:dc:d7:
                    c1:17:8c:7f:60:0e:84:37:2a:92:c0:ea:c3:ce:ff:
                    3e:3e:59:c6:e7:b3:77:a0:c1:3a:82:73:2d:84:fb:
                    36:40:82:37:df:d2:cc:05:41:d6:1a:4b:05:b2:b9:
                    8f:43:a9:a9:24:16:82:a8:4a:fb:be:4c:a6:a4:ee:
                    97:74:f2:d7:c0:78:d9:90:c5:2d:45:54:fd:95:d2:
                    6d:52:2e:ae:a6:6b:2d:4a:af:34:6a:9b:21:04:de:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DF:81:4C:8D:B8:D1:B9:04:6E:98:0C:EB:3B:59:5B:6C:AB:8C:D2
            X509v3 Authority Key Identifier:
                keyid:04:A3:38:FA:7B:12:6E:07:C0:EF:8B:AB:8F:7D:C1:C9:C1:AC:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKM4-nsSbgfA74urj33BycGsMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/F4D5A67E003711F0BBD72475C4F9AE02/BKM4-nsSbgfA74urj33BycGsMiE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:89:e2:61:46:61:4b:07:eb:9e:7e:00:c4:5e:36:82:15:7f:
         74:23:25:52:57:d3:ef:78:fe:62:84:3f:d9:d2:18:ea:07:84:
         c4:b7:38:72:75:08:e3:c3:15:cc:95:d8:a6:a0:7c:75:18:e4:
         d0:2c:86:09:45:58:01:e9:86:14:65:b7:e2:eb:41:bb:26:87:
         21:63:ac:f2:0c:b1:c4:6b:4d:65:fd:78:fe:43:2e:3e:44:0d:
         79:68:5f:51:73:20:ea:b4:9b:cf:4b:38:bd:55:8e:c6:cf:5a:
         3d:70:39:d2:bf:66:f7:1c:9a:a6:47:7d:b9:3e:be:77:73:ad:
         f7:e1:78:79:ec:6d:c8:69:b0:a2:71:9c:b2:f6:cb:bd:7b:78:
         85:16:6f:d1:a6:21:75:b6:54:eb:91:42:bc:31:43:e7:54:40:
         dc:a4:a9:b1:fd:bd:a0:df:ca:ff:6a:e5:b7:9e:ad:64:88:32:
         2f:89:3b:54:2e:da:13:0b:1d:7d:7f:65:51:b4:6d:6f:b1:e2:
         c4:87:19:97:1d:ca:cf:55:ce:35:fc:e9:cb:6d:6a:78:ef:0e:
         1e:83:01:82:43:20:69:63:93:38:0d:02:8a:92:1f:75:66:30:
         30:5f:fc:31:ef:9b:df:ae:57:9d:af:e2:37:3a:90:d6:64:c5:
         00:54:ca:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:02:22 2026 by rpki-client