Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File:                     bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier:          wfiiXrXtKi+tCt9JSTc4AyDrY3wBz8Ra0Y8zLYNb/98=
Subject key identifier:   0D:77:79:5A:4A:7D:46:DA:DB:A4:3A:D4:B5:6D:81:BC:1C:E3:AD:5B
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer:       /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial:       0349
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number:          0342
Signing time:             Tue 13 Oct 2026 01:08:31 +0000
Manifest this update:     Tue 13 Oct 2026 01:08:31 +0000
Manifest next update:     Tue 20 Oct 2026 01:08:31 +0000
Files and hashes:         1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: gKsCSQf24fDO9e2DljrCwzA15Xfohoinz8GkaYKPXhw=)
                          2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
        Validity
            Not Before: Oct 13 01:08:31 2026 GMT
            Not After : Oct 20 01:08:31 2026 GMT
        Subject: CN=6acd848f-82f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:65:e2:82:f4:97:80:98:4c:bc:2a:85:39:
                    d4:ce:f7:bb:5b:ce:7d:10:4e:18:82:5b:1b:fa:32:
                    ea:4a:4f:2c:46:30:42:59:0d:47:8f:39:d7:04:58:
                    a0:d7:14:9c:00:f4:90:9f:6e:86:2e:15:dd:ae:b7:
                    1a:22:b5:7c:4c:66:a2:93:c7:9c:b5:a8:98:a7:9c:
                    a6:ee:f0:74:c5:55:0e:02:d1:95:ba:08:f6:46:5a:
                    a2:d6:60:45:93:ba:f9:51:5d:92:d4:be:39:86:5e:
                    e8:c7:ca:06:4d:25:80:3a:fd:45:98:51:c7:fe:af:
                    1a:e7:91:9c:cc:d0:a4:bb:9a:f7:8a:d0:1d:72:63:
                    72:a2:18:3b:e5:0e:eb:0f:a0:a4:a8:0a:34:5e:7b:
                    31:54:00:75:8d:59:7b:ed:fb:c4:95:e0:b5:ba:ad:
                    cc:fa:9e:c3:e6:ce:3a:ec:05:35:a2:f9:0b:86:5d:
                    c0:10:84:0f:64:3d:0e:ee:cd:ca:56:44:d6:85:2c:
                    88:15:d6:39:7a:26:86:1a:62:4c:37:3f:94:09:e7:
                    40:b0:18:66:a3:16:91:e8:07:8a:a1:44:d4:cb:51:
                    02:67:40:c5:d4:34:18:92:24:67:4b:8e:01:41:f6:
                    2a:60:1b:1d:7b:1b:6e:7a:29:0b:a2:15:2d:18:a0:
                    90:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:79:5A:4A:7D:46:DA:DB:A4:3A:D4:B5:6D:81:BC:1C:E3:AD:5B
            X509v3 Authority Key Identifier:
                keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:6f:b8:df:2e:73:eb:20:d8:90:be:3d:18:95:64:59:c6:5a:
         03:28:e8:43:b3:a1:9f:ff:23:f7:07:fa:14:2c:80:b9:62:de:
         7d:7f:7f:19:6a:65:18:e2:16:5f:93:d8:d5:5c:9e:ab:f3:b3:
         c4:1b:a7:57:f8:7b:ee:fc:65:96:c4:64:85:9a:e8:c7:4f:42:
         ad:48:82:68:ca:c3:05:a4:ce:f8:4f:fa:b6:8d:10:46:7b:b9:
         03:5b:12:e2:50:e9:76:5c:d9:5d:06:ed:a3:fd:39:79:62:4d:
         2b:3e:7b:8a:e2:55:d8:ea:49:f9:b9:c4:39:cd:43:7d:c1:ba:
         0a:a4:2b:84:07:28:8a:01:7b:dd:50:60:7c:4f:a6:30:75:93:
         c0:8c:30:9e:e6:01:91:92:5c:e2:db:76:45:6f:03:3c:bb:99:
         45:72:a4:7b:df:54:ce:14:55:6f:4b:e3:69:b8:57:42:33:5a:
         2d:19:cf:10:a6:2f:56:c8:3e:bd:6f:f0:f5:59:bf:52:90:b5:
         27:6a:cd:ed:7d:54:ce:17:09:d9:50:6b:17:9d:07:61:b7:c4:
         57:aa:1f:e6:9f:0c:f2:81:ac:88:4f:69:b8:62:5d:7b:2a:1f:
         8c:f8:07:2c:ec:d8:a1:22:ad:92:18:64:19:16:a7:73:6a:1d:
         7f:4f:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:46:41 2026 by rpki-client