Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
File:                     bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json)
Hash identifier:          gmlu0vu6li9STWWblkJMacRxCZkNnsG/gmM5AIRr0po=
Subject key identifier:   80:21:45:AB:A8:19:18:CE:0C:20:80:D9:99:AE:E6:A5:E2:0E:40:31
Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1
Certificate issuer:       /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
Manifest number:          0151
Signing time:             Mon 27 Jul 2026 07:05:54 +0000
Manifest this update:     Mon 27 Jul 2026 07:05:53 +0000
Manifest next update:     Mon 03 Aug 2026 07:05:53 +0000
Files and hashes:         1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: 3+9mHw7oc1Qcmv5hUHY01RVB2pMrPrAzynbENP0aCbM=)
                          2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: N8OST72L0V0eTFnYcjzgV/oZzJ5hZOrN4k5ZtWUp5Q8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl
                          rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 07:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1
        Validity
            Not Before: Jul 27 07:05:53 2026 GMT
            Not After : Aug  3 07:05:53 2026 GMT
        Subject: CN=6a670352-6026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:ca:a9:0b:85:2d:40:bd:8b:80:26:13:9c:
                    a0:56:28:d2:29:c7:85:63:f9:56:02:4e:6e:06:c6:
                    15:b0:26:25:53:16:23:ea:67:e8:f0:06:b4:ca:9c:
                    a8:43:1d:58:83:5f:bd:b0:61:5c:78:7e:ba:78:10:
                    0a:fc:03:ff:a0:6e:98:60:1f:dd:3f:8f:40:b0:e6:
                    aa:fb:90:58:78:9b:6f:5d:ad:41:01:ec:87:b8:f4:
                    d8:b7:77:41:a9:39:6e:27:95:65:01:12:48:07:e5:
                    2c:50:14:df:1a:93:1f:61:f9:40:75:4a:a1:3c:13:
                    cf:4c:39:87:02:e6:42:20:84:fe:9b:2b:d3:ce:01:
                    fb:b3:c3:4e:43:44:ec:e7:9a:cf:a3:86:76:24:75:
                    9a:95:df:93:1f:c9:f5:e9:df:30:9d:27:19:6a:cf:
                    73:10:cb:4b:cd:36:dd:24:1d:27:54:f6:b6:7f:d6:
                    5e:a9:13:d6:e2:ac:af:4d:78:0c:9d:b7:f6:82:d5:
                    c2:9c:0f:33:21:f6:5e:0d:b4:17:bb:a1:57:ce:b1:
                    89:b2:fa:35:a9:9f:a6:7d:ba:5e:cb:a6:c3:b9:a0:
                    26:41:01:92:31:7e:45:95:e2:ef:84:f2:94:cc:b3:
                    90:4c:f1:b6:f7:44:85:bb:f7:3b:80:f4:f3:ee:74:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:45:AB:A8:19:18:CE:0C:20:80:D9:99:AE:E6:A5:E2:0E:40:31
            X509v3 Authority Key Identifier:
                keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ac:3b:c1:b6:6b:a6:26:94:ee:77:2e:d9:5b:ad:57:18:bd:
         6a:59:d0:5f:b2:79:1c:ea:4e:53:41:6b:89:e1:d8:87:75:36:
         81:74:12:bc:97:4b:52:3d:2e:0c:c3:44:4b:65:ae:92:3d:ed:
         7c:b9:fa:cc:5b:55:4d:5b:0b:15:2e:15:c3:30:ca:84:cd:f0:
         25:42:78:12:13:8f:3e:18:b1:06:77:88:0c:24:73:bd:da:42:
         1f:e3:d6:9f:11:75:88:0d:89:48:5d:15:59:f0:da:9c:26:2e:
         25:10:92:8e:8d:a2:d0:de:81:43:f9:4d:cf:76:90:17:17:35:
         a0:b7:a0:ff:f2:33:aa:2c:73:8b:2f:b7:9b:92:7c:24:47:59:
         e1:4a:cf:01:4f:60:a0:11:98:ff:45:78:05:f9:14:c9:af:11:
         e8:39:37:c3:96:56:bd:e7:a8:6c:78:1c:60:c4:b4:fe:84:14:
         52:36:95:9b:07:49:67:e4:27:69:02:b8:4d:1e:97:f0:55:ad:
         ab:bf:3a:31:6f:d3:85:6d:bb:e3:09:b8:db:fb:e5:55:e7:bf:
         4a:66:0b:a9:49:53:b9:8e:3e:a7:95:d2:05:37:05:6c:a7:51:
         69:6f:e0:c5:79:d7:04:c2:10:22:24:49:a3:f9:4d:3d:dc:be:
         c3:31:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:21:42 2026 by rpki-client