Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
File:                     BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json)
Hash identifier:          KTydtahBGg79zBqC14S0EEIxq8mf7TCLrZvbAT99a8o=
Subject key identifier:   54:6C:7F:78:FA:4E:11:22:D0:3E:66:55:8C:A7:61:97:FE:B6:A4:C8
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Certificate issuer:       /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
Manifest number:          0137
Signing time:             Sun 27 Sep 2026 06:06:34 +0000
Manifest this update:     Sun 27 Sep 2026 06:06:34 +0000
Manifest next update:     Sun 04 Oct 2026 06:06:34 +0000
Files and hashes:         1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: Pr19P7zhhdKT8oRDLVJCGG3BeetcpkC3JcWDoN5CKEk=)
                          2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=)
                          3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
        Validity
            Not Before: Sep 27 06:06:34 2026 GMT
            Not After : Oct  4 06:06:34 2026 GMT
        Subject: CN=6ab8b26a-555b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:9a:c6:58:5b:26:06:b7:68:84:ca:2d:c4:
                    c9:13:89:eb:e1:a5:eb:97:36:c1:8e:b7:52:9f:fb:
                    23:d4:c4:2c:c3:1c:7b:0f:76:d5:01:84:31:e8:6e:
                    32:3e:b6:fe:49:e8:6b:44:c4:fd:c8:5a:41:58:d5:
                    db:d5:c0:f6:e4:d3:9e:0d:c8:96:63:84:31:98:12:
                    ac:96:2f:61:c8:2d:45:e6:52:ad:ab:c3:da:13:02:
                    69:72:61:75:4e:49:3a:6a:0f:de:e5:b7:05:2b:9c:
                    9d:1c:f1:52:72:e3:b6:d4:31:18:34:1a:d6:bc:a3:
                    95:07:c5:91:81:4d:a8:f0:1f:de:6a:c9:5f:4f:70:
                    9c:5c:1c:68:97:6a:0b:c7:ba:55:2e:24:66:d7:55:
                    79:f1:e5:92:c4:50:13:ef:66:85:b4:ee:7e:41:cf:
                    81:26:2c:27:00:1b:14:a3:58:fc:b0:cc:5f:fc:c8:
                    5d:41:fe:ab:0d:1e:e5:68:44:27:4a:a9:f7:6a:eb:
                    88:b1:c6:12:81:9a:a3:9d:c9:d0:27:46:de:28:12:
                    d3:95:c5:ba:e5:de:50:5f:f4:24:31:c7:52:02:d7:
                    ee:29:6d:06:a3:17:2f:4a:13:ff:2c:ba:9c:56:d0:
                    51:30:12:e4:8a:ad:d2:54:ec:00:7d:b6:80:27:35:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6C:7F:78:FA:4E:11:22:D0:3E:66:55:8C:A7:61:97:FE:B6:A4:C8
            X509v3 Authority Key Identifier:
                keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0b:1d:4d:f1:be:90:87:76:10:75:b2:32:b1:b1:70:45:2d:
         ec:6c:49:bd:fc:9e:6c:63:e1:38:61:b7:01:f0:00:f7:e8:c2:
         33:34:e4:f1:8f:52:eb:9c:d4:61:7c:86:63:fc:a4:2b:5f:61:
         b6:fa:0f:15:26:ef:23:4f:d4:6e:8f:70:ab:58:46:c7:62:e0:
         79:2e:ad:d9:2d:e3:9e:bf:0f:2d:67:f3:a5:5b:c0:64:2d:f6:
         ac:b1:35:91:b0:b7:4c:9f:48:02:01:c8:2b:12:6c:2c:b6:5b:
         08:e7:5a:f3:26:f1:0e:f7:1e:7b:49:28:97:a7:a1:62:0d:ee:
         a8:2e:ec:20:85:d2:12:d3:08:97:b3:d7:1e:26:c1:72:ec:a1:
         21:ab:8e:d9:b3:bf:0c:33:0b:02:6c:2d:98:58:4e:76:09:a8:
         52:a7:9a:92:19:e6:c2:b7:cb:fd:16:c2:61:30:a8:de:5a:03:
         5d:97:ce:36:88:ce:5a:47:69:f5:1f:a8:1e:1b:8c:12:58:c0:
         79:93:51:bd:ec:5c:04:1c:18:4a:15:05:a4:53:1e:b2:0a:c2:
         58:1c:2e:99:a8:dc:5b:a3:cc:ee:f0:12:13:40:bb:0a:d2:2e:
         a5:6e:1f:a7:0a:03:9f:d5:88:96:1b:c8:a1:8b:c9:02:5c:b8:
         21:63:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:29:22 2026 by rpki-client