Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
File:                     8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json)
Hash identifier:          qGeXKN+6ovnGn0iZ5oNOsZ0ImawJpjvMWfhLWVHf/tY=
Subject key identifier:   E2:91:8A:C0:82:E3:A4:AE:CA:3F:6E:A3:4E:7C:E6:75:BE:B5:58:BA
Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70
Certificate issuer:       /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
Certificate serial:       0756
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
Manifest number:          074E
Signing time:             Tue 22 Sep 2026 21:32:46 +0000
Manifest this update:     Tue 22 Sep 2026 21:32:46 +0000
Manifest next update:     Tue 29 Sep 2026 21:32:46 +0000
Files and hashes:         1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: bxwe0WrCr89ibqkDI9ByX04kJGNNIn0/v+1k2xxQofI=)
                          2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: ette4LAwg26M5pj2ePPXPSItzIGGrF3PbLrnLGwJk9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl
                          rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470
        Validity
            Not Before: Sep 22 21:32:46 2026 GMT
            Not After : Sep 29 21:32:46 2026 GMT
        Subject: CN=6ab2f3fe-4c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:77:23:13:ed:72:6f:6f:fa:06:74:11:99:
                    b1:d3:5c:87:bb:6e:de:fd:25:f6:b4:ba:63:a0:30:
                    e3:a1:e0:d6:b9:83:12:61:5c:28:4b:ed:6d:78:70:
                    1c:94:c0:14:a6:2a:09:f5:1b:3b:e2:69:57:3b:cb:
                    fb:7b:12:05:79:cf:d7:84:89:b9:aa:c9:23:ce:f6:
                    cd:2c:80:c6:6b:ec:79:8c:1e:f4:06:8a:0a:5f:da:
                    0e:b3:5c:f3:70:bf:fa:ed:b4:fc:4e:72:e7:e6:8c:
                    07:3c:cb:84:ac:c9:d9:d4:3f:82:d2:2c:26:87:11:
                    0c:fe:dd:24:73:0c:45:77:56:bc:f0:07:c2:8e:56:
                    a4:ff:ee:9e:50:2f:f0:c3:8a:1a:e7:d9:04:81:90:
                    37:95:1e:7f:7e:ec:72:d2:d0:72:95:b2:f6:0a:9c:
                    1c:d8:56:d2:85:b7:ce:4f:80:89:e0:46:f0:71:5e:
                    6c:ef:c7:79:8c:90:5a:09:ce:9a:e2:91:55:38:58:
                    1e:a8:7f:a8:d2:a4:6d:b1:bf:99:7f:d4:ce:95:6a:
                    24:57:aa:2a:2a:5f:26:93:80:dc:42:62:84:fc:3e:
                    23:19:c8:37:03:78:10:09:fe:55:b6:8e:df:96:e2:
                    88:94:74:80:25:61:29:c7:a7:ad:1e:1a:56:fa:9f:
                    f6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:91:8A:C0:82:E3:A4:AE:CA:3F:6E:A3:4E:7C:E6:75:BE:B5:58:BA
            X509v3 Authority Key Identifier:
                keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8a:07:29:c7:2a:6c:62:eb:37:6c:b4:76:66:04:a2:c6:51:
         de:f1:db:c6:ac:e1:f9:d6:3c:3b:c5:24:c1:12:e0:5a:81:e8:
         a4:17:ee:c2:0f:d0:0b:ca:22:e5:9e:9c:bb:c8:4d:c3:6f:dd:
         00:2b:52:93:ba:fb:d9:89:31:08:98:eb:be:8c:0e:e3:9e:a3:
         b5:b3:85:09:d5:88:91:ec:b3:33:1b:dc:a5:86:e5:99:32:c7:
         6d:92:5a:e8:a6:44:93:bc:64:ef:18:a2:5a:c4:42:3f:51:ad:
         32:c4:a0:00:86:d4:43:74:35:38:c7:38:1d:bb:98:5f:64:ed:
         73:66:bc:7d:3f:38:5d:73:03:20:03:a5:e3:d9:b1:9e:6d:ec:
         bb:cd:27:e0:bf:6e:89:1c:d8:05:78:c5:fd:0a:6a:ee:c3:72:
         8b:eb:37:58:84:7c:4c:11:8b:3e:65:10:5d:ad:48:74:4d:ef:
         45:52:3b:70:81:da:64:64:30:32:12:2e:e5:fb:b7:43:0d:dc:
         09:5d:67:f1:08:e5:a0:16:ba:4e:df:f9:1d:e9:fe:a3:68:39:
         fb:e7:c7:92:6a:e0:03:7f:70:89:e4:69:fb:b2:e5:75:fa:f8:
         ab:9b:0d:0f:f8:5b:58:56:c4:f9:35:ce:13:a2:bf:ba:18:5a:
         c6:74:10:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:48:55 2026 by rpki-client