Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File:                     RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier:          QLj7wgFhVpES40Ug9mBgty+/Hmwb4vJLGHqRAaQe0qY=
Subject key identifier:   81:F8:CA:AC:E1:A0:7C:90:B1:8F:78:3C:36:22:79:26:13:B7:4C:23
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer:       /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial:       086A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number:          10BE
Signing time:             Sun 20 Sep 2026 20:49:37 +0000
Manifest this update:     Sun 20 Sep 2026 20:49:37 +0000
Manifest next update:     Sun 27 Sep 2026 20:49:37 +0000
Files and hashes:         1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: SsLLBQ39Da+M1qB6pemJ4ulxn+sReB2ATySa8nPz2ts=)
                          2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: jUqnFx87IlStP4kkY9M0idgA/Hwc78g7kwMihGngNEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
        Validity
            Not Before: Sep 20 20:49:37 2026 GMT
            Not After : Sep 27 20:49:37 2026 GMT
        Subject: CN=6ab046e1-5b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:28:7f:27:ad:8c:2c:ee:ea:31:18:c7:95:
                    fa:c0:5c:48:28:26:12:ea:e3:b1:4b:71:47:c0:1f:
                    be:c2:72:5a:60:77:2d:90:20:95:dc:00:30:33:6d:
                    0e:b4:83:25:04:6e:59:b1:ee:a5:07:12:0b:97:57:
                    41:03:3c:65:53:04:9c:a5:8f:03:6c:28:37:36:e5:
                    39:4c:8a:13:ce:ed:47:b7:3d:f2:1c:22:22:23:be:
                    ff:a8:cf:86:8f:e1:90:b6:31:4a:d3:99:86:d9:ef:
                    f8:0a:a6:60:47:5d:c8:d6:da:d8:6c:a8:dc:45:58:
                    c1:c1:59:d0:47:1d:bf:36:39:d3:13:61:2f:48:82:
                    b8:6a:e5:b2:56:08:ed:cd:e7:5e:31:19:67:42:cc:
                    8e:ab:3b:d1:eb:c3:c3:28:86:da:d3:98:b1:75:05:
                    ac:6d:7c:df:de:7c:a4:eb:70:12:af:28:38:2f:8e:
                    0f:c7:db:78:d8:d1:c6:65:b1:57:b8:4b:6e:3f:07:
                    2d:40:97:9c:c3:19:a7:fc:ab:f7:33:d5:72:74:98:
                    28:88:13:46:fa:41:36:1a:2c:29:4d:bb:25:9d:43:
                    76:f7:71:7b:9d:6b:8d:1c:d7:5a:e3:b6:f8:2e:7c:
                    1f:26:40:db:e7:0c:be:d8:c0:e0:d1:e6:93:58:55:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F8:CA:AC:E1:A0:7C:90:B1:8F:78:3C:36:22:79:26:13:B7:4C:23
            X509v3 Authority Key Identifier:
                keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:32:a6:39:16:f4:59:cf:e3:fa:53:70:61:81:00:76:e3:
         77:0d:b1:c0:91:41:14:d9:f2:e7:ff:29:a4:71:4a:1a:95:8d:
         74:61:1d:e2:34:8a:0f:66:53:5c:11:98:e1:72:07:52:c3:d5:
         a3:4a:58:c5:b0:d6:39:88:fc:77:c6:3b:6f:43:4d:85:fb:bc:
         c0:aa:d3:4e:ed:e6:9f:45:79:14:3f:ca:11:4c:8f:2d:25:12:
         6f:c5:f9:83:de:aa:91:ba:a8:77:82:ab:24:b7:bd:db:c3:6d:
         12:bf:7f:ba:a4:fc:fb:ea:2a:76:c4:9f:c0:c0:70:55:9d:30:
         e7:ca:e1:0e:00:ba:5e:87:a0:f7:7f:06:75:15:e2:67:4c:7b:
         0a:28:c3:b2:d8:72:46:3a:ed:da:a0:7b:8d:71:36:19:f6:38:
         61:be:ee:67:d6:a3:74:cb:f4:84:46:aa:75:29:a3:fe:23:96:
         61:cf:f9:0c:35:70:24:88:fe:a6:7c:86:0c:ad:a8:92:7f:63:
         0f:1d:4b:19:af:0d:d1:d9:49:fb:80:c6:30:f0:b0:90:75:9b:
         a2:aa:27:be:84:f0:b9:9a:26:49:2c:52:3e:9d:4f:03:30:38:
         a5:b4:b7:3b:ca:fd:f4:47:fc:bd:a4:22:c3:af:e1:6f:d5:e9:
         73:ab:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:15:50 2026 by rpki-client