Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File:                     bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier:          s5zbe0oWyCx0UkG/b3MWZtJQJgEjc19dzPnzCy5V2Q0=
Subject key identifier:   B8:44:82:B7:6A:1C:30:5A:31:62:89:61:B1:22:BB:07:AA:98:A2:4D
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer:       /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number:          87
Signing time:             Wed 23 Sep 2026 07:23:24 +0000
Manifest this update:     Wed 23 Sep 2026 07:23:24 +0000
Manifest next update:     Wed 30 Sep 2026 07:23:24 +0000
Files and hashes:         1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: qM/iYynW/UZfLH8JI/499yKswOKq4LfGHEdeIgnND1M=)
                          2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:23:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
        Validity
            Not Before: Sep 23 07:23:24 2026 GMT
            Not After : Sep 30 07:23:24 2026 GMT
        Subject: CN=6ab37e6c-178f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:e1:11:e6:8d:bb:fb:fa:57:13:1d:2a:da:
                    fb:4f:fe:2a:e8:be:f7:5a:63:af:22:9f:28:ed:27:
                    49:48:b2:e7:63:34:08:7e:35:42:ba:bb:2e:0b:6f:
                    b4:4d:69:f6:f1:cf:4f:2c:e6:cf:45:88:59:d5:fe:
                    75:39:ed:3a:68:d7:0d:09:50:b6:a0:0c:ca:74:0d:
                    4f:6b:8f:9a:98:da:fd:75:be:3f:1d:8c:34:db:8f:
                    c2:3a:77:c4:7e:f1:49:21:d1:f4:a7:9f:69:ed:c2:
                    db:76:8a:79:cf:13:5a:ff:bf:7c:a4:42:f4:d6:6f:
                    a4:84:f4:d2:e0:7a:22:d6:8e:68:be:69:84:a7:04:
                    b7:f4:20:8d:af:38:3f:db:ac:cd:9b:02:f8:e8:4f:
                    d4:ae:0f:80:22:4e:04:47:78:b8:f6:8e:df:24:4e:
                    54:51:ae:28:d0:6f:65:a1:d4:8b:87:ec:ce:7e:5c:
                    62:ec:f1:d0:bf:10:32:5e:63:cb:87:e2:ed:22:c7:
                    a7:12:50:ed:cf:27:b5:94:13:bf:f5:9c:77:4b:41:
                    28:6b:2f:f0:19:72:02:4a:fa:b4:fe:07:78:ca:62:
                    08:0c:29:24:dd:da:35:02:d8:12:69:9f:7e:8e:a5:
                    1c:03:68:b7:bd:2a:7e:46:1b:69:8e:0b:2e:6f:18:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:44:82:B7:6A:1C:30:5A:31:62:89:61:B1:22:BB:07:AA:98:A2:4D
            X509v3 Authority Key Identifier:
                keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:4d:4f:27:ae:e0:7d:e8:ec:16:a9:f4:6e:70:2d:09:97:7c:
         79:57:7f:3b:48:14:4e:fd:41:57:5e:14:58:be:78:8d:d2:4f:
         f7:35:4b:15:94:a3:37:db:4f:aa:d8:b3:09:bc:81:14:e6:bd:
         ec:5f:88:46:87:69:5d:ba:e9:4e:4f:86:40:3a:73:e9:e3:40:
         a8:1d:e8:0d:79:80:d5:f1:30:69:4e:d0:61:8c:36:ee:a4:eb:
         ab:14:76:af:8c:d3:4e:7a:aa:c6:93:73:e7:a1:c2:e8:53:a5:
         69:d1:e7:ba:18:7d:a6:7e:da:2e:25:6d:c2:42:f7:29:36:27:
         d0:b4:89:69:21:05:9f:86:02:48:ac:b5:c9:5b:a1:c2:1b:6b:
         39:69:ac:93:97:9a:24:a4:e1:ee:8d:dc:ac:61:12:ca:a8:7f:
         6f:0e:dc:ca:0e:cd:16:6a:43:de:ff:01:9f:6d:2c:e4:b6:bd:
         2f:00:3d:14:18:b2:c5:35:82:5b:cc:a3:67:a9:9a:75:9f:bb:
         ba:71:94:7a:21:55:d6:4a:6f:24:15:a6:f9:36:ac:44:11:fb:
         8e:f2:10:34:30:e9:b2:87:f1:5f:66:fb:86:14:0e:d5:dd:ad:
         9d:88:90:ff:3b:5b:17:ca:c7:c0:d8:c3:8f:08:c0:ae:bf:11:
         e2:6d:d8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:51:34 2026 by rpki-client