Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File:                     1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier:          kjMj3LJlO1QUIoP8fdqcy2w+HVkVjr2Pztf9+3raU+A=
Subject key identifier:   9C:15:8B:23:6F:9E:D4:9D:82:9B:C6:E3:1A:FF:B8:83:D2:59:45:69
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer:       /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial:       088E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number:          0885
Signing time:             Sun 20 Sep 2026 20:40:17 +0000
Manifest this update:     Sun 20 Sep 2026 20:40:17 +0000
Manifest next update:     Sun 27 Sep 2026 20:40:17 +0000
Files and hashes:         1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: MlRdPD3ZWhrg2wpOXJx/GsXTytGX7BoQOYHU/KxfUIU=)
                          2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: e9Lu8flwsgrgepqCcx7rLX3W9le7mADkxpNTO2DEgOA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 20:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
        Validity
            Not Before: Sep 20 20:40:17 2026 GMT
            Not After : Sep 27 20:40:17 2026 GMT
        Subject: CN=6ab044b1-58c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:95:8e:6c:af:0c:0d:18:72:44:0a:fc:ff:58:
                    86:af:61:3c:07:76:de:7e:21:2b:3a:98:39:c6:f1:
                    56:33:63:4d:22:95:df:16:a6:b2:d2:38:45:ee:aa:
                    df:b2:b5:bd:a1:1b:63:bd:08:31:d0:3d:04:a7:99:
                    76:ab:1e:a0:a7:c1:28:a3:7b:f7:4e:8e:dd:3f:db:
                    46:54:92:c9:1a:ba:aa:53:4f:1c:ee:c9:97:7f:28:
                    f5:85:9b:11:43:22:07:3e:41:ff:a3:b4:8c:ea:62:
                    1a:47:5b:19:57:fe:2e:25:b6:9b:64:bd:7f:47:99:
                    8f:11:09:83:d0:06:d1:27:71:31:da:07:bb:96:5e:
                    ca:95:e5:84:b9:97:07:cf:2a:4e:de:57:f5:5c:c5:
                    a8:89:86:97:ed:75:bc:63:5e:88:1e:41:7d:8d:bd:
                    b0:54:87:8a:5e:d8:72:99:d3:28:7d:06:bd:47:b2:
                    73:0b:46:7c:c6:be:21:73:ce:9e:6a:9f:14:a0:bb:
                    04:02:2c:b5:21:9d:5c:ed:b2:6c:8e:69:fe:0e:4c:
                    42:19:61:10:d9:c5:de:e6:fe:64:a1:ab:c1:59:09:
                    5e:da:98:d5:5b:55:01:21:25:9b:01:23:94:ac:47:
                    d8:eb:9e:ce:1d:58:a3:4a:1a:87:73:82:fd:d5:56:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:15:8B:23:6F:9E:D4:9D:82:9B:C6:E3:1A:FF:B8:83:D2:59:45:69
            X509v3 Authority Key Identifier:
                keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f6:0a:49:72:53:08:df:98:72:d3:75:80:09:d0:14:79:13:
         ad:18:cf:d4:7f:f4:04:3f:ee:4e:85:f3:0f:b8:00:df:df:af:
         f7:e7:ba:0d:d6:08:fa:f0:49:6b:17:ca:3f:b7:77:eb:1e:fe:
         cd:f6:43:f6:50:a8:b8:c2:f4:4b:83:d8:ec:08:6b:04:32:7f:
         f1:ab:33:10:f1:67:d1:7d:f8:11:74:15:c2:bb:fd:9c:57:d3:
         0d:39:3d:0f:ac:a1:b7:77:fc:49:a6:24:93:eb:3e:bd:27:46:
         cd:f7:01:51:4a:97:1b:23:11:21:70:1e:75:4b:b7:97:d0:0b:
         a9:e8:43:89:db:2e:d8:51:f8:b4:99:6d:00:b2:5e:e0:a7:20:
         d0:77:de:d6:8e:9f:97:fb:7e:14:97:75:bc:82:99:1c:d2:7a:
         b0:d1:93:3e:83:78:00:a8:51:82:79:2e:a9:51:a5:5d:82:77:
         33:53:37:28:c3:93:20:61:33:24:01:b5:89:44:34:08:5e:62:
         dc:49:21:28:7a:6b:da:e6:51:fa:f8:43:a4:e5:5e:9e:fa:af:
         51:99:88:6a:ca:36:22:bc:83:95:03:1a:53:84:0b:b0:ba:83:
         6a:84:7b:46:f1:55:61:d5:7f:c8:78:fc:c3:f2:52:3e:3a:78:
         6e:ec:eb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:58:16 2026 by rpki-client