Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
File:                     bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft (raw, json)
Hash identifier:          IJ6QVovvvLUpu3bzCUKAT5bNsKYi1nJNmq+Ea5jgZR0=
Subject key identifier:   A1:3D:37:D6:3A:93:09:D7:FB:32:30:52:78:CC:3E:15:7B:8F:A2:AE
Authority key identifier: 6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2
Certificate issuer:       /CN=A91FBD28/serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
Certificate serial:       1BB7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
Manifest number:          1B9F
Signing time:             Mon 12 Oct 2026 15:40:42 +0000
Manifest this update:     Mon 12 Oct 2026 15:40:41 +0000
Manifest next update:     Mon 19 Oct 2026 15:40:41 +0000
Files and hashes:         1: bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl (hash: tmM/QaGMTokhJor7NJEXaIY0yAkjBhlBzWWL9dNWtNs=)
                          2: D8B92776A16A11EAA517B11EC4F9AE02.roa (hash: rryLB0c3XAkpHMR5QUj9LWqBdvJxU0nRbgd/uoJ3uaI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7095 (0x1bb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD28, serialNumber=6E48610AA0E6B0E2C5EED402DD07833AA73E7EA2
        Validity
            Not Before: Oct 12 15:40:41 2026 GMT
            Not After : Oct 19 15:40:41 2026 GMT
        Subject: CN=6accff7a-917c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:e6:f6:50:90:ce:82:df:8b:81:e1:bc:2d:
                    08:1c:0e:da:8d:4f:5e:96:16:4f:e9:60:65:df:74:
                    3d:a2:6d:4e:d8:4a:b0:5d:89:6f:44:0c:e5:b3:6a:
                    f6:61:7c:6a:7b:d8:fb:0f:4e:30:f6:ea:7e:ec:a2:
                    88:b4:ba:23:67:db:2a:73:99:ca:81:08:03:a1:bf:
                    b2:65:be:ff:2e:ec:9a:f0:b3:15:f6:7f:11:41:83:
                    c0:7c:17:b4:df:9a:f3:dc:0e:c2:48:5d:e1:2f:e0:
                    b3:47:f6:d3:de:36:7f:b6:99:31:9f:87:31:ac:54:
                    f7:af:ce:df:1f:fd:e5:48:b5:32:27:8f:a5:07:8c:
                    b1:a5:96:9c:5c:cb:04:91:55:c9:ae:84:9d:14:6a:
                    e4:c8:95:01:c3:fc:06:4b:5e:fa:d8:f2:dc:a4:53:
                    c4:98:c9:40:fc:8e:93:b3:2a:e0:ef:42:38:94:5e:
                    29:d7:09:b4:83:5a:4e:56:4a:7b:ab:6b:c7:a0:d8:
                    30:ce:14:62:e4:99:04:0a:ac:f1:ea:5f:cc:32:ec:
                    11:92:ca:6b:4c:f1:4d:de:4f:27:a7:5c:82:5d:4e:
                    bd:0e:69:37:d9:71:8e:78:b1:8d:89:b5:cc:e8:c5:
                    e8:c4:ad:41:f9:ad:2e:dc:55:f8:b7:9a:50:26:74:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3D:37:D6:3A:93:09:D7:FB:32:30:52:78:CC:3E:15:7B:8F:A2:AE
            X509v3 Authority Key Identifier:
                keyid:6E:48:61:0A:A0:E6:B0:E2:C5:EE:D4:02:DD:07:83:3A:A7:3E:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/bkhhCqDmsOLF7tQC3QeDOqc-fqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD28/26758BB43AB511E7B8609F1CC4F9AE02/bkhhCqDmsOLF7tQC3QeDOqc-fqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:1a:a8:8a:51:01:7a:7a:99:fb:e2:67:30:6e:b6:d0:8d:
         9f:ad:98:4b:60:f4:04:a9:17:2c:17:e3:bd:08:52:d9:19:7a:
         a4:60:ac:5f:7c:cc:cd:22:08:51:d1:41:51:07:dd:af:8d:68:
         79:e6:21:98:2e:b2:1d:cf:68:99:b1:b0:6c:52:a8:5e:12:15:
         46:83:de:d3:6a:ad:e7:a1:16:d5:e6:a8:c4:69:d0:2c:46:f4:
         ff:e5:10:20:03:48:c3:88:3d:4e:68:88:ef:f5:3f:f7:54:4e:
         46:c4:5a:c5:7f:72:57:3f:37:dc:de:e0:07:bd:ad:2c:f6:b2:
         96:3a:54:8b:99:10:85:cf:1d:8f:c7:d4:55:eb:92:3a:a2:e7:
         8b:21:c0:4c:27:ba:84:8a:5d:d4:73:d9:b4:f3:bb:69:db:64:
         25:c8:51:ca:19:d9:9f:41:4b:fb:e6:3a:ee:22:8b:1c:ff:ef:
         49:f3:dd:fd:af:85:e0:d3:ce:15:a5:54:6f:fc:50:36:a2:88:
         00:83:1d:e2:d6:5e:a4:cb:bb:19:a8:7b:66:e9:0d:48:64:f0:
         6e:ce:4b:0c:67:cc:c2:f4:c1:74:a7:18:a7:6e:1a:8c:03:42:
         2a:50:65:e8:dd:de:a2:76:2a:f2:09:4d:23:4b:77:37:78:fb:
         38:a5:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:39:34 2026 by rpki-client