Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          U3diGZEyOUoVMtJ/KZDSr9jwVlHZeqV1NMTrINrdxXA=
Subject key identifier:   F9:23:87:C4:7F:D8:91:9F:9B:B9:34:E6:15:01:00:DA:8F:62:28:AF
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          91
Signing time:             Wed 23 Sep 2026 07:22:24 +0000
Manifest this update:     Wed 23 Sep 2026 07:22:24 +0000
Manifest next update:     Wed 30 Sep 2026 07:22:24 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: kKKWxxx1tu5ZcANR58m4zJrJVCa/0vWnGRifFTAfL60=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Sep 23 07:22:24 2026 GMT
            Not After : Sep 30 07:22:24 2026 GMT
        Subject: CN=6ab37e30-3b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b9:f3:ae:b9:06:1c:17:ca:11:51:57:10:97:
                    f9:ee:2d:a1:d7:9e:ff:38:6b:90:8d:e2:7d:c7:db:
                    29:67:89:d3:3b:f8:46:ad:2c:53:29:30:90:13:5d:
                    03:31:d9:1c:18:74:a8:be:80:06:ed:fa:00:5d:19:
                    59:1a:65:f5:45:a3:37:cb:61:a2:28:f7:bc:08:c7:
                    b2:83:45:83:18:fe:61:b6:1b:c7:87:fd:1b:cb:79:
                    ca:e6:a2:bf:e0:5a:12:7d:5e:61:c4:18:3d:66:9e:
                    00:f4:62:7f:63:0a:a0:83:5a:5c:5f:c2:2d:e1:0f:
                    38:fc:07:bb:af:06:c7:1c:00:db:c6:b0:a7:af:58:
                    2c:c0:5c:a6:2f:7c:ab:a9:b2:6c:0b:d6:06:07:f6:
                    a6:2b:28:73:74:22:17:5d:9f:94:29:b3:4d:3f:d7:
                    0b:06:76:cb:f5:39:9d:89:82:94:a0:0b:d2:d3:d2:
                    a5:4a:6d:1b:6e:df:a5:44:63:10:04:a4:ad:8a:d5:
                    c2:1f:f7:f8:38:5a:fb:0f:3f:f3:96:1f:1f:3a:5b:
                    fa:ee:68:1b:f9:83:14:83:b1:47:82:d9:3c:94:6c:
                    c4:b8:74:a8:e3:3f:dc:a7:c2:b3:88:27:ed:f1:bd:
                    b3:d2:c7:ec:14:2b:57:7f:af:c5:3d:62:17:d8:02:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:23:87:C4:7F:D8:91:9F:9B:B9:34:E6:15:01:00:DA:8F:62:28:AF
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:ce:42:77:77:13:69:6a:54:f3:3a:c8:e7:8f:63:e6:45:
         ad:03:71:54:67:5a:c6:89:55:0a:48:17:9d:66:66:ca:93:b4:
         b4:f4:ee:2a:fd:0c:42:b9:56:c2:35:0f:b8:4b:5d:a1:32:2d:
         56:5e:48:c0:82:31:3f:40:4f:2d:5a:c9:79:b5:ec:c9:9d:b7:
         1e:d6:43:e9:74:b9:b8:db:3b:a4:9e:81:17:98:0f:a4:49:49:
         10:f9:7a:b5:f7:49:63:cc:e8:ea:62:94:2d:38:75:79:68:89:
         5c:1d:e0:85:38:e4:25:6e:4f:1a:d0:44:cd:48:f7:bf:16:0c:
         9c:af:88:e4:a8:9c:31:f3:6d:cd:ef:bd:c2:98:69:2d:9f:f5:
         cb:45:7d:e6:79:ed:49:25:dc:b6:da:5e:ff:7f:06:a7:92:87:
         1c:33:ac:11:3f:e6:39:76:d5:19:93:1c:a1:c0:75:91:3b:a9:
         bc:77:04:59:45:76:73:28:a6:46:de:4c:8a:21:4e:99:12:0e:
         5b:46:28:b9:e0:22:f7:84:2f:96:56:bd:56:5a:3c:31:a4:60:
         2a:69:39:cf:91:f3:3b:9e:d0:d6:d1:b9:c6:4f:53:5d:3e:83:
         15:c6:83:8e:92:f5:bf:0a:c3:34:b8:7b:78:d4:6c:68:54:b5:
         09:35:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:59:08 2026 by rpki-client