Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
File:                     bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json)
Hash identifier:          kpYIO+1E6rlzccTbONT6SLO0u1gI3TONIdzCELjdgXk=
Subject key identifier:   29:F0:5E:BE:F8:A8:04:78:B3:72:D8:57:7E:43:BD:5A:7E:4B:57:46
Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54
Certificate issuer:       /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
Certificate serial:       01C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
Manifest number:          01C1
Signing time:             Fri 25 Sep 2026 03:57:23 +0000
Manifest this update:     Fri 25 Sep 2026 03:57:23 +0000
Manifest next update:     Fri 02 Oct 2026 03:57:23 +0000
Files and hashes:         1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: SBjnHQ/RwW66OdgGqbJQzrHDVGiJfXLmckGMEhRhtPw=)
                          2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: xPyb9jdVPxFNqu7DjwvZN/gxmMuIyOp+jROsuWdv+So=)
                          3: B88A958007B611F1BF9DF7EA143D8C67.roa (hash: EzgQAPl/vUlyh5AjsIyBAeaJMqrmt2E1TV7jxVlr6ZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl
                          rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54
        Validity
            Not Before: Sep 25 03:57:23 2026 GMT
            Not After : Oct  2 03:57:23 2026 GMT
        Subject: CN=6ab5f123-21d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:62:8b:d1:19:49:08:df:e2:67:5a:a1:c3:ae:
                    f7:1c:94:58:02:5a:0b:05:04:a3:30:5d:c8:29:ee:
                    8c:db:af:78:2d:95:97:74:24:bc:3b:12:ea:8b:28:
                    e3:a7:8e:ef:ea:72:33:9d:67:17:6e:8b:19:a1:98:
                    37:2f:a7:6b:d0:72:f1:bb:37:a4:ce:e7:af:f8:34:
                    21:9d:cc:82:17:c2:29:2e:c1:21:7a:33:aa:8b:c3:
                    45:4d:56:e1:38:8e:60:24:9c:2e:12:d7:92:90:cd:
                    b9:dc:93:6e:59:ee:d1:0f:17:04:c9:31:07:34:01:
                    50:cf:b4:db:13:99:7b:6a:de:a6:13:cb:c9:af:84:
                    45:20:97:a4:19:62:46:8f:e4:73:bb:83:e8:ac:5b:
                    48:70:ce:ec:0b:b6:7c:3a:b2:79:32:7b:28:59:e4:
                    6d:4c:a4:8d:0e:75:ee:ea:a9:a4:80:58:6a:0f:e5:
                    fb:5c:4c:5c:c6:76:27:53:9c:cb:de:b8:cc:3c:b7:
                    12:77:b6:a3:b1:fb:45:42:d4:73:90:fc:83:c5:66:
                    1f:5a:f2:57:63:ad:70:8d:41:78:d7:e8:95:24:ed:
                    fb:83:68:00:51:54:47:5b:e9:67:7d:3f:14:c5:44:
                    8d:a1:5b:54:35:a2:72:5c:5d:f4:2b:45:93:85:76:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F0:5E:BE:F8:A8:04:78:B3:72:D8:57:7E:43:BD:5A:7E:4B:57:46
            X509v3 Authority Key Identifier:
                keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:ba:b5:67:7d:9a:1a:de:ae:9c:01:d4:14:0a:b1:15:d6:
         8f:16:8f:c9:33:dc:11:bc:08:f6:7d:cd:87:cd:fa:c7:a7:72:
         d5:a9:73:7c:9b:b7:b5:39:4f:b7:0f:c2:61:94:73:c3:98:58:
         ee:1a:18:58:6e:3e:3d:7a:b1:99:8d:b7:0c:85:3f:94:10:06:
         e2:b4:2e:f0:67:8c:a6:51:bf:75:f0:14:a0:01:39:75:65:30:
         2c:51:2a:aa:1c:54:70:ed:b9:e9:13:d2:3f:a8:8b:f3:65:d2:
         11:fe:77:c8:45:3e:65:c1:8d:f3:8e:eb:b5:c3:22:d5:9f:61:
         d9:62:a5:1f:4e:db:44:9a:0a:ee:a0:f5:e7:ac:ad:8b:e0:1f:
         15:8e:83:d5:25:3d:44:8c:ea:8e:36:bb:d6:d3:f5:db:c0:f7:
         2b:ab:35:90:73:96:da:de:72:7d:0d:1a:ac:ae:25:ea:ce:ee:
         9c:a0:d3:0d:1d:2d:55:59:83:39:f9:fb:d9:d1:11:88:6c:28:
         86:eb:b6:17:1f:fd:67:bd:77:73:2a:3d:c6:3e:2a:25:e9:27:
         9e:bf:9d:0e:62:63:b3:fc:49:95:bb:3f:34:ca:66:d0:36:be:
         92:6b:9a:b6:c8:2e:53:e9:f9:52:2e:b8:cf:52:26:00:60:20:
         5a:82:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:02:39 2026 by rpki-client