Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
File:                     bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft (raw, json)
Hash identifier:          URtpVDI+wlrbaqdDiy4iyqyzKPvBwfCVyCBOI6OvMa4=
Subject key identifier:   F7:77:B4:74:D7:AB:D1:20:C7:57:CD:C9:36:40:5F:9F:13:17:3A:39
Authority key identifier: 6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2
Certificate issuer:       /CN=A9167C9C/serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
Manifest number:          0676
Signing time:             Tue 22 Sep 2026 22:15:57 +0000
Manifest this update:     Tue 22 Sep 2026 22:15:57 +0000
Manifest next update:     Tue 29 Sep 2026 22:15:57 +0000
Files and hashes:         1: bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl (hash: 48H7C7xtWr2f7A5SUtqBtKh0R/Kfr5CbjcFGtOrGHUA=)
                          2: BF811486DC1E11EBB2C72F52C4F9AE02.roa (hash: 3RyEfrC1/+oLdtWYjCCiGJj81mtXCEJfqPIsFdcM1I0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl
                          rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167C9C, serialNumber=6DDEC6A17129230EEEFE508AF11962FB4C0F6FC2
        Validity
            Not Before: Sep 22 22:15:57 2026 GMT
            Not After : Sep 29 22:15:57 2026 GMT
        Subject: CN=6ab2fe1d-8715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:d9:a8:84:05:c3:ed:31:b1:d4:58:62:df:
                    36:1c:0b:20:63:b3:23:26:b4:fe:b9:a3:ac:62:db:
                    b7:2f:31:3d:ba:c0:1b:99:e0:2d:86:68:71:b1:2a:
                    08:08:b9:fa:9d:6a:0f:0f:f4:3d:d0:fb:ff:0f:fe:
                    0b:73:b1:6e:00:01:30:c2:1b:c6:db:5e:66:1f:cc:
                    3d:05:45:a5:16:86:f2:ae:fc:9e:75:66:50:fa:cc:
                    4e:bc:b5:cd:19:fa:87:10:d8:84:cd:7c:cb:aa:32:
                    9a:c8:2c:97:7a:c4:8a:e7:9f:66:0c:3b:98:44:32:
                    11:e8:e5:9d:ba:62:62:ad:7d:8e:1a:94:93:72:d2:
                    20:a9:dc:72:0e:34:d4:d1:df:92:8c:fd:24:ea:12:
                    11:dc:80:32:5f:24:9f:98:96:f6:de:d2:22:13:18:
                    99:7f:7a:70:d5:5e:54:49:e5:9f:b8:8f:13:ba:15:
                    22:35:55:75:48:c4:43:f6:94:af:84:e9:17:01:d3:
                    d3:56:3f:71:07:52:10:3f:72:55:96:54:0d:ec:b4:
                    41:c1:ab:c8:ad:ac:04:1b:cd:6e:63:cb:98:05:ae:
                    bc:61:04:d6:8f:a6:86:9d:a3:f8:f6:d8:e5:b9:1c:
                    b2:27:d1:7b:20:f7:21:51:7d:a4:0a:dd:bf:3b:ea:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:77:B4:74:D7:AB:D1:20:C7:57:CD:C9:36:40:5F:9F:13:17:3A:39
            X509v3 Authority Key Identifier:
                keyid:6D:DE:C6:A1:71:29:23:0E:EE:FE:50:8A:F1:19:62:FB:4C:0F:6F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bd7GoXEpIw7u_lCK8Rli-0wPb8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167C9C/9B6C4280DC1B11EBA635504EC4F9AE02/bd7GoXEpIw7u_lCK8Rli-0wPb8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:42:b3:50:da:f4:b6:a2:90:73:fd:45:46:01:1a:1a:31:
         ae:a4:f5:4e:b6:4c:76:66:7d:c2:ca:00:5e:f9:c4:c0:67:ca:
         ec:7f:a8:6b:ee:65:6a:0b:fb:b5:2e:8f:c4:b6:2b:15:cd:a2:
         45:54:e2:fd:87:68:4d:0b:fe:b0:c8:03:d8:87:dd:5d:80:9d:
         52:0f:6d:66:b4:41:6d:1d:b3:a1:39:a2:0c:5a:ca:af:dd:0d:
         02:c4:4b:d7:51:59:23:2f:09:d0:3f:9b:31:41:1e:88:66:e5:
         a8:f7:3c:2d:34:08:fe:90:48:2c:3e:4f:8b:bd:0e:3f:19:db:
         97:58:74:db:a8:2f:a8:b9:cc:53:48:6b:5b:b6:95:8c:33:c6:
         83:e3:85:43:ac:14:da:a0:33:ad:d3:02:d6:df:92:40:9d:2a:
         74:10:f2:6c:e6:fd:fb:2d:dd:68:18:02:ed:ad:2e:94:d6:0d:
         89:72:5c:b2:51:01:93:de:1b:ea:01:22:bd:d0:3d:36:c2:0b:
         6d:0a:74:9e:b0:b6:59:7a:07:ef:7f:c5:03:92:7f:ca:76:02:
         b8:29:3f:16:f2:be:ef:71:d8:5f:a1:1a:fa:ac:a5:df:9c:f6:
         0f:fa:7e:5d:9b:81:9c:7d:2d:c0:b5:0b:3d:3c:08:84:2a:ff:
         3f:4f:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:33 2026 by rpki-client