Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
File:                     BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft (raw, json)
Hash identifier:          o5ZePcZhRE48Th/VN91ktNNn9wEFdnw83YCmN2X7Kwc=
Subject key identifier:   2A:3A:65:4F:FA:38:2F:78:CC:19:B2:85:42:50:5F:3E:7B:AF:99:63
Authority key identifier: 05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68
Certificate issuer:       /CN=A91799DA/serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
Manifest number:          39
Signing time:             Wed 23 Sep 2026 08:19:26 +0000
Manifest this update:     Wed 23 Sep 2026 08:19:26 +0000
Manifest next update:     Wed 30 Sep 2026 08:19:26 +0000
Files and hashes:         1: BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl (hash: nBiE+TfFy/vDx1jE9cVAKapNOFkCBHK+xwl1yaYJ50c=)
                          2: 010F5BB8638A11F1A70F2DF16B47A888.roa (hash: lOrY+Q0J29akVoE+hKyvdu8HqjM2bjbK3XJtL+cGNeg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl
                          rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91799DA, serialNumber=05D5AB531AA116ED52984FF4BD45D0D2D8438B68
        Validity
            Not Before: Sep 23 08:19:26 2026 GMT
            Not After : Sep 30 08:19:26 2026 GMT
        Subject: CN=6ab38b8e-dee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:86:1c:af:6b:4a:03:19:1e:26:15:e7:c0:
                    c7:fd:72:23:93:66:a8:d6:ee:a2:b9:48:10:7b:89:
                    7e:6f:d5:8c:bb:93:4b:0f:9a:65:8d:e6:01:d0:ec:
                    1a:6e:59:00:25:25:2b:db:e0:26:c8:24:0c:81:b5:
                    cd:49:db:a6:21:b2:74:f9:5b:e0:9c:07:58:85:c7:
                    e6:62:e9:f0:78:42:4f:5a:da:ea:2b:fc:17:27:d0:
                    34:4a:99:01:af:e1:dc:64:32:b9:8f:7a:4d:53:b4:
                    45:98:e5:e5:66:9c:99:54:1f:d0:f9:14:48:fb:7e:
                    ad:b4:06:c8:c7:11:c9:bc:7c:dc:16:95:45:41:03:
                    70:98:1f:aa:f9:c9:ad:7c:08:83:e0:02:63:fb:58:
                    57:f9:3b:12:50:fe:6d:bf:6d:0b:17:f3:36:f4:a3:
                    b3:81:a8:20:e9:86:96:96:30:72:8f:20:ad:a7:48:
                    a0:8c:b3:ef:b4:8a:1c:ea:13:19:97:4f:09:b9:cb:
                    01:f2:20:5b:eb:d5:9d:55:63:30:f7:8c:55:01:40:
                    58:4d:20:8f:97:3b:53:98:2d:46:89:33:a0:ad:b9:
                    5d:7f:b3:c4:78:26:11:cd:78:1e:3d:93:fb:72:83:
                    76:7c:d1:47:51:c2:ec:5e:29:2a:cf:4d:29:cb:ed:
                    fc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:65:4F:FA:38:2F:78:CC:19:B2:85:42:50:5F:3E:7B:AF:99:63
            X509v3 Authority Key Identifier:
                keyid:05:D5:AB:53:1A:A1:16:ED:52:98:4F:F4:BD:45:D0:D2:D8:43:8B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdWrUxqhFu1SmE_0vUXQ0thDi2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91799DA/645E1278638911F193BC26626A47A888/BdWrUxqhFu1SmE_0vUXQ0thDi2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:22:25:03:cf:b3:30:1a:42:80:2a:a2:0a:b6:e1:9f:d6:
         9e:7a:2e:3a:43:9c:30:d1:ed:2a:e6:45:9b:e2:81:c2:34:76:
         fd:84:d2:4a:1f:e0:01:f0:cf:36:15:2d:75:fe:d7:15:62:df:
         12:f6:2e:97:ee:e7:b2:60:4e:44:95:92:0e:49:14:3e:d7:d5:
         84:df:98:b4:ec:fd:63:d5:ca:71:d3:11:7f:0a:b3:c0:68:e0:
         b9:7f:0c:56:b7:b2:c0:c1:5b:73:ba:3e:f5:cb:6e:31:a4:4b:
         54:ed:91:01:a2:26:f7:4a:a3:01:11:d9:04:ba:18:b0:cc:a7:
         40:2b:6d:4d:30:7b:46:b4:24:87:84:84:a3:d7:2a:5b:a7:9d:
         e6:07:53:ad:47:38:14:3d:c8:a2:70:8b:56:c7:6a:a1:d6:45:
         d1:55:32:cd:b3:46:cc:9f:ee:01:23:54:13:f6:8f:3a:db:c7:
         f3:b6:70:0f:71:9f:79:ba:5e:fb:78:08:ec:db:a9:88:87:90:
         42:80:19:6b:48:1c:39:de:7e:b8:48:59:d3:b1:6c:bc:0d:31:
         d3:95:0a:87:3f:69:49:58:20:0a:0f:7f:c5:05:9b:0e:cd:cb:
         8b:42:b3:a6:a5:31:66:4f:f5:cc:c9:24:bc:0d:3c:d0:7e:ee:
         49:ea:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:21:07 2026 by rpki-client