Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
File:                     bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json)
Hash identifier:          MPE2q8kfMJiVeQWZL6OCDbu72iyYgGG0dRIDCkdu6vc=
Subject key identifier:   6F:77:5D:AF:61:9C:FC:22:0D:49:76:AC:AD:F1:7B:B0:EE:64:AA:AA
Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
Certificate issuer:       /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Certificate serial:       0156
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
Manifest number:          0156
Signing time:             Fri 25 Sep 2026 05:17:21 +0000
Manifest this update:     Fri 25 Sep 2026 05:17:20 +0000
Manifest next update:     Fri 02 Oct 2026 05:17:20 +0000
Files and hashes:         1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: gNjbi5hgen8DoctC23e7rygYBm7pi2DzX2gUabI2z1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
                          rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
        Validity
            Not Before: Sep 25 05:17:20 2026 GMT
            Not After : Oct  2 05:17:20 2026 GMT
        Subject: CN=6ab603e1-2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:12:d9:9e:55:13:17:ea:06:e9:cb:42:df:
                    08:bb:f4:1b:7f:63:db:c5:22:a9:fd:f1:82:12:33:
                    9b:0d:8f:3f:18:0b:8f:f6:73:d4:a6:27:6d:16:d6:
                    86:aa:43:47:48:ab:37:63:4f:2c:ca:8b:fc:77:50:
                    36:4f:c3:ff:cf:66:3a:b8:80:7d:5f:fc:5c:d4:49:
                    fb:ad:4a:0b:f3:17:db:d8:31:8c:9c:2a:5d:5c:fb:
                    d2:05:79:36:0c:65:18:3f:b6:29:ef:09:9a:22:be:
                    6f:d5:47:d7:71:e5:e1:9f:49:aa:95:84:f0:0e:88:
                    fd:fa:f6:f6:bb:0c:48:be:6e:47:63:78:bd:3b:7f:
                    6b:dd:5f:7a:83:de:2e:d6:e9:a6:ef:4d:33:41:75:
                    7c:73:9a:1d:26:e0:7b:31:7a:94:29:25:1b:60:ea:
                    5e:cc:3f:2a:a6:c0:b0:a3:b1:c6:f3:74:d7:6e:6c:
                    ce:cb:90:9d:6e:c9:11:0d:df:a6:62:f1:3a:b3:ff:
                    d7:3c:e2:99:f1:ce:ab:cc:9a:79:db:1f:c5:9e:77:
                    d4:0c:39:9d:84:9c:62:ad:3c:42:c1:87:a5:8c:aa:
                    cb:52:c7:82:3f:47:31:3e:68:68:f1:8b:17:5a:b0:
                    f4:11:67:68:b5:3a:07:59:6a:1c:7b:6f:48:05:90:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:77:5D:AF:61:9C:FC:22:0D:49:76:AC:AD:F1:7B:B0:EE:64:AA:AA
            X509v3 Authority Key Identifier:
                keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f2:70:f7:50:ce:ff:81:bf:3a:65:38:52:b3:20:19:2f:d8:
         f7:d7:8c:af:b3:dd:72:3b:ce:fe:63:3d:0c:71:1e:a3:4f:5c:
         05:83:6a:d7:f3:38:f3:4c:8d:47:d3:26:ae:50:65:31:87:70:
         47:cb:d0:b7:b3:ae:c7:1b:8b:6e:37:31:9e:fc:8d:e2:92:04:
         1e:4d:f4:95:16:30:ca:ec:7f:37:6d:c9:8f:dd:68:91:1f:70:
         fc:be:fb:c4:91:e0:65:cb:74:60:9c:e6:20:9b:0f:eb:aa:e8:
         c8:10:6b:93:4e:af:59:3c:5a:bb:62:bd:75:64:ba:c5:b0:7d:
         1a:eb:c2:1c:6f:78:b4:45:e5:28:1a:92:10:a8:b4:b4:5e:14:
         f1:9f:97:16:3e:65:56:86:ae:a6:ae:89:bc:3b:33:c5:09:db:
         91:ad:dd:50:1c:f9:74:fb:a2:5f:9f:b4:6f:17:98:6b:da:7b:
         9c:b6:3c:bf:d4:0e:de:c1:76:f3:2c:68:2f:6a:eb:65:a9:b5:
         7e:b3:e0:2b:4a:3b:01:2e:42:f9:15:5e:fc:f1:33:c2:f3:d1:
         57:13:9f:ff:87:f6:2d:1b:37:46:43:e9:96:02:1f:39:e3:78:
         4c:df:ac:7f:82:57:25:ce:b6:f7:44:8e:57:75:f3:05:c9:d0:
         f5:aa:ff:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:18:45 2026 by rpki-client