Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
File:                     u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json)
Hash identifier:          xDqjWCmbc+5HFfKA/lRWVgcobQE9Iu5g1dvLiacVzFE=
Subject key identifier:   A5:00:8B:E6:DD:5F:38:61:19:8B:5C:54:15:F5:E4:58:47:97:8D:F7
Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34
Certificate issuer:       /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
Certificate serial:       0136
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
Manifest number:          0132
Signing time:             Mon 21 Sep 2026 05:37:18 +0000
Manifest this update:     Mon 21 Sep 2026 05:37:18 +0000
Manifest next update:     Mon 28 Sep 2026 05:37:18 +0000
Files and hashes:         1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: r2iIPwhtiu2Te2HEWHL1Wkbzn1bDSqthucI8XzFR+0s=)
                          2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: mMirlrzunJgSWRurzYxeqDZ2b51cZvaGJ3FUORZ08/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl
                          rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734
        Validity
            Not Before: Sep 21 05:37:18 2026 GMT
            Not After : Sep 28 05:37:18 2026 GMT
        Subject: CN=6ab0c28e-1829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:f0:e4:f4:ef:60:66:33:e4:39:e5:dd:10:
                    af:94:a7:3e:bc:69:b1:b6:38:b8:9c:3a:48:e5:02:
                    5b:a5:5d:9b:92:1e:42:08:8f:b9:50:a8:2e:ff:60:
                    ca:93:1e:7f:b1:d2:4d:23:ed:0c:b3:11:64:d4:85:
                    8b:91:cd:af:3c:78:d9:ad:66:e7:ad:1f:20:f6:a8:
                    57:d4:05:13:60:95:a8:52:62:63:0f:ed:6b:e8:16:
                    0e:e1:17:09:27:5e:c9:73:01:97:79:81:83:e1:74:
                    f4:08:14:dd:4f:79:db:99:f9:ef:38:4b:71:b0:f9:
                    bd:2a:c5:4e:3e:63:7f:67:f9:63:01:6a:2f:10:7d:
                    5b:c8:cc:a2:4d:67:15:11:bf:1c:0b:56:1d:a0:a3:
                    3b:71:9c:3c:c9:d5:a1:6a:ee:7f:f6:76:8c:15:57:
                    9d:23:ef:df:ca:fc:14:4f:40:27:0d:76:f3:8d:37:
                    12:c6:46:a6:dd:c5:df:98:c7:cd:54:e4:fc:88:88:
                    e7:a8:3a:6b:bf:f1:f9:76:47:7f:9c:3a:7b:8b:fb:
                    78:80:67:01:64:8e:cd:18:92:c3:87:17:f9:57:c3:
                    98:bd:9a:83:4a:05:54:b2:1b:61:62:58:f0:12:cc:
                    57:c0:09:f1:b8:ab:06:50:aa:aa:b8:43:7d:2c:c7:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:00:8B:E6:DD:5F:38:61:19:8B:5C:54:15:F5:E4:58:47:97:8D:F7
            X509v3 Authority Key Identifier:
                keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:7e:91:7a:b6:67:76:d0:09:1f:22:56:16:1a:5b:57:30:
         ad:93:5b:ca:fb:40:05:21:49:93:71:70:d7:ec:ce:20:87:e4:
         e3:f4:80:9e:6d:97:c7:4f:95:f3:7e:dc:a9:3d:80:f1:d5:d0:
         5f:dd:17:73:a0:6a:d3:0d:7c:a1:d4:9b:17:0e:6c:30:7d:2d:
         0a:71:9c:18:99:f9:0c:55:4a:cb:6f:eb:e5:1e:c8:36:8a:68:
         c1:0d:a9:cd:a5:bb:b2:85:82:60:9a:ae:03:d6:b5:a1:79:20:
         07:1d:cd:a5:63:de:5e:ae:a8:58:70:a5:2d:52:3c:b9:da:b9:
         df:ec:bb:78:ff:19:19:8d:a1:9d:94:29:c1:af:e3:69:e6:1c:
         87:59:70:12:92:e1:5e:9b:65:9f:ea:1e:c3:41:20:07:02:b0:
         2f:5a:c8:a7:07:be:23:e9:3e:02:3e:d1:cb:49:f6:e1:39:52:
         dc:be:2a:29:5f:55:96:14:3d:22:f4:8e:dc:57:62:54:2d:e3:
         19:fe:cc:b6:cb:28:5b:a8:8f:e9:1d:d9:9a:b4:ac:4f:42:8e:
         2b:9f:7e:3a:a0:2e:d2:7e:d0:91:14:e5:d1:61:2c:c8:6a:f1:
         fb:10:07:5d:e0:59:0b:0f:f8:2e:e0:48:81:dc:c7:11:7e:48:
         da:eb:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:38:03 2026 by rpki-client