Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
File:                     BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json)
Hash identifier:          RIyseiNQCDf71GG1h1mRo3PKRbAoAjCISs6eqeTMKQ8=
Subject key identifier:   FC:71:22:74:05:4A:F2:C9:E4:63:42:13:45:B9:7C:2F:EA:92:73:FA
Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25
Certificate issuer:       /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
Certificate serial:       6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
Manifest number:          6D
Signing time:             Tue 29 Sep 2026 08:31:44 +0000
Manifest this update:     Tue 29 Sep 2026 08:31:43 +0000
Manifest next update:     Tue 06 Oct 2026 08:31:43 +0000
Files and hashes:         1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: 7P3pZ8i33e9Sw8g9BXU17X6iKv5fovZfeNE1RX2ppL4=)
                          2: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=)
                          3: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl
                          rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225
        Validity
            Not Before: Sep 29 08:31:43 2026 GMT
            Not After : Oct  6 08:31:43 2026 GMT
        Subject: CN=6abb776f-6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:32:8d:4c:27:e9:4f:23:b0:c0:1a:43:7c:
                    46:8e:77:bd:3e:a5:b3:6b:59:49:01:70:5f:ae:8e:
                    c6:66:28:ea:2e:fc:99:21:2e:c1:47:4f:0f:bc:e5:
                    47:e3:10:5c:7e:1f:04:50:56:34:82:db:74:bc:19:
                    cd:f9:02:27:1c:7d:b5:28:99:42:2d:e3:6c:0b:64:
                    46:6c:50:5a:af:ae:2c:5d:30:9f:d7:b7:f8:3a:72:
                    30:4f:93:bb:d8:7f:07:45:a2:16:d5:f2:0e:5b:0a:
                    71:50:a1:60:53:ec:dd:84:62:e3:62:1a:b6:13:d9:
                    c4:c1:10:33:ea:06:47:0e:23:fd:c1:2e:d2:a9:27:
                    44:0b:a7:c7:6b:4a:43:2b:87:85:08:cb:3f:27:df:
                    78:45:71:3a:0a:3c:85:13:ec:18:46:a3:a0:48:9b:
                    6f:5d:87:5d:64:ae:77:00:7d:02:9f:3c:42:f2:d8:
                    5b:60:5a:34:9d:bb:e1:26:4e:05:f7:23:e8:80:c5:
                    b5:35:47:9c:6b:8a:1f:58:e9:53:03:38:9c:a8:d6:
                    1c:bd:50:38:b2:f1:d3:41:e5:c9:ed:6b:5a:3b:82:
                    2a:f8:be:bf:30:35:ee:68:3d:e0:56:6d:7f:50:e9:
                    ad:d0:18:ad:ed:8d:43:f8:f9:96:fe:84:c3:42:9e:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:22:74:05:4A:F2:C9:E4:63:42:13:45:B9:7C:2F:EA:92:73:FA
            X509v3 Authority Key Identifier:
                keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:b3:7f:5e:59:56:b8:86:a2:dc:5e:49:a3:a8:e8:0e:71:
         6a:02:f9:9d:df:40:1c:ce:ee:04:e8:5c:ae:8a:d9:21:7e:45:
         3c:37:13:09:bd:8e:e9:4e:06:5d:83:71:91:3f:d0:e7:2e:e0:
         27:16:98:fe:93:84:0f:54:49:97:ff:69:90:f8:8a:2c:89:f6:
         5f:59:b6:a3:d1:9b:f1:c1:82:fc:2d:97:14:1b:3f:51:ef:d9:
         d2:9b:e5:7a:db:1c:3b:c3:2b:6d:be:49:ef:dc:63:7f:ab:ef:
         55:cf:4f:a0:7c:8c:28:58:d1:49:69:03:38:64:91:e2:ca:86:
         d1:41:94:e1:86:d2:6f:a9:2f:b4:47:11:95:2d:b5:12:94:ad:
         b3:cb:07:d9:bf:e8:50:0f:6e:0a:f8:25:52:a0:c5:24:0f:63:
         21:d1:18:99:c4:de:01:4e:fb:5f:22:4d:b6:87:0c:64:0b:09:
         4f:ce:78:e3:b1:a6:da:9d:c7:6a:fe:fe:c6:c6:43:9a:3a:09:
         bc:ee:de:50:95:c8:47:ed:0b:0d:3c:d2:79:bc:7f:ed:ba:b5:
         06:ce:56:dc:b1:95:54:78:f1:b6:be:aa:03:b7:b8:a8:44:a5:
         32:f5:a4:98:81:b3:0c:ba:2d:3d:9c:6a:80:f3:56:4e:67:82:
         a1:b3:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:33:38 2026 by rpki-client