Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
File:                     bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json)
Hash identifier:          IIOBgWgTckpX02IC0hDOXAqIuy4fBJniQm/ZdkbHtDI=
Subject key identifier:   B5:E7:19:B9:21:80:81:39:B4:AC:CF:29:02:74:2F:3D:C1:8B:AA:70
Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35
Certificate issuer:       /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
Certificate serial:       023D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
Manifest number:          0236
Signing time:             Mon 21 Sep 2026 02:39:24 +0000
Manifest this update:     Mon 21 Sep 2026 02:39:23 +0000
Manifest next update:     Mon 28 Sep 2026 02:39:23 +0000
Files and hashes:         1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: RVVg/UCo1EX9UNrwfhbe23k4KaI0Uf5JTEsNyeWjygM=)
                          2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: XXVUjsyhZNJjR2zCirDCP6YTvzsx5dU96ixceZ4TvBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl
                          rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:39:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35
        Validity
            Not Before: Sep 21 02:39:23 2026 GMT
            Not After : Sep 28 02:39:23 2026 GMT
        Subject: CN=6ab098dc-2e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:50:c1:06:a0:eb:70:8b:1b:0d:6a:21:89:5d:
                    a5:2b:b2:b7:a7:5b:14:37:c1:67:cb:aa:cf:bd:c9:
                    58:1d:54:c2:8e:2d:5a:f6:e4:02:5c:17:5a:6b:ca:
                    90:0d:18:4b:2a:34:be:2f:20:fb:8d:60:36:7d:9c:
                    45:1c:5d:da:54:40:92:83:a1:01:8f:21:e9:28:33:
                    2e:47:20:7d:3b:36:d7:b1:50:ff:9b:d8:a8:b7:3d:
                    8e:99:ed:9e:f0:b0:24:09:ca:aa:af:8a:8e:62:48:
                    dc:57:a5:ad:24:3b:46:f6:68:13:d9:fb:f2:5c:49:
                    ad:39:2e:ea:d7:6c:8b:57:a1:86:4f:fa:72:3e:03:
                    48:b6:e3:1b:b5:d3:b5:a0:c4:68:76:b5:9a:e3:1e:
                    e4:da:3f:27:65:86:66:99:df:a0:66:9f:0a:24:60:
                    bc:d0:11:ec:17:2c:bb:49:76:5e:64:89:c9:4b:e3:
                    de:c2:09:0b:83:c8:81:8b:d2:f5:c2:8e:e9:f5:15:
                    8b:7b:97:44:36:3e:b6:d2:31:3c:bb:24:6d:3b:97:
                    1b:87:37:56:a7:dc:b8:23:37:86:b4:97:9b:cc:b9:
                    d2:71:4b:f7:37:19:ae:b5:76:dc:41:4d:b4:5d:ff:
                    f2:af:12:01:27:b5:78:58:bd:22:fa:bc:35:5d:a3:
                    88:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:19:B9:21:80:81:39:B4:AC:CF:29:02:74:2F:3D:C1:8B:AA:70
            X509v3 Authority Key Identifier:
                keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:0a:bd:71:dd:57:6c:26:72:f7:a7:7e:2b:e1:4c:43:cc:
         0e:6e:29:40:0a:c0:71:4b:ad:43:83:ba:68:ae:94:3c:6e:4e:
         43:1f:dd:36:2a:85:f9:94:73:4e:b6:98:bf:15:e1:94:fe:9d:
         52:35:1a:3d:17:0e:db:13:50:3a:7a:f8:a2:5e:27:50:12:9b:
         40:ab:65:2e:e1:e2:a3:96:c4:8e:86:78:2d:24:fc:87:5d:10:
         1c:b1:40:de:6a:11:a4:ed:2e:05:cf:01:12:db:bd:d1:55:1d:
         ce:af:9e:a8:1d:f2:95:ca:5f:ed:60:65:80:95:f6:df:f1:3e:
         45:8a:65:8a:09:5e:4f:76:9a:02:8e:58:ec:b1:cc:46:aa:c6:
         a4:19:62:cf:32:1e:a6:9a:3c:dc:d0:83:b9:80:96:a3:b4:a3:
         b6:c9:69:21:fa:60:e9:5f:ae:ea:89:6a:9b:a7:1a:da:86:98:
         f8:fd:cc:02:6a:d5:40:2d:f7:10:69:e4:0e:eb:86:c5:50:1d:
         4f:33:90:7f:f3:14:25:9b:1f:f1:ea:8b:aa:97:5e:06:33:b1:
         9b:08:7e:26:72:fd:0f:cc:42:49:c1:21:87:87:3d:15:89:94:
         32:05:84:91:ba:ad:91:82:8c:c5:c6:07:88:fa:2b:21:4b:c8:
         e3:66:17:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:48:43 2026 by rpki-client