Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File:                     bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier:          RglopWlPZpZu2EDualyE+hFcvHfRnhBF/RPfmyl2+GM=
Subject key identifier:   80:BC:3A:7B:AF:DA:FB:0A:A3:DE:C8:0F:80:4C:AC:CB:C8:94:F4:95
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer:       /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number:          01FD
Signing time:             Fri 25 Sep 2026 03:17:15 +0000
Manifest this update:     Fri 25 Sep 2026 03:17:14 +0000
Manifest next update:     Fri 02 Oct 2026 03:17:14 +0000
Files and hashes:         1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: 9XMXidMMnEgxGnPhNiJvGBfudga6AXoBOPLR3KzA6/E=)
                          2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: MuFeUXJQMqi0fVou2JntsqZgqjdBB8a9imttA6TArYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
                          rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
        Validity
            Not Before: Sep 25 03:17:14 2026 GMT
            Not After : Oct  2 03:17:14 2026 GMT
        Subject: CN=6ab5e7bb-1874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:72:54:f3:fd:00:53:73:7d:9a:01:55:ae:
                    30:79:97:c9:05:5c:86:bd:15:a3:22:c4:d9:00:f6:
                    6e:b2:34:5d:32:17:19:0d:0b:00:15:83:01:5d:4c:
                    c5:e4:35:5e:54:e0:02:3e:fb:f9:b6:f8:69:01:e2:
                    97:2d:ca:68:ff:fd:68:05:46:a2:aa:8b:02:77:16:
                    1f:92:24:6d:78:ff:cd:2d:70:ed:1a:f1:ae:63:71:
                    cf:7d:82:7a:b7:24:79:c1:b7:80:a4:0e:af:e5:d3:
                    a1:7a:ee:96:57:82:ac:e5:3f:dc:4e:e6:a7:39:c7:
                    00:d1:ed:0d:d0:71:82:b3:1f:4a:f8:0a:56:39:a5:
                    d5:a5:f2:23:ea:98:70:30:58:3f:3a:48:4e:b0:13:
                    7a:80:54:70:60:e2:28:f1:3e:b6:8b:11:9d:92:02:
                    6c:88:b2:47:a4:71:55:ab:85:22:26:21:6e:42:f4:
                    16:17:3b:94:72:b2:e4:15:0e:ca:83:39:90:19:a3:
                    92:df:0d:19:a8:1d:fe:22:96:22:88:72:35:e6:20:
                    41:9f:55:76:4f:32:75:c2:5a:f7:04:62:a2:08:ee:
                    80:b0:2c:2d:dc:15:53:6f:fd:d7:b6:6e:c0:a2:14:
                    7f:f8:1b:2e:ea:0f:16:f7:34:14:d1:07:3b:36:63:
                    52:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BC:3A:7B:AF:DA:FB:0A:A3:DE:C8:0F:80:4C:AC:CB:C8:94:F4:95
            X509v3 Authority Key Identifier:
                keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:51:52:89:9a:c1:75:33:68:ee:26:04:36:3f:ef:9a:34:36:
         02:6d:7e:a9:c3:18:4c:cd:11:6b:87:48:9c:4b:c5:f1:ef:3a:
         4d:8e:8c:b5:69:da:18:4b:f7:93:ad:8e:24:bb:de:09:c5:8d:
         22:d6:70:08:e3:15:f0:61:20:f7:76:ae:c3:b1:36:55:f4:9e:
         7d:ea:83:9a:5d:74:cc:de:40:b3:5d:66:19:5b:f2:6b:12:4f:
         7d:0b:dc:02:66:2d:96:d6:59:c9:a8:bb:fd:30:35:96:4d:a3:
         e6:9c:f6:e8:d0:31:6b:3c:43:3d:28:ba:5d:e7:e9:b5:49:71:
         e3:b9:ce:80:9f:c1:6e:36:32:37:67:80:da:ec:64:1a:4d:4c:
         bb:a8:0d:65:7e:cc:51:a6:a0:2c:97:3d:22:85:e5:39:eb:c6:
         1d:71:fb:18:76:4e:d9:d3:0e:f1:37:ad:9c:54:fa:d8:db:00:
         c8:97:b5:dd:38:ef:93:3f:1f:b4:6a:dd:90:c4:f6:72:ea:84:
         5d:02:41:e0:7d:f5:de:d6:42:60:19:e5:00:50:e3:a1:38:5f:
         e5:ed:7b:16:d4:7e:b2:9e:dc:53:48:20:e9:a3:53:e5:1d:9b:
         45:87:5c:89:e1:db:16:9f:0f:86:01:fa:6a:59:9a:b5:8f:98:
         b6:21:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:54:59 2026 by rpki-client