Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
File:                     Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json)
Hash identifier:          J6cNZKSs+BQSQRQkzPe8kc62KYsT/DOasx8/wSncw2A=
Subject key identifier:   04:49:F5:CB:77:5C:BA:C7:48:EB:7B:5D:15:22:B0:C8:CE:15:D8:9A
Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A
Certificate issuer:       /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
Certificate serial:       0DBD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
Manifest number:          0D77
Signing time:             Thu 24 Sep 2026 18:07:34 +0000
Manifest this update:     Thu 24 Sep 2026 18:07:33 +0000
Manifest next update:     Thu 01 Oct 2026 18:07:33 +0000
Files and hashes:         1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: Pjya54ZbrAJWup6T31DykLpcc/dStxNUdqermRA7AUw=)
                          2: lhlS5_TEJHo3UVrOxBep1TpMUiA.asa (hash: LeBm2quaHok7A5PLZUmdjey6RQlm/dDEh2VyeIlI3tQ=)
                          3: 1Tpg7YzcQziHe-csGNB6dRnrmak.asa (hash: sbQuTo/lyfQ4HCZCJQERF/0zsihc9Q3a5ZscI3SwxpQ=)
                          4: ZalB4shFIqzfzkOMiSb08RSiuXk.asa (hash: PYxtm7mxeSPHemXsmYgJ5cLgPaxbB7guU5ug9r5jFKg=)
                          5: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: xoY8l/E5wRhZGsHx91C6s9eN6yf4aMdTOO06Om2k+GE=)
                          6: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: lszQ8yUB/N2uYLH7nBTD6MNw6FLEt393aCgDSU4ngis=)
                          7: 61865C96599711F1904BB35BB3833773.roa (hash: gDZJAF+J4vmJUn7JgYk0JFg5PWvXINC2m+mUpnyhSCE=)
                          8: 12561046368911EEA0CB766BC4F9AE02.roa (hash: YI5D+P7yiPBL/gfzmw4F23rfItyHBBhKoDb4UnkvvPE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl
                          rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3517 (0xdbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A
        Validity
            Not Before: Sep 24 18:07:33 2026 GMT
            Not After : Oct  1 18:07:33 2026 GMT
        Subject: CN=6ab566e6-0932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:76:13:aa:20:76:9a:4c:f8:e6:6a:8b:ca:
                    51:69:e8:9e:9c:95:7c:14:31:ad:9d:66:5c:87:e8:
                    63:93:4c:3d:33:c2:47:c6:83:a0:74:1f:fa:c3:83:
                    22:4e:aa:89:17:86:ed:05:28:8a:5c:e2:2d:26:48:
                    34:4f:9a:4e:ea:7b:3f:26:16:7e:01:ac:18:0f:a7:
                    73:07:e6:5a:fe:a0:b9:bb:95:f5:84:2a:2a:de:d2:
                    3e:eb:15:04:5a:79:d5:e9:c7:0c:05:14:f0:67:11:
                    56:2a:cc:5f:48:d0:68:c7:19:ea:19:88:6e:64:c6:
                    f9:4e:38:50:f4:ec:b4:b2:45:c1:c3:fc:48:b7:33:
                    0d:3b:e9:9b:13:fb:b1:20:99:7c:81:22:d7:73:c5:
                    2a:b5:0e:58:2c:22:1d:ee:89:82:c3:73:6e:c7:ea:
                    77:82:cf:80:16:45:75:74:de:40:3f:fb:48:9d:41:
                    2d:d4:6f:ad:e3:3b:eb:c6:9a:0a:92:92:4a:9d:f4:
                    d9:ae:6e:58:8f:46:a5:08:42:1c:8f:ca:9f:0e:d6:
                    7e:3b:f0:a8:df:d0:85:16:f2:0f:78:5a:bf:18:21:
                    73:96:2c:49:93:70:a4:3d:76:13:ea:7e:f3:68:d1:
                    b9:48:eb:c8:9b:80:03:e3:9d:ec:bf:03:46:62:a1:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:49:F5:CB:77:5C:BA:C7:48:EB:7B:5D:15:22:B0:C8:CE:15:D8:9A
            X509v3 Authority Key Identifier:
                keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fe:68:68:5b:43:12:a9:4d:f2:4c:c5:8b:5a:bc:15:d2:57:
         cf:47:df:57:f2:c8:0f:f7:85:de:39:fc:59:f8:cf:5c:8a:dd:
         be:b5:56:a1:dd:d8:5e:24:10:01:24:7b:8c:f0:d8:d6:81:d5:
         71:b7:9c:89:92:3d:3b:f1:6e:7f:cb:89:41:7a:a4:b1:8c:e4:
         c3:3c:58:1b:71:fb:ed:04:02:30:23:e3:e8:2b:29:d0:1c:63:
         22:1b:c2:92:8a:06:37:f8:70:df:8c:3a:bf:d9:58:07:5b:55:
         74:b5:33:63:d5:c8:54:48:5b:bd:1f:24:00:24:4f:9b:1b:f9:
         27:55:f8:17:ac:3d:57:3d:f9:7c:6c:6c:ca:5a:4f:63:bd:b8:
         30:71:41:b5:c8:6e:cc:ad:2b:2e:2d:32:10:13:6e:54:88:13:
         6e:c3:e9:e5:88:58:32:ef:f6:70:52:60:b7:4a:86:5f:15:9b:
         c6:54:0d:17:aa:53:df:18:01:90:e2:0f:46:10:81:70:45:ba:
         c3:97:4b:3e:43:6c:f8:78:20:54:39:c7:2a:46:fd:81:42:d0:
         4c:52:03:6e:3d:7a:74:79:77:11:b7:9b:21:a3:8b:b9:62:d9:
         9c:a8:8b:e4:9b:82:1e:77:f4:a1:3b:64:85:55:66:04:d7:9c:
         fa:c9:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:49:29 2026 by rpki-client