Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          pZZZudTnP1PDNeyBlitN8dlWH5bbnUo06mouF9xnxTI=
Subject key identifier:   4D:DB:4D:7E:7D:FF:C2:06:55:34:13:7A:C7:6A:45:63:B3:04:DD:E8
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          01EE
Signing time:             Tue 22 Sep 2026 22:27:55 +0000
Manifest this update:     Tue 22 Sep 2026 22:27:54 +0000
Manifest next update:     Tue 29 Sep 2026 22:27:54 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: CzZzlZuV8RoIaAC7EUpudsyZi/RVPN23yIlbv6NO1Zk=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Sep 22 22:27:54 2026 GMT
            Not After : Sep 29 22:27:54 2026 GMT
        Subject: CN=6ab300ea-cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:97:09:da:13:95:b1:92:11:ce:16:b5:c7:
                    8f:82:45:20:30:cf:c8:73:75:27:41:e5:e7:9b:12:
                    23:90:90:10:52:9a:5a:39:af:eb:4c:9c:6b:93:9b:
                    d3:20:b8:4c:53:49:1c:17:10:6a:43:12:98:24:56:
                    39:07:e5:fc:d1:18:5e:5e:40:ef:cb:2a:f7:25:81:
                    e4:d5:90:db:06:41:f9:83:36:2b:1d:e6:a6:74:ab:
                    01:d0:52:45:fc:16:23:02:dd:eb:ac:d3:e3:53:69:
                    0c:2d:62:2f:82:35:37:09:b7:0f:35:1d:90:18:34:
                    28:f7:fb:27:1e:3e:b3:e1:c9:58:48:97:6a:45:50:
                    1c:5c:93:43:7a:42:dd:3b:d2:6a:23:d9:33:50:d4:
                    3e:6f:8e:ce:fe:5f:25:eb:e2:a2:70:d0:04:c0:29:
                    67:0b:48:46:ea:bd:91:ac:b2:0b:23:3f:c7:21:50:
                    ec:59:23:23:90:f4:85:0c:97:f7:f1:2c:e2:85:3e:
                    c9:74:12:1a:04:8e:7d:ce:b0:6d:0e:58:c5:82:86:
                    0e:da:2f:fa:4a:41:e4:8b:3b:6d:22:60:8e:e8:45:
                    24:9b:4b:c7:88:c9:f3:25:8e:a0:77:20:e4:56:c7:
                    f6:d1:a3:a4:14:e1:23:63:ac:29:e4:30:37:46:ec:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DB:4D:7E:7D:FF:C2:06:55:34:13:7A:C7:6A:45:63:B3:04:DD:E8
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:49:6d:a4:13:98:e0:7a:6e:da:f7:a3:6d:76:15:cb:ae:bd:
         cc:bb:d9:66:40:dd:a9:30:68:ab:49:b4:51:1a:77:78:9d:eb:
         d0:63:07:19:eb:c4:27:07:b9:6e:30:99:5e:38:b0:ca:9f:b3:
         c5:f2:44:ab:81:c2:3b:13:c9:e3:4d:5b:e1:fa:72:d5:b5:f8:
         87:d3:58:6d:a6:39:2c:ea:69:7a:f6:fd:bf:90:75:35:d8:35:
         d5:a9:c5:e7:de:5f:bf:91:38:70:81:6b:2f:71:ba:e5:ce:5f:
         9d:5b:a5:80:d8:16:66:7c:57:f9:b0:b3:19:09:73:10:05:1b:
         66:2d:1b:95:5e:a7:d6:3e:aa:b3:73:9c:79:c0:1b:b8:93:99:
         f6:51:04:5b:7b:9c:18:1e:4a:67:fc:73:aa:fe:f2:f1:92:56:
         b1:cc:73:7a:f5:6f:e5:76:89:99:91:49:f6:ed:0c:c7:fa:50:
         41:c2:a7:0c:a1:37:16:4d:05:fd:e0:d2:73:f0:4a:18:c4:18:
         24:a1:fb:83:c8:de:af:ee:68:50:aa:1c:84:a0:56:43:76:55:
         2a:01:89:cd:23:e3:f3:ac:63:92:31:dc:03:cd:2e:7c:fe:ee:
         18:0e:2a:7b:3d:ec:15:4b:27:5a:b9:3f:dc:31:74:ab:d1:be:
         fa:d8:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:54:38 2026 by rpki-client