Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
File:                     Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json)
Hash identifier:          g0n80gclRTyqGlEp4CKTTO8Qrp8mK4A0pd3K70Gf9xs=
Subject key identifier:   91:89:36:14:9B:AE:5E:B4:11:F4:F7:53:C9:AC:F8:F1:10:8E:F5:5D
Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36
Certificate issuer:       /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
Manifest number:          022D
Signing time:             Fri 25 Sep 2026 02:43:55 +0000
Manifest this update:     Fri 25 Sep 2026 02:43:54 +0000
Manifest next update:     Fri 02 Oct 2026 02:43:54 +0000
Files and hashes:         1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: PRpo5p94bYvxH8476JMXIu5ya/y84xxBQknxqGaQJmI=)
                          2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: K86E1zTfM01TUEyEgpEGBIR331MHYQp37XTW/fR1JKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl
                          rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336
        Validity
            Not Before: Sep 25 02:43:54 2026 GMT
            Not After : Oct  2 02:43:54 2026 GMT
        Subject: CN=6ab5dfeb-0e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:42:79:7c:53:32:31:be:50:24:c3:78:44:
                    1d:ec:25:56:57:39:1f:a3:97:ae:41:3b:48:87:36:
                    f4:3f:df:0c:1b:90:dd:5a:01:e1:9c:e2:69:7a:d5:
                    81:54:95:f6:6d:a5:d4:21:fc:b5:72:20:4d:f7:bb:
                    6a:15:fc:cd:29:7e:89:4a:d3:2a:60:6f:0a:79:b4:
                    17:cd:c4:aa:1d:c5:d6:08:8c:cd:08:10:51:a0:a8:
                    a0:d3:78:7f:f2:ba:2a:cd:1e:b6:6b:eb:11:b8:34:
                    50:4e:87:3b:fd:d0:b8:8e:45:f8:5b:2b:04:1c:53:
                    45:14:05:95:ae:78:d0:a5:d4:16:b5:f4:ae:4b:9a:
                    1a:33:f4:af:b5:13:e5:14:bf:cb:bf:40:cf:4a:22:
                    0e:61:3f:57:9d:52:45:1e:bb:f1:52:48:08:36:af:
                    f6:0d:96:5a:f7:9c:d6:67:91:dc:2f:53:7e:bc:f6:
                    2a:bd:7a:ad:f3:48:a4:8d:b1:98:dd:2f:ea:64:b4:
                    1c:8d:20:5c:5d:70:4d:c4:67:a0:b0:0b:17:35:db:
                    df:b8:39:c8:ec:7b:47:6d:de:6e:b2:aa:a4:e1:93:
                    2e:7c:99:44:94:fb:99:de:e3:29:7b:28:3b:6f:4a:
                    8e:bc:68:aa:64:71:c6:ec:a3:d7:44:83:68:cc:12:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:89:36:14:9B:AE:5E:B4:11:F4:F7:53:C9:AC:F8:F1:10:8E:F5:5D
            X509v3 Authority Key Identifier:
                keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7c:b4:5c:fd:89:88:8d:e9:cd:25:34:ed:1f:20:1e:6b:3f:
         01:89:13:53:88:a9:56:80:29:54:9f:73:ed:ce:10:1c:79:07:
         29:5b:38:d1:f9:9d:fe:85:1f:b2:c0:5b:21:eb:49:68:43:75:
         6a:77:c2:54:3e:d2:f5:47:45:7a:71:4d:5f:ad:8b:05:e4:00:
         f2:62:6e:2e:8f:ed:1f:15:62:93:8b:b1:19:c2:49:fe:b0:42:
         f5:94:c0:b8:e5:4a:cb:42:e3:5d:0a:25:85:66:2a:61:9f:48:
         4f:eb:bd:c0:d6:a3:e0:d7:3f:e9:12:32:8b:cc:36:91:db:aa:
         9e:a7:0f:89:71:ae:3a:ee:6e:b4:d8:cf:d7:cd:03:7e:73:c9:
         b4:ec:fc:5d:81:a8:0b:2e:68:84:02:af:bf:79:d9:d5:3f:92:
         d3:42:b4:cf:37:0b:47:58:c7:94:4e:95:82:7b:85:8f:80:08:
         d9:03:be:27:5a:b4:4e:38:1d:67:9e:c2:99:a2:71:c6:b0:d6:
         f8:d3:bb:d6:50:07:91:73:61:41:ad:6a:1c:64:cd:05:e8:46:
         0f:87:85:21:a6:93:e8:9c:a1:2a:69:53:e8:19:58:85:28:7f:
         24:82:1e:5a:17:46:5c:d4:99:ea:29:b2:a3:c9:d0:90:cc:2a:
         43:09:5f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:53:33 2026 by rpki-client