Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          wyyL+tFOmJsiwlJ15EdNoXdElNr4wTCWI2PQkGKs+Qs=
Subject key identifier:   47:92:A6:79:87:AB:49:B7:94:BF:3B:86:6C:A1:CE:B5:2B:04:4A:42
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       04C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0484
Signing time:             Tue 22 Sep 2026 23:49:43 +0000
Manifest this update:     Tue 22 Sep 2026 23:49:43 +0000
Manifest next update:     Tue 29 Sep 2026 23:49:43 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: e7CqdzmH7S1mBiOaIAjbzoHMCy8jnTDku7KZPtIn/FI=)
                          2: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: DqvdHy0dVK5CWNPfPNrFUaz/YCxyxg+f1hCph6DAQYE=)
                          3: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
                          4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
                          5: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1221 (0x4c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Sep 22 23:49:43 2026 GMT
            Not After : Sep 29 23:49:43 2026 GMT
        Subject: CN=6ab31417-aeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:20:6d:22:d2:eb:0e:d8:2b:52:03:59:cb:
                    91:a2:48:2b:5b:c3:50:91:2b:4c:e5:f9:2f:fb:37:
                    f0:93:95:5b:6c:a3:9f:6a:ee:d4:b5:04:8c:55:e8:
                    14:54:32:17:cc:71:22:b1:2e:ee:f9:d8:83:d2:d7:
                    92:91:b0:c9:3e:d2:d9:52:94:a2:0d:ee:e9:51:46:
                    56:03:b9:3d:19:64:1c:78:72:95:ac:c5:93:0d:2d:
                    77:96:e8:51:f8:0c:e0:62:a9:3b:bd:07:22:62:ef:
                    16:20:09:d3:73:e6:91:60:86:96:9c:2f:22:16:c5:
                    e4:72:58:87:89:59:d6:20:b5:fe:0e:47:7a:04:ff:
                    9d:ed:c8:6c:d1:92:20:76:b3:5f:ff:4e:fd:17:49:
                    b3:20:4a:19:fa:38:1a:5c:e7:87:93:49:5a:8a:dd:
                    cd:e7:82:19:ca:22:f7:de:db:0a:bc:a3:3b:73:70:
                    c5:c0:db:e4:12:dc:56:cd:e6:ae:16:95:55:ca:7f:
                    9e:2e:d6:eb:ea:da:91:37:6c:62:5e:05:dd:03:94:
                    88:e5:cc:12:89:d6:ba:1f:51:df:fe:16:b1:13:5e:
                    41:8c:b7:3a:14:8d:f6:7f:8c:9f:dc:a4:49:eb:30:
                    b9:43:8c:a0:ca:2a:9a:c1:0e:5a:34:3a:64:00:c3:
                    09:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:92:A6:79:87:AB:49:B7:94:BF:3B:86:6C:A1:CE:B5:2B:04:4A:42
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:ba:14:aa:39:51:3d:fc:2a:5f:61:97:c2:d4:74:53:09:
         43:2f:58:25:0d:52:30:ae:fb:59:d1:04:c5:33:30:f1:b9:65:
         70:88:3b:98:05:33:a3:f7:5c:2d:a9:02:8f:96:14:27:be:72:
         22:61:0c:8c:81:e1:a0:7e:d2:28:0c:6a:95:22:e2:79:bf:07:
         28:87:72:51:08:16:5a:00:4e:b8:f3:76:7c:b0:a9:7b:d4:1d:
         1d:f7:cc:36:eb:7e:f6:93:70:0a:ae:e5:f0:9b:aa:0e:6d:ee:
         15:9f:57:7a:1d:0a:4a:4e:9e:21:94:3d:55:37:7c:f9:66:5b:
         0d:14:89:c9:1b:e1:0b:64:ad:e7:7b:a8:65:20:be:62:41:70:
         e3:2a:ba:e0:61:c1:ba:62:d9:8e:b4:a3:a5:04:ab:58:42:f5:
         1a:01:e7:59:39:c5:2d:ce:67:18:b0:20:c7:0d:ca:07:ae:11:
         af:a2:ed:9d:b8:ef:77:41:e5:9a:8e:03:f2:b2:1e:bf:70:8d:
         6a:c9:8c:d6:fb:bf:39:fa:12:cc:22:dd:d3:af:f6:f5:06:c0:
         fb:e1:f5:cc:16:db:97:b4:b1:ef:86:7e:9e:db:65:b2:3a:0d:
         d1:3c:fc:e8:f4:84:91:25:90:f4:59:0f:22:d4:71:bf:28:2a:
         d5:1a:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:44:21 2026 by rpki-client