Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File:                     bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier:          g0Uq4NeVEI7o9PX7w8buvWW9kxp3Y9c23SDlSlB5urU=
Subject key identifier:   E2:64:2C:59:14:E8:6D:00:FC:B1:64:75:3C:51:43:4D:F3:36:36:FF
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer:       /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial:       084B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number:          087B
Signing time:             Tue 22 Sep 2026 20:50:49 +0000
Manifest this update:     Tue 22 Sep 2026 20:50:48 +0000
Manifest next update:     Tue 29 Sep 2026 20:50:48 +0000
Files and hashes:         1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: ZjXbupInjUrKJJkHNvf2ul109a3ri0ywiBOzLoTUWhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
        Validity
            Not Before: Sep 22 20:50:48 2026 GMT
            Not After : Sep 29 20:50:48 2026 GMT
        Subject: CN=6ab2ea29-945b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:40:66:39:31:0c:6d:ff:9f:3b:2c:23:b5:10:
                    ca:07:ce:38:53:61:7c:41:92:c8:78:4f:c5:61:51:
                    d6:1f:c5:ab:b3:91:ee:a9:d1:ab:4e:8d:de:fb:a7:
                    64:33:20:e7:03:29:90:80:6d:fd:be:39:45:49:2e:
                    8e:3b:ba:58:69:5d:f7:e5:67:f2:9a:7e:5c:c3:91:
                    b8:8f:2e:46:58:9c:5c:e7:33:dc:88:4f:03:78:3b:
                    31:4f:54:52:94:5b:73:7d:eb:0e:df:9d:b2:bd:11:
                    fa:49:77:62:a7:ab:72:d3:dd:41:a8:3a:1c:b9:43:
                    ee:cf:75:cb:11:f9:7a:a3:7c:62:71:7c:c6:71:5c:
                    09:32:c5:f9:d7:81:e2:c4:82:fb:9f:c3:7c:fb:be:
                    35:97:6e:0a:f5:88:48:0d:31:33:1a:cf:3f:03:51:
                    6d:d8:61:84:00:c4:13:b5:46:cd:69:66:cb:54:4e:
                    03:cd:36:82:e9:4d:91:0a:44:f0:a5:9d:d4:77:4b:
                    51:ef:77:87:c9:54:2b:6e:1f:c8:f0:40:7c:ee:50:
                    96:c8:f3:95:03:dd:84:99:36:b0:85:bb:01:0e:55:
                    38:04:17:fb:7d:55:d9:aa:e2:43:59:6e:5d:02:6d:
                    0b:aa:5f:88:69:df:91:d8:5c:12:70:ed:c8:7b:a8:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:2C:59:14:E8:6D:00:FC:B1:64:75:3C:51:43:4D:F3:36:36:FF
            X509v3 Authority Key Identifier:
                keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:61:8d:69:88:99:c7:26:dd:b0:54:02:4d:ad:90:a4:7b:a6:
         7b:c3:28:e7:94:48:5f:85:11:af:94:90:a8:a6:a7:da:78:14:
         01:ca:bc:73:23:70:ed:1e:33:cd:b1:f0:23:93:38:f8:c9:f5:
         eb:3d:12:23:77:13:02:19:60:4d:f7:01:93:66:d3:a0:bd:da:
         f3:f9:0e:7b:ff:18:b0:8c:25:ad:4b:23:60:7e:c8:0f:f6:94:
         10:85:73:8e:a4:c5:1e:25:76:c5:bc:b3:ad:87:10:42:2a:28:
         51:e1:ab:89:77:b0:c8:93:cc:1b:7b:29:17:bb:a7:58:ca:1e:
         b3:cf:f3:b8:c6:0c:c1:a0:65:d9:25:05:6d:b1:23:68:e2:63:
         01:fd:1d:0c:a9:eb:45:f0:42:9d:aa:39:52:4b:ba:2a:7a:e9:
         6d:47:5e:fd:61:7e:a7:57:5e:54:95:61:10:4e:ca:ad:ef:f4:
         62:08:da:a4:0f:92:f4:ad:bf:77:d7:1d:c5:5d:22:c0:14:3f:
         2d:f6:46:ae:c7:45:3b:c9:2f:21:c6:a7:c3:bd:8e:57:90:48:
         b9:5e:8d:16:67:4f:47:eb:8b:c4:dc:db:0f:16:77:e1:93:1c:
         e4:f3:6f:fd:9a:48:b5:51:a2:93:32:fe:bc:4e:2d:16:e1:6c:
         d6:8e:7f:c8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC
RTBGREZGNkMwHhcNMjYwOTIyMjA1MDQ4WhcNMjYwOTI5MjA1MDQ4WjAYMRYwFAYD
VQQDEw02YWIyZWEyOS05NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA90BmOTEMbf+fOywjtRDKB844U2F8QZLIeE/FYVHWH8Wrs5HuqdGrTo3e+6dk
MyDnAymQgG39vjlFSS6OO7pYaV335Wfymn5cw5G4jy5GWJxc5zPciE8DeDsxT1RS
lFtzfesO352yvRH6SXdip6ty091BqDocuUPuz3XLEfl6o3xicXzGcVwJMsX514Hi
xIL7n8N8+741l24K9YhIDTEzGs8/A1Ft2GGEAMQTtUbNaWbLVE4DzTaC6U2RCkTw
pZ3Ud0tR73eHyVQrbh/I8EB87lCWyPOVA92EmTawhbsBDlU4BBf7fVXZquJDWW5d
Am0Lql+Iad+R2FwScO3Ie6jC3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJkLFkU
6G0A/LFkdTxRQ03zNjb/MB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB
NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf
MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4
WGxsNU9MRlU5Y2ktRDlfMncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP2GNaYiZxybdsFQCTa2QpHume8Mo55RIX4URr5SQqKan2ngUAcq8cyNw7R4z
zbHwI5M4+Mn16z0SI3cTAhlgTfcBk2bToL3a8/kOe/8YsIwlrUsjYH7ID/aUEIVz
jqTFHiV2xbyzrYcQQiooUeGriXewyJPMG3spF7unWMoes8/zuMYMwaBl2SUFbbEj
aOJjAf0dDKnrRfBCnao5Uku6KnrpbUde/WF+p1deVJVhEE7Kre/0YgjapA+S9K2/
d9cdxV0iwBQ/LfZGrsdFO8kvIcanw72OV5BIuV6NFmdPR+uLxNzbDxZ34ZMc5PNv
/ZpItVGikzL+vE4tFuFs1o5/yA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:57 2026 by rpki-client