Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File:                     Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier:          QY2q8X3gtzooSEdVSwEyhrt4xnSTROdtSPwaVIFnNyw=
Subject key identifier:   5A:1B:5A:F9:9E:AD:56:FA:FA:64:C5:34:A6:21:AD:B3:D0:D7:9E:8E
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0ABD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number:          0AB3
Signing time:             Sat 26 Sep 2026 19:34:03 +0000
Manifest this update:     Sat 26 Sep 2026 19:34:03 +0000
Manifest next update:     Sat 03 Oct 2026 19:34:03 +0000
Files and hashes:         1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: +7hcbDCVaRP+su9l5pHq0vS6USNkPegATte1iu9ouSI=)
                          2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 19:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2749 (0xabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: Sep 26 19:34:03 2026 GMT
            Not After : Oct  3 19:34:03 2026 GMT
        Subject: CN=6ab81e2b-ba04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:6f:f8:1a:3d:05:1a:70:2a:05:16:6c:3b:
                    58:08:06:1f:2b:07:8b:70:3b:cb:b3:eb:68:a7:68:
                    99:8e:7f:3c:09:a2:93:5c:6e:fd:75:33:91:4d:1b:
                    7d:44:87:3a:54:bf:30:31:cf:ae:1e:1e:45:8e:6d:
                    1c:85:db:29:13:18:fd:74:3c:68:cb:cb:71:74:af:
                    77:bd:d3:75:ee:fb:d1:d8:75:05:50:e6:b7:31:2c:
                    49:53:00:8e:9f:7c:97:e6:fa:45:9c:4c:a6:2f:d8:
                    95:dc:c4:79:c7:63:47:d9:82:ef:8f:37:43:60:8e:
                    6c:29:ab:9d:ed:bf:42:34:0b:f7:72:13:6b:a6:dc:
                    c1:3e:64:f5:f8:af:c0:55:d5:d7:b3:91:5f:83:2c:
                    0e:df:5f:0f:82:dd:cf:13:64:34:8c:80:da:d3:f5:
                    dd:32:75:fe:26:50:6e:09:34:00:76:77:e1:91:6f:
                    7d:3e:71:40:a8:08:4c:93:27:db:a3:8f:12:93:95:
                    22:31:03:b7:fe:46:76:6a:4c:12:ac:f1:91:ed:de:
                    86:24:c0:31:7b:7c:ab:6e:c4:a8:ff:21:6c:0d:93:
                    03:49:61:90:9b:6f:99:e7:2a:e3:ca:2a:72:12:51:
                    ed:3f:60:a7:df:0d:a2:2c:93:2a:66:df:4b:19:3e:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1B:5A:F9:9E:AD:56:FA:FA:64:C5:34:A6:21:AD:B3:D0:D7:9E:8E
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:69:78:1a:99:26:15:31:e7:1e:80:b9:e3:20:01:3b:d7:7b:
         37:c1:e3:56:6e:f6:ee:2d:c4:0d:ef:3e:36:f7:a3:ff:9b:a5:
         75:9a:47:d9:d6:29:07:04:d2:f9:db:9f:49:86:78:ba:0e:e6:
         c9:75:36:3a:fc:35:50:92:bd:36:46:8a:16:7c:d0:ed:9b:dc:
         80:cd:82:27:56:01:95:aa:33:96:95:3a:87:b8:ee:bf:d0:33:
         51:2a:30:ad:2d:2a:1b:67:4a:c7:34:50:50:d6:ac:ed:f3:4c:
         eb:34:60:52:f8:68:08:34:e1:57:95:66:51:3e:0d:80:ca:b0:
         5e:e0:60:71:c2:57:89:a3:cc:11:8d:72:f7:19:39:70:29:10:
         89:4b:a4:88:8e:07:4a:e1:8d:4b:e3:a3:48:b2:7d:56:f0:20:
         6e:82:65:17:9f:1c:c2:73:eb:d6:3e:79:71:2f:48:f1:2a:85:
         c6:70:9b:ab:96:ac:a3:b0:a3:db:15:29:12:dd:44:db:3b:e9:
         9e:14:f5:b4:71:47:c1:39:55:12:b0:54:b0:5c:be:b7:6b:da:
         52:8e:1e:16:b9:71:9d:08:7f:6a:0f:a1:17:aa:a9:d2:1b:13:
         f3:36:cf:3e:48:f9:be:79:f6:9c:84:76:74:41:f4:c7:56:fe:
         7d:ba:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:48:01 2026 by rpki-client