Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
File:                     mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft (raw, json)
Hash identifier:          2pEkzEd5oHuYfa7clr0lwPPL61G2x94dhSAbTGTtemA=
Subject key identifier:   D7:4E:10:87:19:82:5C:E7:5F:3B:48:85:92:30:06:D0:2F:90:6E:F5
Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA
Certificate issuer:       /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
Certificate serial:       0BC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
Manifest number:          0BB8
Signing time:             Thu 24 Sep 2026 19:00:24 +0000
Manifest this update:     Thu 24 Sep 2026 19:00:23 +0000
Manifest next update:     Thu 01 Oct 2026 19:00:23 +0000
Files and hashes:         1: mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl (hash: eQFw6ZOP79OHE24mQMaZWJcyD1X2te0DASsbVLRtl+Y=)
                          2: EF44A44E51EB11EABC11800DC4F9AE02.roa (hash: +aYHCdKpTUqPrKwnjjH4Hbnxa+6NoXo2+s7Ijz7iypQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl
                          rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA
        Validity
            Not Before: Sep 24 19:00:23 2026 GMT
            Not After : Oct  1 19:00:23 2026 GMT
        Subject: CN=6ab57348-dd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:2b:cb:7c:88:ae:da:29:66:d1:e9:a0:fd:
                    ec:57:63:5a:ca:00:b0:8f:93:3f:2f:43:af:2a:9b:
                    94:d6:24:bf:4e:94:50:e3:f9:88:c7:cf:f5:01:41:
                    fb:a1:01:d9:38:de:6a:29:f2:ed:c0:5b:3e:d9:6b:
                    3b:cf:bc:fd:9a:9d:11:e0:bb:e9:bf:1c:02:c8:a9:
                    11:8e:53:ba:d2:2d:04:6a:40:e6:e8:93:3e:7c:4a:
                    9e:de:0c:25:1e:a0:60:ad:a0:db:84:8f:d0:dc:25:
                    c3:c5:03:80:72:57:3e:8c:06:ef:59:52:12:b1:35:
                    2e:c0:0e:1c:80:e9:18:92:70:a4:b9:8f:fc:8b:ac:
                    95:33:ea:0b:af:14:a6:2c:e7:80:79:0b:35:0b:a6:
                    c5:77:7d:80:26:18:3c:93:35:ed:d5:9d:ca:0a:aa:
                    a5:51:73:4c:58:cb:f3:83:7b:b1:27:44:21:85:89:
                    8e:25:6c:0f:6f:b7:47:8b:b2:f8:40:0b:f2:5a:7d:
                    03:e3:b1:18:f6:18:46:32:69:64:40:c6:cb:e9:9b:
                    78:a9:b6:4f:aa:5f:3b:cf:50:93:22:35:53:8b:64:
                    12:75:ef:bd:42:9e:e4:9e:7e:ee:84:a5:5c:0f:9f:
                    d6:f1:6c:d4:41:4e:37:ba:72:83:af:2e:ab:a0:01:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4E:10:87:19:82:5C:E7:5F:3B:48:85:92:30:06:D0:2F:90:6E:F5
            X509v3 Authority Key Identifier:
                keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:60:55:d3:52:c3:31:6c:77:8b:de:5d:dc:e9:e4:46:b8:
         67:22:a2:5f:08:99:45:7d:57:50:ec:c6:51:f5:9e:cc:21:9f:
         df:34:fb:46:04:89:e9:ee:d7:b4:c0:78:94:1b:07:4c:de:a9:
         87:1b:9a:d6:34:20:0e:98:f5:a9:eb:b9:29:5b:a7:bd:f4:fe:
         9f:bf:c7:0f:34:7d:4a:43:5d:f6:91:f8:7a:40:88:9c:b5:9a:
         01:51:1f:a2:14:25:1e:48:73:b9:3f:ee:b0:c0:50:95:26:71:
         f6:ed:de:07:27:5c:55:83:94:98:46:78:66:d9:32:be:78:5a:
         9e:6f:b7:c6:57:35:a4:b5:4b:7d:e5:cc:f3:d0:76:61:0a:24:
         35:5f:1d:3e:75:cd:bc:f9:ca:83:b6:6a:77:5c:a4:cb:4f:72:
         12:2b:74:7b:9a:0b:65:51:07:1b:04:2f:3e:bc:6e:16:12:03:
         14:fd:2c:3d:2e:5a:7a:f0:c3:0b:70:84:f6:1f:ef:d7:16:27:
         7c:42:56:59:78:f4:62:30:ae:f3:2b:c2:0c:71:1d:fe:73:d9:
         91:8e:d1:81:93:53:3a:44:1c:a0:22:31:2f:3b:4e:15:64:dc:
         21:53:70:10:34:a8:1d:f9:a7:6c:c7:12:e8:be:9e:6b:85:5a:
         f8:a4:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:37:00 2026 by rpki-client