Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          DZT4l6bLoa1/c6sRTl9x7cas4AcQXAkYxJoPIsvD2Mc=
Subject key identifier:   F7:60:98:2F:1C:98:FC:B5:95:BD:C4:B1:73:7D:8D:E2:F7:C3:E8:B6
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0BDD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0BB5
Signing time:             Tue 06 Oct 2026 19:12:38 +0000
Manifest this update:     Tue 06 Oct 2026 19:12:37 +0000
Manifest next update:     Tue 13 Oct 2026 19:12:37 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: G5cACA2dUS2OMRw3eaneuQvcli6pjxkZmxk/E6p3jOQ=)
                          2: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: 4Y3b7k2nPTigUaGbPaUVrcioubstHM/tbJbvPVaNua0=)
                          3: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b/lrVR4/X7lgZk63ZwV38PNtuW7iDkYwDp3wzCiuCI4=)
                          4: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: xloPVlSDrLjQBNDWntHn7nwEdIAtctEKPygfcXqspac=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 19:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037 (0xbdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Oct  6 19:12:37 2026 GMT
            Not After : Oct 13 19:12:37 2026 GMT
        Subject: CN=6ac54826-a1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:bf:a1:4a:3c:af:6a:05:ae:64:9a:44:18:
                    e8:67:8c:e8:53:95:7d:d6:1d:24:61:17:52:14:24:
                    d0:e4:49:0a:bb:33:62:a5:32:ec:a1:1b:23:03:b3:
                    79:cc:fc:c6:e6:c3:61:35:17:3d:e7:36:4c:43:08:
                    f8:e1:2b:cf:8b:08:40:9c:21:46:8b:da:e2:fa:c5:
                    ad:84:41:86:e0:c5:ae:a0:22:57:ea:d8:57:d7:44:
                    1f:7a:69:2d:2f:c8:45:dd:ea:1d:11:3e:bc:aa:3f:
                    c8:83:4c:eb:5c:ea:01:e7:85:bf:53:d2:6c:60:d7:
                    be:92:70:ea:ba:b0:54:b2:08:8a:f0:8d:67:ab:87:
                    01:2a:9b:c5:68:a3:1f:b5:b0:e4:67:dc:eb:fd:d7:
                    79:93:ca:ee:31:9b:31:35:fe:00:4a:71:b4:c3:a8:
                    04:4f:3f:04:51:29:6f:50:99:86:c7:22:c4:ac:81:
                    38:0c:41:73:a3:36:e5:6a:a3:47:51:83:32:2b:01:
                    06:99:b6:e8:1d:29:b3:fe:2f:70:3f:2d:e6:55:a4:
                    ce:ff:b4:c9:63:81:8a:35:bb:73:81:96:7a:8f:87:
                    3b:82:88:22:93:ce:28:05:52:b4:0a:cc:99:b4:7b:
                    cb:bf:5a:ec:33:73:15:67:66:aa:8d:05:47:f3:9d:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:98:2F:1C:98:FC:B5:95:BD:C4:B1:73:7D:8D:E2:F7:C3:E8:B6
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:1c:6b:8a:4a:bf:7e:0d:30:da:f0:91:98:3f:67:92:3b:
         94:f8:a5:37:7c:57:8a:a5:99:f5:c1:36:84:47:f5:d6:48:68:
         a0:a6:56:d0:65:0d:bc:fa:d0:cb:7d:4c:65:d8:85:cb:d5:db:
         e5:10:b7:e9:73:31:40:83:16:40:5b:0d:63:4a:2b:9a:52:73:
         f3:0e:ec:65:6a:78:40:23:d7:c2:5e:d8:14:63:39:37:db:f7:
         18:eb:46:4b:ec:5f:66:3d:d0:ad:0a:3d:b5:ee:de:2f:ea:f3:
         82:8e:9d:34:33:00:f2:bd:d6:f0:e9:1b:51:9e:13:e8:fa:f6:
         8b:ad:8b:a5:0a:6a:0f:82:4e:cb:a6:79:e5:37:c4:46:6b:a2:
         70:22:cb:43:26:80:b3:e4:21:bb:85:70:b3:c0:cd:34:d3:6b:
         ac:0c:79:7d:3b:61:2c:73:a6:33:43:8c:44:4e:ed:f7:6f:c0:
         28:91:1c:2d:f4:15:7d:f0:8f:1e:7c:94:50:4b:41:9b:b3:76:
         0a:2c:7d:c2:30:d3:4a:ab:ef:d7:8a:ac:66:33:38:a4:88:dc:
         ec:3f:a6:f5:9e:f3:d0:3b:4d:d7:ae:49:65:c0:44:54:ad:2d:
         56:5c:ee:c0:fb:b4:cf:68:9f:75:37:06:23:28:88:79:83:26:
         a5:a9:df:39
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjYxMDA2MTkxMjM3WhcNMjYxMDEzMTkxMjM3WjAYMRYwFAYD
VQQDEw02YWM1NDgyNi1hMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8S/oUo8r2oFrmSaRBjoZ4zoU5V91h0kYRdSFCTQ5EkKuzNipTLsoRsjA7N5
zPzG5sNhNRc95zZMQwj44SvPiwhAnCFGi9ri+sWthEGG4MWuoCJX6thX10Qfemkt
L8hF3eodET68qj/Ig0zrXOoB54W/U9JsYNe+knDqurBUsgiK8I1nq4cBKpvFaKMf
tbDkZ9zr/dd5k8ruMZsxNf4ASnG0w6gETz8EUSlvUJmGxyLErIE4DEFzozblaqNH
UYMyKwEGmbboHSmz/i9wPy3mVaTO/7TJY4GKNbtzgZZ6j4c7gogik84oBVK0CsyZ
tHvLv1rsM3MVZ2aqjQVH851rqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdgmC8c
mPy1lb3EsXN9jeL3w+i2MB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw
X1ZDRnZrUm1CU0U1RDdFekUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhdcca4pKv34NMNrwkZg/Z5I7lPilN3xXiqWZ9cE2hEf11khooKZW0GUNvPrQ
y31MZdiFy9Xb5RC36XMxQIMWQFsNY0ormlJz8w7sZWp4QCPXwl7YFGM5N9v3GOtG
S+xfZj3QrQo9te7eL+rzgo6dNDMA8r3W8OkbUZ4T6Pr2i62LpQpqD4JOy6Z55TfE
RmuicCLLQyaAs+Qhu4Vws8DNNNNrrAx5fTthLHOmM0OMRE7t92/AKJEcLfQVffCP
HnyUUEtBm7N2Cix9wjDTSqvv14qsZjM4pIjc7D+m9Z7z0DtN165JZcBEVK0tVlzu
wPu0z2ifdTcGIyiIeYMmpanfOQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:49:00 2026 by rpki-client