Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          sYLfhcEF2Ss5EHzoJhv40bNvhiRM8BaOnjHPZXeyGFA=
Subject key identifier:   6B:E8:7C:56:24:6E:AB:5C:D5:B8:E0:25:F0:A5:C7:27:89:7F:CE:B6
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          A2
Signing time:             Tue 27 Oct 2026 07:42:52 +0000
Manifest this update:     Tue 27 Oct 2026 07:42:52 +0000
Manifest next update:     Tue 03 Nov 2026 07:42:52 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: 1+uN0Q6RZ7ohFACKwTmPxa/gNFuwXYigQLoJ3JsxfYw=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:42:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Oct 27 07:42:52 2026 GMT
            Not After : Nov  3 07:42:52 2026 GMT
        Subject: CN=6ae055fc-99e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:f0:8a:39:4f:0d:c1:ff:3a:39:4b:f2:3e:
                    b1:91:90:dd:b6:81:6d:55:9f:46:47:93:4a:0c:7b:
                    fb:0d:60:d4:09:e3:ed:4a:82:30:30:fb:14:3f:0b:
                    87:4b:8b:0c:78:d6:e9:19:2b:1c:2a:46:15:61:e9:
                    a8:0c:76:9d:67:b8:f7:e0:4a:83:75:ef:53:1f:89:
                    55:8c:7a:e8:a0:67:d2:6f:db:1c:ae:32:2b:7d:c9:
                    11:d1:83:59:34:bd:ee:ef:a8:46:34:a5:c7:32:e8:
                    87:6f:d8:64:9d:e2:44:63:23:28:f8:4a:94:a9:11:
                    b9:22:99:90:6f:26:88:d8:6c:41:29:50:a5:ee:14:
                    54:28:e4:86:b0:0a:39:60:3d:68:5d:98:1b:43:b4:
                    c8:5a:1d:28:a9:83:65:29:11:d9:73:be:66:d8:0a:
                    89:6e:51:b5:0e:be:7b:f2:9a:db:c6:fb:5c:84:67:
                    be:e3:95:16:40:a8:2f:80:af:b2:3a:81:13:53:34:
                    1a:66:f1:2b:7c:2e:ea:00:8c:8c:b6:29:9f:2f:f1:
                    d8:3b:3b:6d:4c:2e:bb:0a:1a:b0:13:c8:b1:eb:6c:
                    6a:9d:20:4b:21:fa:33:72:fe:0c:66:b0:51:c0:a1:
                    38:38:54:99:39:29:37:06:71:50:2e:01:dd:da:7c:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:7C:56:24:6E:AB:5C:D5:B8:E0:25:F0:A5:C7:27:89:7F:CE:B6
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:dd:db:99:a9:1d:b5:75:cf:df:99:d3:1a:54:bd:2d:4d:dc:
         5a:f7:47:ed:34:55:05:b9:a9:b9:cc:84:a5:1a:2b:8d:a0:d4:
         a6:47:e9:c5:ea:68:46:c8:30:2d:2d:6a:35:b0:5e:7d:23:93:
         ee:07:6d:05:6c:52:6c:ad:76:a3:15:66:e0:58:99:9c:88:b5:
         0e:85:74:6c:87:a2:6f:1b:fa:5d:9b:e9:4f:0b:03:f6:f1:fb:
         e0:c7:a5:f4:eb:56:15:9b:b2:b0:dc:1a:fe:f0:f0:98:a4:ea:
         9c:df:48:27:01:b4:a5:03:02:f1:ed:92:9e:87:49:3a:11:eb:
         ab:d8:74:e1:fc:a7:d5:e8:83:98:83:b4:6d:8c:7a:61:c9:2c:
         26:22:62:1a:f7:eb:e2:59:86:b1:3d:71:7a:2c:76:28:b6:7e:
         8d:64:2b:d5:1c:4b:04:1b:ca:94:fa:53:47:80:6c:74:e0:7c:
         c3:58:ac:50:a1:1b:a6:77:9a:4a:4d:3c:79:df:28:82:08:0e:
         f0:7b:a5:da:19:47:00:71:d4:38:b0:5c:34:9a:c9:19:da:84:
         74:6d:1a:a2:77:60:e1:2c:9c:f2:ea:e1:a1:52:7a:90:de:f0:
         28:e9:dc:12:e0:74:d8:1c:f0:0a:b0:c9:28:ea:aa:98:dc:40:
         89:e0:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:56:06 2026 by rpki-client