Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
File:                     bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json)
Hash identifier:          4bkT+0FQ+Xux8ustt1JLIEMdO4F/D3otD9UAfD7vRSY=
Subject key identifier:   72:73:61:A4:91:4D:D2:0A:65:7E:5A:04:28:E7:AD:EA:88:69:59:92
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       016D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
Manifest number:          0168
Signing time:             Wed 19 Aug 2026 05:34:26 +0000
Manifest this update:     Wed 19 Aug 2026 05:34:26 +0000
Manifest next update:     Wed 26 Aug 2026 05:34:26 +0000
Files and hashes:         1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: F7sJ8Ni1mJVP71U0AncVyGzBH10vfMczn9iXRY+0/Do=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
                          rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Aug 19 05:34:26 2026 GMT
            Not After : Aug 26 05:34:26 2026 GMT
        Subject: CN=6a854062-d186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:2b:fa:19:11:a6:35:25:2a:bc:e1:54:bf:
                    5c:8a:ce:97:a0:c9:b2:71:fc:07:3f:e4:76:ef:b5:
                    4b:af:2a:83:ff:69:97:6f:98:c1:ff:f2:83:cb:d2:
                    25:09:9f:b0:03:84:1e:d5:23:09:cb:d5:95:12:4c:
                    25:d0:17:9b:11:a1:2c:0f:1a:7a:c6:b9:55:7f:2d:
                    57:fa:2d:64:bc:1a:54:00:01:c2:f2:f4:86:e6:84:
                    7c:b1:3e:b5:3f:3d:d3:84:8c:de:4a:b6:60:75:84:
                    b2:b7:e1:56:95:0d:c1:fc:a6:16:a2:e7:8b:e3:99:
                    f5:0e:1b:be:9a:96:b6:10:f9:eb:d0:77:9a:81:50:
                    a0:d7:17:65:57:60:dc:13:dd:71:a8:8a:b8:39:e0:
                    af:25:26:d4:42:fb:ab:f7:0f:85:7f:e6:fc:c2:02:
                    b0:22:c4:ae:ec:ff:b1:a1:44:16:29:53:07:5c:b8:
                    de:20:98:e2:8a:04:a1:74:9e:b3:ac:fc:6e:b4:c4:
                    52:9e:b9:4a:25:f1:82:2f:1a:af:e8:cb:5c:b0:73:
                    9f:5c:23:1f:1a:96:fc:4b:81:24:6a:5a:48:47:cb:
                    fc:65:58:35:42:c7:10:87:40:fe:67:58:04:dc:f2:
                    7e:db:e1:01:b2:c9:07:ae:a3:7a:43:ef:c1:34:a8:
                    91:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:73:61:A4:91:4D:D2:0A:65:7E:5A:04:28:E7:AD:EA:88:69:59:92
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:f1:db:55:1d:3c:a7:61:cd:ff:b5:cb:21:4c:95:d1:c0:
         4f:66:96:65:2d:c8:2e:e5:57:ed:20:b6:24:6e:1e:3d:6b:c5:
         52:93:b6:4b:e8:8b:a4:7d:a3:ab:26:e4:2e:c0:03:91:58:ef:
         93:a6:5c:8e:d1:9b:53:01:c3:a1:45:28:b7:a9:3b:8a:e8:fb:
         02:ba:fc:56:8b:55:f4:9a:6b:ba:58:96:c8:d7:64:fd:e8:76:
         0f:93:19:7e:06:82:94:74:94:f1:a1:98:c4:89:4d:a9:07:57:
         f9:77:82:89:fd:1c:2f:15:ad:90:ba:f9:2c:26:0c:b6:2f:e1:
         b9:f9:b3:6e:f5:fc:8d:87:71:eb:11:b5:1a:77:50:62:4c:8c:
         a0:0a:8a:34:bc:43:66:2e:7e:a9:ac:ec:ee:3e:40:8d:0c:c0:
         25:b3:36:61:44:63:3c:4b:1d:ad:66:73:1e:8b:4a:0d:74:fb:
         7c:cf:69:f6:59:96:d4:15:73:88:e9:c3:71:36:06:ce:54:dd:
         52:4c:59:28:6c:2e:49:7b:b8:b9:23:02:7e:29:f0:9a:be:92:
         4a:ad:97:5d:23:2d:dc:7b:5a:84:4f:c5:41:7c:d9:bf:78:19:
         db:56:3b:bd:51:3a:8b:e5:b8:c2:fb:33:d4:fb:00:24:3b:6f:
         73:46:1a:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB
RDg4MzgyRTMwHhcNMjYwODE5MDUzNDI2WhcNMjYwODI2MDUzNDI2WjAYMRYwFAYD
VQQDEw02YTg1NDA2Mi1kMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2wgr+hkRpjUlKrzhVL9cis6XoMmycfwHP+R277VLryqD/2mXb5jB//KDy9Il
CZ+wA4Qe1SMJy9WVEkwl0BebEaEsDxp6xrlVfy1X+i1kvBpUAAHC8vSG5oR8sT61
Pz3ThIzeSrZgdYSyt+FWlQ3B/KYWoueL45n1Dhu+mpa2EPnr0HeagVCg1xdlV2Dc
E91xqIq4OeCvJSbUQvur9w+Ff+b8wgKwIsSu7P+xoUQWKVMHXLjeIJjiigShdJ6z
rPxutMRSnrlKJfGCLxqv6MtcsHOfXCMfGpb8S4EkalpIR8v8ZVg1QscQh0D+Z1gE
3PJ+2+EBsskHrqN6Q+/BNKiRowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJzYaSR
TdIKZX5aBCjnreqIaVmSMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD
NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn
dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR
bmdLWUE2TF9KaVd0aURndU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIw3x21UdPKdhzf+1yyFMldHAT2aWZS3ILuVX7SC2JG4ePWvFUpO2S+iLpH2j
qybkLsADkVjvk6ZcjtGbUwHDoUUot6k7iuj7Arr8VotV9JpruliWyNdk/eh2D5MZ
fgaClHSU8aGYxIlNqQdX+XeCif0cLxWtkLr5LCYMti/hufmzbvX8jYdx6xG1GndQ
YkyMoAqKNLxDZi5+qazs7j5AjQzAJbM2YURjPEsdrWZzHotKDXT7fM9p9lmW1BVz
iOnDcTYGzlTdUkxZKGwuSXu4uSMCfinwmr6SSq2XXSMt3HtahE/FQXzZv3gZ21Y7
vVE6i+W4wvsz1PsAJDtvc0Yacw==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:04 2026 by rpki-client