Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
File:                     B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json)
Hash identifier:          V01aPqJiEkBWeqbAZJGX7CEWjIz7wtawIVC5f8gy+rA=
Subject key identifier:   73:B3:FE:2A:09:3F:AC:C9:6B:84:B8:6B:39:FF:A8:7C:7B:97:89:44
Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F
Certificate issuer:       /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
Manifest number:          0164
Signing time:             Sat 03 Oct 2026 05:39:31 +0000
Manifest this update:     Sat 03 Oct 2026 05:39:31 +0000
Manifest next update:     Sat 10 Oct 2026 05:39:31 +0000
Files and hashes:         1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: jLHreFldDi1hHQ7AEzKEbaKI0CSNpRDSn2B8nN1IFbk=)
                          2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: PJLa3dcXC2/TqvhR77SxkhOWTThse4ZX840dFNg6P88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F
        Validity
            Not Before: Oct  3 05:39:31 2026 GMT
            Not After : Oct 10 05:39:31 2026 GMT
        Subject: CN=6ac09513-d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:d0:2b:95:6f:c9:99:71:26:3d:27:0d:b8:
                    ba:89:ab:fc:81:6c:2b:53:ca:73:fc:7c:d8:f1:f5:
                    9a:84:9a:22:26:aa:2b:75:60:4b:1f:66:e1:b7:5b:
                    83:ce:ae:3d:3b:53:35:24:76:ea:94:43:90:71:35:
                    65:62:35:50:cf:ab:62:8c:36:87:e7:dd:36:9a:ea:
                    32:59:dd:aa:21:81:3b:a4:3d:b3:e4:bf:05:e6:67:
                    94:14:71:97:62:08:b6:34:ef:7b:47:8f:56:40:4b:
                    09:cd:24:8f:16:65:2a:ba:36:1c:f7:26:ad:a7:72:
                    16:43:86:00:d3:8b:a7:69:7b:6c:7a:60:74:c4:e7:
                    80:8f:cb:e6:87:1a:99:91:2f:c6:ef:35:b7:1c:84:
                    bb:0e:89:47:3e:d5:f2:23:28:d6:9a:19:f3:bf:ff:
                    68:18:92:8e:60:cf:fe:9f:d5:d1:20:1f:a7:cb:7e:
                    db:71:9c:d8:a0:4e:05:6c:c9:1d:87:a2:93:57:5a:
                    28:6f:c3:02:d8:da:aa:f3:6e:a4:07:05:70:ea:d7:
                    ae:24:c4:a8:d3:86:00:21:04:98:05:8e:bb:76:59:
                    67:51:14:36:64:68:1d:1c:12:1c:92:ca:23:93:f0:
                    d3:a9:ec:61:54:48:6e:f8:39:0e:e4:6b:79:b7:68:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B3:FE:2A:09:3F:AC:C9:6B:84:B8:6B:39:FF:A8:7C:7B:97:89:44
            X509v3 Authority Key Identifier:
                keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f9:c5:94:71:91:dd:92:2d:2d:c7:39:12:7d:41:c5:97:28:
         c7:c2:a8:c2:31:ae:a7:cc:78:b2:31:91:1b:bc:5b:4a:ab:c4:
         da:ba:cb:bf:50:9b:6e:e8:3a:9f:fb:d4:a1:e4:c3:00:36:e1:
         55:90:12:ef:a9:5b:a3:be:6c:22:87:c9:cd:0c:24:0c:e7:3a:
         7e:65:78:9e:2e:66:f8:88:ad:9f:71:f3:ee:6b:9d:35:85:70:
         1b:5b:d1:34:eb:fa:37:17:c2:64:1b:b4:8a:b3:03:df:95:9f:
         6a:80:c2:a6:82:ae:ab:c8:10:9a:c2:ba:63:29:55:fd:38:c6:
         0e:50:60:b2:5a:30:15:cd:a9:0f:b8:e1:b6:fc:65:34:74:fd:
         2c:41:fc:5a:17:7a:54:0a:9d:5f:96:23:b0:55:d8:67:46:74:
         66:a0:a5:c5:e6:7a:5c:db:2d:b5:88:26:80:53:0a:2a:cc:d8:
         ce:8f:5f:c0:b6:a6:a5:2c:ef:96:b2:ef:cb:d1:00:44:5b:fe:
         26:4c:99:10:7d:62:1f:86:f0:a9:af:f7:d4:06:e9:59:6a:57:
         49:bf:e4:ff:17:4d:23:70:fb:4d:b8:56:0b:67:00:c8:f5:4b:
         25:05:42:91:62:ae:bc:89:bb:85:94:3c:de:c1:c3:65:50:8e:
         91:71:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:49 2026 by rpki-client