Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
File:                     bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json)
Hash identifier:          +f8FySNpjb8pmE+HrWj5qyrn8jXD2mhFCo/SB8J8ZHA=
Subject key identifier:   EF:24:90:F1:E8:E5:20:72:76:95:4B:37:EA:BC:83:EC:FA:25:D7:3A
Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53
Certificate issuer:       /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
Certificate serial:       0AF9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
Manifest number:          0AEC
Signing time:             Sun 04 Oct 2026 19:26:32 +0000
Manifest this update:     Sun 04 Oct 2026 19:26:31 +0000
Manifest next update:     Sun 11 Oct 2026 19:26:31 +0000
Files and hashes:         1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: vdms5KGZY89SFS7vKTaPsTjK8cOP08bTSGHq0NBl/GY=)
                          2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: 6zwL+CyahpyzOQDZ6R2F0afujTGC0qWAsIklrEXhVhU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl
                          rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2809 (0xaf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53
        Validity
            Not Before: Oct  4 19:26:31 2026 GMT
            Not After : Oct 11 19:26:31 2026 GMT
        Subject: CN=6ac2a867-e7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:2f:56:a8:7e:90:68:61:87:8d:52:27:a9:
                    79:ce:0e:e2:6a:94:26:e2:ad:d1:14:d7:64:c1:4a:
                    44:f9:ef:ac:cd:40:7d:e6:51:78:6f:c6:40:83:d0:
                    03:82:cc:e1:a3:94:75:c9:92:5b:81:82:ec:70:5a:
                    1f:ea:0b:67:ae:86:51:86:62:01:d5:07:a1:45:6d:
                    c8:0c:22:6b:ce:3e:f1:14:4b:7c:37:38:17:de:ca:
                    d1:57:cb:f6:f3:3a:a4:6f:3d:f2:ad:81:64:9a:8e:
                    d1:e5:cb:17:4e:c1:3f:f2:7a:aa:8b:4a:5e:12:8d:
                    07:31:ea:44:12:f4:f1:80:c5:66:ed:d8:cc:9e:68:
                    9d:e1:ce:e9:ac:9b:8a:ff:33:77:cf:c1:24:b6:fc:
                    9e:2b:e4:f6:74:89:cd:53:77:90:4f:ac:8a:06:7d:
                    ee:21:e0:97:da:d0:31:aa:fa:ed:b5:0c:47:d4:2d:
                    4a:ed:7f:64:a5:f8:f3:5e:22:42:66:63:54:50:c7:
                    a3:79:5a:f4:c2:f2:08:0f:2d:09:f3:9d:2f:76:47:
                    11:84:f2:f3:a1:30:23:87:c1:c3:9d:65:6d:99:8a:
                    9b:49:26:a5:56:a4:e8:4f:fe:a9:02:a7:75:87:53:
                    af:67:2c:1d:52:58:d1:16:6d:5d:8f:0a:2f:63:a8:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:90:F1:E8:E5:20:72:76:95:4B:37:EA:BC:83:EC:FA:25:D7:3A
            X509v3 Authority Key Identifier:
                keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:3e:47:70:1f:ad:68:30:1e:d7:ac:47:de:8b:02:f6:4d:
         89:78:3c:99:7a:bc:95:7d:bc:4c:86:a9:8a:86:35:11:5b:c6:
         c6:0f:eb:10:e7:89:bd:2f:0a:82:3c:61:42:03:c9:b0:6d:22:
         42:5b:c5:20:a1:72:20:cf:2a:22:38:98:cf:4b:9b:b9:8d:60:
         de:90:89:aa:9a:f0:44:3a:43:b8:cb:70:ee:a5:d5:32:5b:d1:
         d8:b0:95:82:da:9f:a7:13:f8:ab:59:30:e1:f9:92:8e:f0:0e:
         ce:88:42:6a:80:a9:43:1e:8d:e3:bc:e8:eb:c9:19:8a:68:9c:
         39:68:57:54:66:4e:b3:cf:5f:10:a5:3d:97:77:38:b1:32:e5:
         33:a1:07:84:2d:8c:fd:a9:50:34:8e:55:ff:b7:01:8e:94:7a:
         ef:d5:ba:c4:3a:b7:77:90:48:af:7d:0c:e6:cf:71:4d:b4:ef:
         1f:7c:e6:36:ae:0e:4a:e5:20:e4:a3:9e:5b:4f:f5:34:20:a2:
         aa:74:37:81:6d:a6:aa:19:ca:52:f3:bb:80:c0:bc:82:e4:2f:
         58:1b:e7:43:1f:28:d0:2e:c5:b9:e2:fe:5c:32:6e:e7:c3:01:
         08:42:45:11:c3:50:26:a1:55:4d:9e:6d:ee:6f:49:ca:af:f7:
         bf:79:8e:21
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE
MjU4Q0FCNTMwHhcNMjYxMDA0MTkyNjMxWhcNMjYxMDExMTkyNjMxWjAYMRYwFAYD
VQQDEw02YWMyYTg2Ny1lN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtaQvVqh+kGhhh41SJ6l5zg7iapQm4q3RFNdkwUpE+e+szUB95lF4b8ZAg9AD
gszho5R1yZJbgYLscFof6gtnroZRhmIB1QehRW3IDCJrzj7xFEt8NzgX3srRV8v2
8zqkbz3yrYFkmo7R5csXTsE/8nqqi0peEo0HMepEEvTxgMVm7djMnmid4c7prJuK
/zN3z8EktvyeK+T2dInNU3eQT6yKBn3uIeCX2tAxqvrttQxH1C1K7X9kpfjzXiJC
ZmNUUMejeVr0wvIIDy0J850vdkcRhPLzoTAjh8HDnWVtmYqbSSalVqToT/6pAqd1
h1OvZywdUljRFm1djwovY6hifQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO8kkPHo
5SBydpVLN+q8g+z6Jdc6MB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC
MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x
MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx
QUt2NlFrX2JCMlRTV01xMU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiUw+R3AfrWgwHtesR96LAvZNiXg8mXq8lX28TIapioY1EVvGxg/rEOeJvS8K
gjxhQgPJsG0iQlvFIKFyIM8qIjiYz0ubuY1g3pCJqprwRDpDuMtw7qXVMlvR2LCV
gtqfpxP4q1kw4fmSjvAOzohCaoCpQx6N47zo68kZimicOWhXVGZOs89fEKU9l3c4
sTLlM6EHhC2M/alQNI5V/7cBjpR679W6xDq3d5BIr30M5s9xTbTvH3zmNq4OSuUg
5KOeW0/1NCCiqnQ3gW2mqhnKUvO7gMC8guQvWBvnQx8o0C7FueL+XDJu58MBCEJF
EcNQJqFVTZ5t7m9Jyq/3v3mOIQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:25:13 2026 by rpki-client