Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
File:                     bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json)
Hash identifier:          Rqy2Ie9i0GWBzpkdNPXD9JZt3GG4BzQb541qQHyE3Jo=
Subject key identifier:   69:78:A2:3C:7D:B9:26:37:D9:66:3E:6C:E4:1A:94:F7:CC:F6:9E:06
Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39
Certificate issuer:       /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
Certificate serial:       9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
Manifest number:          98
Signing time:             Mon 05 Oct 2026 07:49:28 +0000
Manifest this update:     Mon 05 Oct 2026 07:49:27 +0000
Manifest next update:     Mon 12 Oct 2026 07:49:27 +0000
Files and hashes:         1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: nhI0HIwitMfGEWdJ8i1qu17a5lBP+XNNWT7BuF4oS/c=)
                          2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=)
                          3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl
                          rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839
        Validity
            Not Before: Oct  5 07:49:27 2026 GMT
            Not After : Oct 12 07:49:27 2026 GMT
        Subject: CN=6ac35687-29a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:a6:6f:e7:54:f8:ca:9a:77:e6:8f:91:14:
                    bb:b7:bc:b7:12:d9:79:a8:90:e1:51:74:32:22:ae:
                    a9:20:f0:4d:f7:c5:af:40:fa:9d:97:57:88:41:9b:
                    23:fb:bf:9b:d2:ea:4d:61:54:13:77:68:97:99:d4:
                    23:89:a3:69:24:71:01:d0:6e:88:3b:d1:4b:7e:05:
                    7c:44:de:b5:47:1d:eb:ee:4c:a7:61:c4:a4:c8:31:
                    7b:6d:0e:74:9e:f4:13:8f:56:b3:1c:0a:e3:32:c2:
                    ba:fc:59:b5:db:b2:31:cb:13:05:46:d2:35:f1:47:
                    bb:f9:3a:31:44:b4:96:05:cf:71:2c:44:ec:af:93:
                    1e:53:dc:77:45:50:9d:25:73:60:0c:cf:05:82:4b:
                    1d:17:7b:a3:40:d4:5e:80:73:6d:7d:71:e8:24:63:
                    56:c6:cd:59:72:6c:d7:37:ee:fc:2f:d3:e4:0f:d2:
                    22:14:02:b7:b4:9f:9d:72:18:78:aa:f2:83:9c:6d:
                    e5:e4:ad:43:57:34:ed:ea:71:a0:55:85:b8:af:a5:
                    2f:81:54:76:b4:fb:1f:2f:51:59:bb:c6:d8:55:0e:
                    79:24:7e:27:4d:76:02:04:5a:67:55:e9:d7:99:2c:
                    79:46:c5:61:bc:42:6e:45:7e:b5:83:80:41:be:5c:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:78:A2:3C:7D:B9:26:37:D9:66:3E:6C:E4:1A:94:F7:CC:F6:9E:06
            X509v3 Authority Key Identifier:
                keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:dc:13:1b:e5:ef:c0:8e:e8:f8:36:e2:24:9e:c4:3a:d3:66:
         95:4b:1d:27:b4:b4:3f:f8:12:f1:e0:0b:4f:63:ff:e1:d7:a9:
         4f:f4:cb:37:e1:3d:1a:d9:66:7f:5e:63:7b:22:dd:0c:94:76:
         3a:81:2a:9c:ff:d2:a7:44:01:1d:3c:2c:0b:3e:37:1f:97:71:
         21:82:3a:e1:d5:07:8d:32:1d:18:4f:9e:36:af:55:fd:f3:71:
         4b:bf:e9:25:5b:43:c2:b1:f5:63:24:49:93:2f:41:b9:f5:62:
         d7:e1:ee:15:f4:e7:be:a2:89:fd:3a:b7:cd:06:bd:3f:9b:85:
         8b:f4:29:73:d5:55:68:27:3c:f8:1e:b1:c0:bb:cc:d4:de:a5:
         fb:ef:bd:df:93:d1:cf:94:c7:6f:8d:2d:ce:e9:3d:f5:42:18:
         66:6b:af:49:1c:fc:40:22:a3:16:e0:5a:23:27:3d:48:9e:e5:
         c0:93:6f:eb:97:03:6e:08:d2:90:ed:8a:8f:67:bc:87:f6:bd:
         5b:cf:0f:09:7f:d2:7d:bd:22:18:4a:03:45:b0:e6:7b:1b:66:
         47:35:6d:cb:14:99:1e:4f:3c:c5:d8:4f:20:9e:b9:75:6c:11:
         6e:c7:b5:88:f7:b6:f9:80:dc:d2:c7:32:c6:e6:14:7f:a4:8c:
         4a:13:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 05:40:17 2026 by rpki-client