Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
File:                     bXC6GtLQScyzZtIngyXhshIsrnc.mft (raw, json)
Hash identifier:          8UsvTcS+UUZas6jCsnrIy4FKn6OadHYTnNQoxtDLvCo=
Subject key identifier:   4A:2B:63:65:BE:4A:FB:19:47:21:A7:2A:F2:9E:32:64:F9:B9:5A:58
Authority key identifier: 6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77
Certificate issuer:       /CN=A91B6CA0/serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
Manifest number:          1B
Signing time:             Wed 19 Aug 2026 09:41:32 +0000
Manifest this update:     Wed 19 Aug 2026 09:41:32 +0000
Manifest next update:     Wed 26 Aug 2026 09:41:32 +0000
Files and hashes:         1: bXC6GtLQScyzZtIngyXhshIsrnc.crl (hash: xtfKlNwxA/nGnxPPPIei7DWTizZqAl+sbJsy0IGwrrU=)
                          2: E83F3D4A769611F1B4A8F44568A30FBC.roa (hash: mwRw+te8N8Tfr8Fref9XjkMHkxw9JaGnt839b3ney+E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl
                          rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6CA0, serialNumber=6D70BA1AD2D049CCB366D2278325E1B2122CAE77
        Validity
            Not Before: Aug 19 09:41:32 2026 GMT
            Not After : Aug 26 09:41:32 2026 GMT
        Subject: CN=6a857a4c-5ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:1e:4d:2a:7c:55:f3:57:e1:46:5a:8e:30:
                    79:4d:85:52:5e:df:d5:b0:7f:9a:ef:37:f7:fd:a9:
                    bd:65:9d:77:e0:8c:e5:5d:22:21:f8:82:02:61:4c:
                    02:50:bd:9e:ea:1d:67:23:94:46:a1:7a:11:ff:4e:
                    43:48:ce:41:d0:d2:f0:60:22:9f:58:62:5a:12:bc:
                    29:64:07:25:33:22:c3:1c:0b:88:e2:50:90:1e:a4:
                    8f:48:73:54:39:49:29:c5:f1:ee:c4:a3:9d:de:b0:
                    b4:eb:e3:fe:92:86:15:8b:74:2b:b0:ee:f1:40:4e:
                    47:75:78:7f:6d:81:1c:2f:3e:e8:eb:d6:5d:19:e4:
                    71:2a:ab:ad:3f:ab:29:6a:fa:b0:08:25:c6:14:b7:
                    fc:be:5b:38:95:5e:c3:4e:84:2f:6f:e1:56:e6:bd:
                    5e:43:f2:29:bf:00:b4:e6:9d:3f:32:2f:5e:5c:ff:
                    fd:2f:b2:6a:6c:2f:42:e8:40:f1:5b:d5:26:d7:a6:
                    7a:46:bc:df:12:c6:1a:06:c0:8b:87:84:e2:78:d9:
                    09:17:35:ee:70:60:2b:e1:54:db:aa:4e:e1:ff:f7:
                    dd:6c:2e:d2:38:ed:c1:51:71:29:de:9f:63:2a:9d:
                    0d:40:8d:d6:fe:91:2a:ba:a7:01:d2:00:8f:5e:e0:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2B:63:65:BE:4A:FB:19:47:21:A7:2A:F2:9E:32:64:F9:B9:5A:58
            X509v3 Authority Key Identifier:
                keyid:6D:70:BA:1A:D2:D0:49:CC:B3:66:D2:27:83:25:E1:B2:12:2C:AE:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXC6GtLQScyzZtIngyXhshIsrnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CA0/C185C03475DD11F1B7D5E4A06DA30FBC/bXC6GtLQScyzZtIngyXhshIsrnc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:80:15:b5:fc:a6:71:b1:5f:58:18:aa:57:30:f9:ac:95:97:
         e3:08:04:74:86:ec:71:91:31:35:e7:c3:86:c1:1d:db:41:a5:
         85:1e:ae:ff:7d:8d:eb:d5:18:71:47:df:2b:d5:1a:bf:c8:bf:
         0d:a8:40:a7:f1:ab:8a:df:3e:d0:10:5a:3d:06:67:26:92:99:
         95:4f:b1:b5:4c:e7:ba:3f:34:7e:b3:8c:30:12:10:41:4c:ef:
         d9:bf:44:99:d4:3c:aa:72:29:3b:8e:8a:12:0d:bc:e5:65:e5:
         bc:8b:b8:17:31:fe:69:00:60:c0:1c:c9:32:5c:1d:a8:e9:a6:
         50:27:82:31:d8:d8:21:a1:83:01:6d:cf:2a:fb:b4:aa:d9:3c:
         4c:45:d5:97:43:1c:02:fe:91:2c:49:de:cf:ed:ef:37:06:d4:
         59:0f:68:36:d4:2c:41:ae:b7:9c:0d:86:32:e8:90:ca:33:a5:
         5d:2b:63:a0:80:40:0f:b6:83:ab:81:5e:a0:bf:f2:03:87:8b:
         4b:50:ec:07:21:51:7c:85:5a:3b:31:ed:35:5b:67:a8:cd:5c:
         14:c2:1d:c9:75:c8:f0:bf:42:30:fc:e2:b6:b7:00:bb:6e:fe:
         92:02:6b:95:fa:49:27:ed:95:87:d6:a9:8b:2f:d0:73:39:38:
         52:9f:d3:b1
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NkNBMDExMC8GA1UEBRMoNkQ3MEJBMUFEMkQwNDlDQ0IzNjZEMjI3ODMyNUUxQjIx
MjJDQUU3NzAeFw0yNjA4MTkwOTQxMzJaFw0yNjA4MjYwOTQxMzJaMBgxFjAUBgNV
BAMTDTZhODU3YTRjLTVlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJdR5NKnxV81fhRlqOMHlNhVJe39Wwf5rvN/f9qb1lnXfgjOVdIiH4ggJhTAJQ
vZ7qHWcjlEahehH/TkNIzkHQ0vBgIp9YYloSvClkByUzIsMcC4jiUJAepI9Ic1Q5
SSnF8e7Eo53esLTr4/6ShhWLdCuw7vFATkd1eH9tgRwvPujr1l0Z5HEqq60/qylq
+rAIJcYUt/y+WziVXsNOhC9v4VbmvV5D8im/ALTmnT8yL15c//0vsmpsL0LoQPFb
1SbXpnpGvN8SxhoGwIuHhOJ42QkXNe5wYCvhVNuqTuH/991sLtI47cFRcSnen2Mq
nQ1Ajdb+kSq6pwHSAI9e4Ee1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUSitjZb5K
+xlHIacq8p4yZPm5WlgwHwYDVR0jBBgwFoAUbXC6GtLQScyzZtIngyXhshIsrncw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2Q0EwL0MxODVDMDM0NzVE
RDExRjFCN0Q1RTRBMDZEQTMwRkJDL2JYQzZHdExRU2N5elp0SW5neVhoc2hJc3Ju
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlhDNkd0TFFTY3l6WnRJbmd5WGhzaElzcm5jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2
Q0EwL0MxODVDMDM0NzVERDExRjFCN0Q1RTRBMDZEQTMwRkJDL2JYQzZHdExRU2N5
elp0SW5neVhoc2hJc3JuYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAzgBW1/KZxsV9YGKpXMPmslZfjCAR0huxxkTE158OGwR3bQaWFHq7/fY3r1Rhx
R98r1Rq/yL8NqECn8auK3z7QEFo9BmcmkpmVT7G1TOe6PzR+s4wwEhBBTO/Zv0SZ
1Dyqcik7jooSDbzlZeW8i7gXMf5pAGDAHMkyXB2o6aZQJ4Ix2NghoYMBbc8q+7Sq
2TxMRdWXQxwC/pEsSd7P7e83BtRZD2g21CxBrrecDYYy6JDKM6VdK2OggEAPtoOr
gV6gv/IDh4tLUOwHIVF8hVo7Me01W2eozVwUwh3Jdcjwv0Iw/OK2twC7bv6SAmuV
+kkn7ZWH1qmLL9BzOThSn9Ox
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:42 2026 by rpki-client