Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          4FG5cpgbZrIlTY2lYdzVyIVIw0zVRrMelRhwSxd2ecc=
Subject key identifier:   D7:26:0C:9E:19:F4:24:B9:8A:1A:0D:B2:77:2A:6A:B9:1E:ED:C2:0A
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       0737
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          0727
Signing time:             Sat 24 Oct 2026 22:05:03 +0000
Manifest this update:     Sat 24 Oct 2026 22:05:02 +0000
Manifest next update:     Sat 31 Oct 2026 22:05:02 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: W5scYeJkHEFAHG1y4mNl4AAKKoxt9XcMmFGiZtZg4t8=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: tT9i1DbRbJsGaFhFIKWc3hF5z1oqGKKoTGSshBbumJ8=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: K7MZ3T0dMRToMyp98c/Q67E9wIW0vsuQeli/CjrwVoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 22:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Oct 24 22:05:02 2026 GMT
            Not After : Oct 31 22:05:02 2026 GMT
        Subject: CN=6add2b8f-19ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:a4:3b:1b:d2:3e:56:b2:e6:18:5e:a7:8d:
                    49:22:bd:3d:ee:c3:d8:b8:bf:ba:97:02:f1:85:97:
                    e5:ce:46:b3:4c:4b:d1:6d:82:41:72:7c:90:49:30:
                    7b:75:6f:e0:be:26:b4:a7:47:6e:2d:a9:fa:8e:9b:
                    32:f2:ba:9b:d3:23:8a:ac:9f:6d:81:a0:d0:50:9d:
                    b7:63:3b:0d:c8:f7:56:56:ff:7a:c0:31:a8:7a:47:
                    bd:3c:88:e9:b7:fb:ba:2c:a7:a7:b6:12:48:4b:aa:
                    72:a7:97:88:e5:f5:8f:2d:da:06:e5:80:ee:48:60:
                    ae:b4:7a:cc:fb:93:a8:d2:6d:a5:51:5a:f1:95:7f:
                    1a:3b:47:23:a5:5b:1e:c6:01:d1:dc:22:ef:89:5d:
                    96:58:cb:0f:e1:2e:d6:33:71:cc:f3:56:45:3b:b2:
                    ad:cf:6d:a0:49:b6:ba:7b:4e:dc:19:90:21:87:ce:
                    1f:bf:e9:7c:dc:a7:58:8b:53:eb:ec:4c:5d:63:b0:
                    22:72:4c:1d:b0:1a:a0:02:ed:15:bc:d3:48:83:00:
                    82:8a:25:f8:ef:1c:bb:38:b5:f1:0c:d9:65:b0:58:
                    71:fb:24:57:13:bd:c6:80:ff:09:f2:1d:9f:8f:5a:
                    ee:5c:13:f0:80:74:fc:5c:2e:2b:96:43:1c:0d:c3:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:0C:9E:19:F4:24:B9:8A:1A:0D:B2:77:2A:6A:B9:1E:ED:C2:0A
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4a:ae:cf:5b:fd:40:3c:aa:aa:6d:e5:81:78:79:ee:c4:80:
         2c:d8:8f:a4:d6:53:a8:64:ee:2e:e2:20:b8:6f:57:e7:cf:9b:
         6b:8a:cb:4a:9e:b9:3b:e4:ec:71:99:60:94:e3:19:3f:da:1b:
         1c:c1:45:e1:d0:82:75:87:4d:6d:a9:a1:74:4d:da:c3:e3:07:
         ed:ad:d0:8f:61:1b:c0:c9:db:db:15:62:8d:90:42:94:db:f2:
         e0:d3:48:02:be:b6:92:b9:97:06:03:28:34:81:a0:d6:6d:bc:
         e2:cb:a2:de:d1:0c:26:f1:53:a4:64:33:fc:18:53:9d:43:d6:
         fd:c6:ce:70:97:d9:9a:b0:c9:7f:9e:d5:9c:1f:bd:fc:ac:4a:
         85:0d:7f:7b:da:9d:ec:2f:e5:72:01:e2:ec:c5:e8:3b:3d:28:
         b0:ef:7c:69:24:8d:8f:7f:16:5f:a2:56:71:91:0f:2b:1d:52:
         16:42:46:8e:c4:36:59:12:15:42:b9:5e:42:78:f2:27:99:62:
         e3:c4:80:28:65:06:ae:4c:7f:a0:33:78:0d:c9:03:69:60:02:
         d4:9d:1d:c2:c7:ce:48:a9:e5:a3:e9:89:f7:31:b0:3c:b5:e2:
         48:d8:0a:57:89:54:be:e0:d2:58:d9:7a:20:f7:8e:30:3e:e3:
         c0:fd:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:14:27 2026 by rpki-client