Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
File:                     RbsZfeuTYVmBFWU_lwiean9iv5o.mft (raw, json)
Hash identifier:          T58KmFJ1+/ortIm15F72lK2ku7fR/ndp1KmvfILdEDY=
Subject key identifier:   E5:13:02:B0:2A:57:90:8A:93:2C:4A:22:F0:D1:56:7C:5B:11:56:41
Authority key identifier: 45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A
Certificate issuer:       /CN=A91BD68B/serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
Certificate serial:       1CD7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
Manifest number:          1CBB
Signing time:             Fri 04 Sep 2026 16:08:44 +0000
Manifest this update:     Fri 04 Sep 2026 16:08:44 +0000
Manifest next update:     Fri 11 Sep 2026 16:08:44 +0000
Files and hashes:         1: RbsZfeuTYVmBFWU_lwiean9iv5o.crl (hash: Mo8o2L4HWKmfLRFO94hPYFPEk1g+s/EBWd55ePABxOE=)
                          2: 0CCA4B88A67511F191E1E1506911F970.roa (hash: i1CYj7mYFYaOrrPQe64Ujwrd3nJ16BaOONLJpzmNsR4=)
                          3: B5B0BE18A5FC11F1BF38A1A74011F970.roa (hash: pRYeBZZznqe50RAV4Y/0NdMsJE+iDDd9DfEi/YEGCeQ=)
                          4: 421AC870FA3C11E68E9D3C2EC4F9AE02.roa (hash: FonjxMoi6EHJ6Hd/gAEspHBdvL6K4sb2aS/QyZ23E28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7383 (0x1cd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD68B, serialNumber=45BB197DEB9361598115653F97089E6A7F62BF9A
        Validity
            Not Before: Sep  4 16:08:44 2026 GMT
            Not After : Sep 11 16:08:44 2026 GMT
        Subject: CN=6a9aed0c-f93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:d7:80:c2:6e:78:e2:00:75:f9:b1:b6:2f:
                    73:41:62:2b:d0:1a:6e:b7:e6:20:ef:82:61:be:8b:
                    cd:eb:91:22:2b:6c:a8:d3:56:d5:e9:74:19:ef:9e:
                    ce:e3:40:f0:41:39:2e:78:80:e0:04:f2:47:5f:40:
                    0d:ad:d0:1e:7a:25:24:8e:18:3d:78:79:b8:03:0f:
                    60:2b:0a:e8:f1:0c:e7:86:6d:92:25:f9:58:6f:6f:
                    9e:1c:13:b6:49:d3:e7:90:4d:a2:80:bc:07:22:dd:
                    64:49:cf:68:4c:46:f7:7b:a6:7e:59:63:9b:8e:b4:
                    ba:c5:73:6d:7d:07:09:bc:32:5a:84:ea:ee:7f:c7:
                    7a:e2:3a:3f:e1:f2:4b:ee:14:2d:53:5f:32:21:d2:
                    e2:df:a7:80:cb:e0:f3:38:07:9a:22:83:8e:86:36:
                    7f:26:4d:d3:9a:60:6f:e7:88:05:34:18:ef:4d:7d:
                    b2:54:c0:ec:98:d0:72:6a:c3:56:7a:05:58:34:9e:
                    c0:f1:20:a8:57:07:d1:3c:a5:ed:07:8a:16:66:65:
                    d9:b5:40:26:02:22:0a:e2:65:96:16:a4:fb:0b:d3:
                    ce:84:70:fd:12:39:dc:7d:21:1c:71:80:b2:4f:a9:
                    be:1c:70:81:2d:63:24:1e:46:97:49:71:b0:34:c7:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:13:02:B0:2A:57:90:8A:93:2C:4A:22:F0:D1:56:7C:5B:11:56:41
            X509v3 Authority Key Identifier:
                keyid:45:BB:19:7D:EB:93:61:59:81:15:65:3F:97:08:9E:6A:7F:62:BF:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RbsZfeuTYVmBFWU_lwiean9iv5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD68B/B0DF55ECFA3B11E6B8A6AE2DC4F9AE02/RbsZfeuTYVmBFWU_lwiean9iv5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:18:a3:79:35:6e:85:4a:29:6d:e9:fa:f9:c9:f8:94:51:
         4c:4a:e7:c4:dc:d4:9b:c1:02:5d:e1:a6:ac:89:82:88:07:6b:
         c9:5d:1a:9f:10:b5:c7:be:6c:3d:86:5d:ac:cb:1f:58:2b:99:
         9d:d6:8b:b2:8e:73:3a:30:7b:ed:f1:34:98:bd:28:65:22:67:
         1b:1c:47:a9:68:f6:fd:cd:f7:b6:d5:e6:31:da:87:f3:1a:1c:
         fe:c0:49:d9:28:97:9f:d0:87:ed:f1:43:f0:2d:bb:bb:68:13:
         4a:b1:16:c9:06:a6:e0:74:f4:19:69:d6:8b:29:96:fc:88:b1:
         9a:6d:be:fe:89:22:d2:91:79:5d:c3:ed:ef:15:e3:95:04:de:
         a3:4e:f5:91:0a:6c:19:7d:f3:61:74:23:ab:ee:10:1e:46:52:
         cc:86:db:97:60:78:12:a1:cc:a7:1d:9e:96:3e:d3:a5:7e:cc:
         90:34:7c:bd:83:c5:c0:30:46:f7:e8:db:a6:38:f3:91:45:b3:
         f0:d9:43:e4:8b:3b:5c:59:ca:61:4c:52:fe:71:0f:de:17:e5:
         c2:dd:f5:73:67:08:be:11:b7:1a:4b:5c:d7:30:f2:be:e8:f7:
         fc:78:43:42:2d:56:8d:38:55:db:c8:cc:96:47:b1:3c:31:56:
         10:f7:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:14 2026 by rpki-client