Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
File:                     bxP1UQCfJIptmHQ2AE6FeVFWkns.mft (raw, json)
Hash identifier:          O14Iyp4hSAmeGDlr9bkVSxJwNzhXjiSWr1OZMedFSYs=
Subject key identifier:   5B:4E:61:7D:06:F9:17:3F:D3:C4:D3:C9:02:9A:EE:56:79:D5:92:D8
Authority key identifier: 6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B
Certificate issuer:       /CN=A91CAFC4/serialNumber=6F13F551009F248A6D987436004E85795156927B
Certificate serial:       09EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
Manifest number:          09D9
Signing time:             Wed 26 Aug 2026 19:49:13 +0000
Manifest this update:     Wed 26 Aug 2026 19:49:12 +0000
Manifest next update:     Wed 02 Sep 2026 19:49:12 +0000
Files and hashes:         1: bxP1UQCfJIptmHQ2AE6FeVFWkns.crl (hash: 7ECZ8gFgLimovCYvViJGZOmqL099W6vN7GAqB5C435o=)
                          2: D2039A56AABC11EEA0370F2CC4F9AE02.roa (hash: ynhPE5wAgaVqH7nCW5tR8ne/clm5wNEfqCy2a6X1yEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl
                          rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543 (0x9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CAFC4, serialNumber=6F13F551009F248A6D987436004E85795156927B
        Validity
            Not Before: Aug 26 19:49:12 2026 GMT
            Not After : Sep  2 19:49:12 2026 GMT
        Subject: CN=6a8f4339-c522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:53:65:80:3d:a6:3f:dc:8f:f5:5e:c9:9f:
                    5f:12:c0:e2:23:b4:9b:d6:62:50:26:b7:6f:b8:a3:
                    27:98:38:a0:cb:91:b7:04:f1:e7:17:09:70:1b:3f:
                    71:df:d8:08:40:ec:79:8d:ce:db:87:09:cf:d5:a2:
                    cd:82:90:44:45:ab:7a:eb:d9:29:06:26:3a:cd:19:
                    9b:13:c7:fb:61:48:39:0e:a9:3b:9d:91:f2:89:17:
                    a1:ad:ae:7d:63:72:1a:37:9a:da:e5:31:96:d2:03:
                    87:2f:96:eb:cb:86:9e:8a:a0:42:cb:e5:25:7f:6b:
                    05:42:6a:47:e2:3c:59:9f:32:98:e7:6b:f2:fc:ae:
                    a7:9d:5a:ff:c8:d5:77:b3:06:7d:95:f7:e8:2f:e7:
                    b1:21:1b:2e:7a:75:f8:41:09:8c:b5:df:47:33:66:
                    3b:03:fb:56:d9:ee:ba:1c:94:66:3b:2a:4f:26:2c:
                    59:3c:18:a1:dd:3f:24:47:8d:7b:2b:68:dd:4a:1c:
                    d6:3a:cc:e4:e3:1e:c5:17:98:4a:4d:36:f4:37:f3:
                    b3:56:0e:89:56:75:09:a5:5b:cd:be:44:ab:5d:d7:
                    c4:49:8e:c6:09:c9:43:e0:bf:7b:7e:a8:84:93:80:
                    b4:f9:fd:d2:b2:14:56:66:62:52:e5:a6:25:37:14:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4E:61:7D:06:F9:17:3F:D3:C4:D3:C9:02:9A:EE:56:79:D5:92:D8
            X509v3 Authority Key Identifier:
                keyid:6F:13:F5:51:00:9F:24:8A:6D:98:74:36:00:4E:85:79:51:56:92:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bxP1UQCfJIptmHQ2AE6FeVFWkns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAFC4/BC6062DCAF8A11EA8542D85FC4F9AE02/bxP1UQCfJIptmHQ2AE6FeVFWkns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:6a:3f:ec:ee:e4:87:e2:89:bd:38:a2:3f:2f:08:3b:c6:
         f4:c8:b1:d1:3f:87:a9:83:13:9d:55:97:f1:f5:47:7c:31:fe:
         95:f9:20:c3:26:1d:a2:ac:4c:c9:53:35:3f:47:5f:b1:ab:18:
         9d:92:d9:f1:07:70:a4:87:c1:e0:76:2d:02:af:c3:29:8f:e5:
         e0:11:e5:d0:15:ea:52:eb:a7:0a:ea:1e:46:5b:aa:20:02:d0:
         59:d3:2c:a6:86:9e:5d:70:18:c9:a6:bf:05:29:17:c2:9e:d1:
         eb:4b:0c:40:36:f0:4e:b5:bf:99:8b:2b:29:dd:f6:e3:3b:62:
         cf:dc:fd:b0:36:ba:1d:b4:5d:e2:9e:55:57:1b:87:0d:01:a4:
         08:6e:7c:0e:3d:f4:34:99:d9:41:72:3e:87:20:94:2b:b1:62:
         33:15:ce:9f:3d:10:8b:71:15:6a:dc:a7:1a:94:f0:c4:6f:d1:
         8e:c9:88:83:cf:87:17:3f:a4:99:f8:f4:01:46:20:aa:1b:f1:
         d2:40:ea:88:99:2f:43:8e:32:db:04:8c:fd:3c:6a:06:34:e4:
         d2:8c:a4:4c:36:b7:41:4d:2c:d3:0a:a1:af:3c:17:a3:56:0b:
         e2:2c:3d:29:d0:d8:82:70:f5:84:98:97:64:5d:e3:63:b3:b0:
         9f:a6:43:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:01 2026 by rpki-client