Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File:                     PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier:          jz/qlrwVU9lHandIfXPLaeK+JA+ZDM/2GcEG/8+89Ec=
Subject key identifier:   7E:A5:D7:AC:EF:52:AD:E2:24:71:83:4E:69:65:BD:E5:50:EE:0C:66
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       094E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number:          08A7
Signing time:             Tue 06 Oct 2026 21:20:57 +0000
Manifest this update:     Tue 06 Oct 2026 21:20:56 +0000
Manifest next update:     Tue 13 Oct 2026 21:20:56 +0000
Files and hashes:         1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: b4pPqc7tKNZFhUBOahiar6K0q+k1w+dD9sDfT/0e5vE=)
                          2: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=)
                          3: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=)
                          4: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=)
                          5: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
                          rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382 (0x94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: Oct  6 21:20:56 2026 GMT
            Not After : Oct 13 21:20:56 2026 GMT
        Subject: CN=6ac56639-e331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:e1:1c:46:fc:2a:75:97:f8:0a:1b:d6:d3:
                    a2:c3:89:32:f8:b3:a5:4c:30:9d:8c:e8:df:d5:06:
                    7a:26:3c:94:5d:2b:74:75:47:bb:61:fa:19:b5:05:
                    58:92:8c:14:b5:00:c2:50:30:13:21:d1:1f:f6:4f:
                    ad:04:cc:2d:69:8e:54:56:f9:5d:56:4b:02:e8:77:
                    10:81:35:01:f0:a8:86:fa:c5:f4:2b:1e:b3:6f:f2:
                    28:99:95:cb:00:23:e3:ff:67:0f:9e:f4:85:ba:cb:
                    16:46:a1:e5:7c:84:ba:1d:5e:fa:8f:d1:23:61:6a:
                    0d:c0:d1:bf:23:75:d3:e3:cc:61:43:00:f8:fd:55:
                    0c:1c:9c:2b:18:18:b2:25:86:bb:02:5a:cb:72:b5:
                    72:e7:5a:9c:d9:bc:d0:51:f2:14:5f:37:7f:9a:8d:
                    58:7d:9e:56:0d:da:2d:4f:25:48:56:d3:19:c7:93:
                    77:50:06:c8:a2:e6:54:f3:ad:10:b5:11:f7:aa:42:
                    4d:8a:fd:15:4f:00:8d:51:39:4d:af:d8:29:34:75:
                    34:a6:71:62:e1:6e:68:ba:39:fc:d3:02:ac:9b:62:
                    91:2c:71:75:36:e5:1e:f8:96:b1:20:31:99:ce:4a:
                    ec:fa:69:f0:e5:2d:cb:8e:3e:45:42:c5:04:f1:b3:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:D7:AC:EF:52:AD:E2:24:71:83:4E:69:65:BD:E5:50:EE:0C:66
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:de:30:c3:a8:5b:06:cc:17:49:93:d9:0b:33:81:91:5e:23:
         dc:83:a8:ec:d2:ce:b5:72:e2:9f:fd:8f:cd:8a:11:02:a7:22:
         ef:c6:92:b3:b0:1c:82:7b:da:3e:eb:4e:26:a4:ae:1e:13:ca:
         7f:0b:9f:54:58:42:39:8a:08:87:37:c8:ea:97:0d:0e:dd:db:
         1f:00:3f:55:70:71:90:43:f7:42:b7:6a:29:82:87:96:36:9c:
         47:62:20:2c:8d:e6:dd:ec:02:9f:eb:d1:d2:ea:9a:b2:f8:c0:
         9f:d4:40:a0:96:41:c0:5d:f8:10:92:37:8d:4e:5a:16:56:a3:
         71:f3:6e:cf:5b:64:04:f9:95:d9:56:cb:6f:c9:d3:a1:e6:4c:
         c1:9f:aa:12:39:30:b8:3b:34:f5:2c:60:3b:ba:c5:fe:e1:de:
         94:39:17:9f:36:1e:16:76:aa:52:67:5b:cb:bd:f7:c0:40:3e:
         c4:0f:46:d0:b8:a7:98:25:d7:32:07:1e:3f:8f:97:ab:07:d0:
         db:d0:20:4b:25:e1:b1:2e:b6:90:e6:14:8f:d6:18:d8:14:41:
         bf:66:cf:71:d0:50:5e:ad:fd:c9:d1:d5:3a:19:07:f8:00:8b:
         0d:7b:bb:83:be:b9:d9:f3:8a:e4:15:f7:47:a1:98:b4:cc:36:
         17:f4:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:24:46 2026 by rpki-client