Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
File:                     b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft (raw, json)
Hash identifier:          pd8mJix1NsnyH6GR88+E2Gl0ftT/p+1cr+jNQgU9x28=
Subject key identifier:   68:90:D1:3C:0C:73:F1:F4:51:CE:9E:B6:13:12:09:2C:DE:11:67:B9
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Certificate issuer:       /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
Manifest number:          0248
Signing time:             Wed 07 Oct 2026 02:56:35 +0000
Manifest this update:     Wed 07 Oct 2026 02:56:35 +0000
Manifest next update:     Wed 14 Oct 2026 02:56:35 +0000
Files and hashes:         1: b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl (hash: Cfv1w1wdvHWap2l4YCsMrdlK4AqJhOjb5kRyGUxAVxs=)
                          2: 273A3FAAF3FC11EFB697C52FC4F9AE02.roa (hash: U8FE/i1E0e1VdjYBpJbEe4K4AhYHyaPy2XZDjc+/jlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
        Validity
            Not Before: Oct  7 02:56:35 2026 GMT
            Not After : Oct 14 02:56:35 2026 GMT
        Subject: CN=6ac5b4e3-05ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:f9:13:f0:76:95:f0:c4:13:1f:0a:94:8b:
                    5c:56:35:d0:04:df:ef:81:e4:7d:39:8b:cc:92:1b:
                    7b:e0:e2:06:ec:15:43:38:c3:f9:fc:f1:8e:27:50:
                    25:fa:b6:cc:07:a2:2e:4f:07:41:d9:b9:ad:4f:52:
                    14:2d:31:d6:4c:76:80:91:65:50:8a:67:07:7f:0f:
                    ca:ea:56:7b:50:0d:cd:00:72:92:b4:85:3b:43:52:
                    8b:83:5f:39:66:7e:91:17:a4:4a:38:40:42:0e:b7:
                    9a:e1:3c:fc:66:27:df:7a:6b:02:f5:a8:86:41:58:
                    4b:f0:f0:a9:98:8b:71:9c:75:2f:eb:2d:e0:37:7c:
                    cd:39:68:d6:cc:99:b7:e9:6f:12:f1:b1:3c:8f:6e:
                    91:e5:ee:16:7d:58:58:5a:d3:5a:d7:05:9e:53:e2:
                    18:c5:ac:56:f2:ab:7f:73:a2:dd:2e:18:5b:20:4b:
                    ac:82:ef:b8:0a:4e:4d:74:14:f2:ad:8b:ba:a4:8c:
                    83:dc:7d:79:1f:18:75:55:00:33:c6:02:00:97:41:
                    f1:b0:39:50:c5:16:64:e2:14:08:cb:73:4e:41:3a:
                    94:7f:2c:16:d3:2f:17:59:27:22:6a:85:eb:e1:c9:
                    60:99:ed:8a:05:a8:1f:70:f2:de:7a:d9:ca:3d:bd:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:D1:3C:0C:73:F1:F4:51:CE:9E:B6:13:12:09:2C:DE:11:67:B9
            X509v3 Authority Key Identifier:
                keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f7:af:6f:08:41:f0:27:83:d9:0c:4e:1c:2d:bf:cd:86:25:
         95:91:52:86:92:7e:83:84:98:e5:48:82:86:3f:3e:bc:93:a3:
         58:c3:ce:f1:78:57:57:1c:e1:2b:73:c1:be:06:bf:5e:f0:a3:
         52:f2:e3:28:ef:0b:94:f6:07:2a:6d:0f:f0:f9:ba:57:fd:bb:
         53:f8:de:b1:1a:09:87:01:31:49:af:ff:c6:7a:71:f5:c1:c8:
         26:ec:47:ff:b9:41:20:87:4a:3f:d8:5c:a8:f2:91:03:22:e5:
         67:21:a1:16:3c:b2:29:c0:68:74:3c:e1:48:82:9e:cd:f4:e2:
         31:8d:c7:33:b7:8d:54:b4:50:63:6b:ee:f5:26:33:ba:d8:70:
         6c:eb:7e:c6:97:0c:50:5c:1d:81:2f:97:52:13:9b:e5:8c:8a:
         be:7f:73:4b:8c:d3:26:ba:a7:ab:51:09:6f:7d:94:57:05:c1:
         dd:39:1d:4b:29:04:a7:bc:18:2b:b6:dc:05:1a:41:4e:9a:64:
         b4:34:4d:db:df:5c:00:17:db:72:58:99:b2:19:e5:12:b3:4b:
         12:21:da:ba:1e:94:24:0d:ae:bd:26:23:11:ba:01:06:a3:f3:
         82:3a:d2:29:90:89:fd:26:3d:fc:5d:33:3f:7d:1a:ef:c4:a2:
         83:41:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:33:07 2026 by rpki-client