Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
File:                     BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json)
Hash identifier:          H0kSLXhuQIBHxAgf00tZQZiTIf4RRpNx5fjPrnd9k5Q=
Subject key identifier:   D9:E8:F6:B5:ED:96:81:5A:EA:C2:3A:90:7E:01:19:FD:33:C4:09:6E
Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60
Certificate issuer:       /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
Certificate serial:       0E40
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
Manifest number:          0E12
Signing time:             Sun 02 Aug 2026 17:55:12 +0000
Manifest this update:     Sun 02 Aug 2026 17:55:11 +0000
Manifest next update:     Sun 09 Aug 2026 17:55:11 +0000
Files and hashes:         1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: t2anP3o/j9D+R9BrcokHIH8aZ/MWD1SiUODFZ8+YwR0=)
                          2: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M=)
                          3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: D9klEFQG/k6Phw9Yt86DVaS1LFIWfa7yVLK9O+stCIY=)
                          4: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: ky9Ng4i7BRaoHnDxU2AZbymyosvFrsEsC/8UhobSRso=)
                          5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: USUvjmydXjtMJPzPbFEwUqIP+Ih5VSwPB5Ykt4WO3Ws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 17:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3648 (0xe40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60
        Validity
            Not Before: Aug  2 17:55:11 2026 GMT
            Not After : Aug  9 17:55:11 2026 GMT
        Subject: CN=6a6f8480-3ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:5e:c4:ad:aa:24:8c:fe:6d:cc:73:43:59:
                    85:63:01:27:5e:37:e9:5a:e4:25:2b:65:44:6e:6d:
                    e1:94:97:ae:63:17:c5:47:89:de:f3:66:0f:64:b7:
                    87:ec:70:a4:53:21:85:ef:31:06:83:a1:ae:ca:b3:
                    77:2d:94:13:bd:17:7b:4b:e5:58:6e:fd:dd:fb:d0:
                    33:b2:a3:ab:41:0e:22:6c:38:12:68:91:2d:52:25:
                    b5:df:78:94:71:ae:ac:47:d9:2f:46:07:f7:7f:05:
                    4f:f6:92:ae:df:ef:32:d2:3a:46:10:65:ec:56:1d:
                    6a:2e:6e:e2:fa:50:a5:f5:1a:10:34:f4:4f:bc:d9:
                    ba:b8:73:80:ba:3e:bf:2a:43:7a:8e:55:79:f7:8c:
                    cd:69:93:8b:4a:91:66:53:fd:db:fe:54:ba:eb:35:
                    41:24:5f:80:f7:42:cf:37:a8:98:af:cf:6f:59:88:
                    47:ee:44:2e:a3:78:af:7b:1c:d5:46:ab:c3:39:2a:
                    62:31:96:49:03:db:5b:c8:9e:ef:1a:6b:4f:b6:b8:
                    21:10:7e:60:63:c4:09:be:bd:9d:aa:8b:80:46:ae:
                    20:b2:ca:23:05:58:0a:13:0c:1d:8f:44:e6:3f:cb:
                    a7:3c:3a:d5:1d:48:7c:25:d8:2e:31:66:89:d2:4d:
                    61:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:F6:B5:ED:96:81:5A:EA:C2:3A:90:7E:01:19:FD:33:C4:09:6E
            X509v3 Authority Key Identifier:
                keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:34:6f:aa:88:e5:39:3a:2a:ec:d1:21:37:e6:22:63:b9:de:
         a5:67:30:3f:1f:fd:f7:c0:4b:53:c8:b0:55:fc:6e:09:6e:0a:
         21:7f:0c:ca:31:2e:b3:1b:8b:f9:f9:f9:3a:94:39:57:1e:7f:
         0c:4b:e4:b9:5f:59:66:fc:c1:1c:09:d6:79:23:bf:fa:8a:be:
         8b:13:01:08:37:67:33:74:e2:1d:ae:0d:63:8a:6f:f2:b7:6e:
         44:aa:8d:fc:0d:8e:52:db:54:82:c1:d6:36:fd:6a:03:19:a7:
         f7:48:83:a4:7b:aa:7e:f7:b3:2f:21:ed:08:ec:89:61:05:bb:
         7a:de:33:90:b6:14:49:71:39:18:75:96:ec:b3:87:9f:af:98:
         80:f5:b4:e9:47:0d:9f:6b:95:fb:ec:aa:7c:6e:32:13:0f:90:
         6b:59:23:c0:16:8c:bf:24:11:e6:ac:1f:3f:e3:8c:ad:c7:50:
         58:0b:7e:ce:99:81:b0:38:04:a4:45:97:bb:3c:8b:e9:f8:2a:
         a7:c0:e6:82:11:fa:20:31:24:ae:eb:ed:af:d8:d7:9b:fc:9c:
         de:55:3f:92:99:b6:68:c0:70:b5:e3:53:6a:c5:2f:91:ff:e2:
         2c:f9:64:cf:9c:c4:d9:83:c9:aa:0c:cc:8b:1d:3d:4c:39:2c:
         3a:73:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:24:57 2026 by rpki-client