Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
File:                     bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json)
Hash identifier:          M1GjZPZ3ZFXQcwhy6pgViLxaY7MXjFzrAvztNqPAsoA=
Subject key identifier:   98:50:58:DC:95:CB:0F:50:EB:F8:F4:9C:58:57:A0:48:A1:A1:F6:66
Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02
Certificate issuer:       /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
Certificate serial:       04B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
Manifest number:          0476
Signing time:             Mon 31 Aug 2026 00:22:23 +0000
Manifest this update:     Mon 31 Aug 2026 00:22:22 +0000
Manifest next update:     Mon 07 Sep 2026 00:22:22 +0000
Files and hashes:         1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: zxDEJZJGvntnwJob6/XMJYEKh3ahR8Cm7dBbWGm6GnM=)
                          2: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: tBey+DH64+Kn32UVWimcmMh2WoGFqT18gD06i2GEZsU=)
                          3: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: r+lrx7WpAI1BilPAcnEksEUaCu2KnCEQLhymAPB2i1s=)
                          4: AD17704445F611EE97DF317CC4F9AE02.roa (hash: /vhmP+Y6Yb84j9vhzg0Zbk6HCi7aZS+Km8vmqSzsrmM=)
                          5: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: dPxIUNEqYuFtJskM6HAN9FGSFnQOEAtn06dnZBLnvG8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl
                          rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 00:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002
        Validity
            Not Before: Aug 31 00:22:22 2026 GMT
            Not After : Sep  7 00:22:22 2026 GMT
        Subject: CN=6a94c93e-c464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:ab:e8:26:09:b8:ca:5d:bf:8b:1e:dd:d6:
                    c3:3b:11:48:64:d3:a9:95:ab:f8:a5:43:a3:07:e3:
                    d9:c6:7f:b4:1f:1a:21:49:98:d1:67:26:99:b5:ec:
                    9f:bf:28:b2:87:5c:ea:a0:7b:a0:43:e7:fd:63:b0:
                    8e:bf:fd:c3:e6:47:28:25:1a:64:e2:02:ff:78:94:
                    74:1c:5c:f6:cf:2d:08:63:23:70:9e:21:83:45:18:
                    9d:5d:32:15:aa:05:d9:27:13:47:ad:b1:53:d9:62:
                    cf:29:e0:02:c9:ee:6f:c9:8c:85:93:5f:ca:d8:f1:
                    a9:91:88:3d:70:37:2d:70:02:bc:26:cf:8e:a7:d6:
                    3e:b6:0d:74:9e:08:25:87:ca:f1:e4:f8:6a:c0:69:
                    00:f1:f1:8f:f5:91:4b:9e:99:19:24:26:03:5e:c6:
                    11:5c:58:c0:10:ac:93:f8:d4:4d:16:17:10:62:15:
                    e9:6b:e5:d5:cb:ae:b0:f5:89:d8:57:13:5b:9d:8a:
                    51:62:15:dc:32:f7:56:04:f3:5b:7e:38:25:d4:35:
                    23:28:3b:59:c9:0f:21:38:b9:b1:2b:db:2f:9d:44:
                    89:3c:7f:0f:18:db:db:a9:dd:00:4e:c4:7f:e7:19:
                    5d:70:21:fc:10:46:cf:e2:02:e9:e7:09:e6:0c:cf:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:50:58:DC:95:CB:0F:50:EB:F8:F4:9C:58:57:A0:48:A1:A1:F6:66
            X509v3 Authority Key Identifier:
                keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:30:e2:ae:87:99:d2:70:41:dc:0c:4d:8a:65:39:0d:9b:e4:
         c7:1f:7f:b2:c0:bb:51:08:80:0f:58:a6:dc:52:55:9e:0b:fe:
         cc:bc:b7:3a:02:23:88:45:7c:a2:00:cf:65:a0:41:75:ec:a8:
         5a:ab:31:b7:b3:a4:59:63:52:db:f9:58:4c:82:7e:fb:8d:61:
         f8:c9:21:fb:2e:b5:bd:92:e0:8f:56:ce:13:d4:26:f3:bc:55:
         75:4d:73:96:75:a9:e0:e0:46:b3:fa:41:47:a7:c7:86:af:43:
         ce:2e:e6:0f:91:51:08:9b:16:05:d3:3f:55:9b:87:84:a1:6f:
         a6:37:6c:9d:cd:6a:e9:c3:b8:85:ca:a0:76:70:ed:1d:ea:c4:
         f4:41:d3:1a:75:cf:b0:43:3a:d4:59:f1:01:1c:58:d1:c7:4a:
         d7:ae:64:50:df:b9:12:7c:2c:9a:03:5b:f2:eb:34:3d:13:61:
         ed:d0:ad:bb:bf:8c:11:dd:f1:00:91:68:5b:82:6c:2f:ff:a2:
         7c:d3:56:95:0d:8c:f0:1b:aa:4e:89:25:7d:bb:1a:bc:1e:a6:
         ba:3e:ff:f3:17:e4:06:29:19:0e:b0:f3:02:c1:15:6a:32:f1:
         f9:47:dc:49:a7:a3:26:1f:4d:2b:25:3d:5a:a3:49:dd:44:0c:
         7a:2b:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 13:22:09 2026 by rpki-client