Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
File:                     bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft (raw, json)
Hash identifier:          CcbKiYVm2Qqjv71ns0alpYYioIdFc3B7uD6BcApH6Sc=
Subject key identifier:   38:31:E9:FE:C8:8C:59:14:1C:7A:8A:61:2B:03:31:D0:64:BB:7A:68
Authority key identifier: 6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
Certificate issuer:       /CN=A91D4FA2/serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
Manifest number:          59
Signing time:             Mon 05 Oct 2026 08:37:13 +0000
Manifest this update:     Mon 05 Oct 2026 08:37:13 +0000
Manifest next update:     Mon 12 Oct 2026 08:37:13 +0000
Files and hashes:         1: bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl (hash: IlYDPkUsijZXOWMgWikJOzrD7Rm/WtWZu1k42BS9Q2g=)
                          2: 747DC16E3EF211F19456D02EC1833773.roa (hash: DzgxAcs3xQLb7+MwxDBKIN04csW3+rM4yVXnENoQ1uk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl
                          rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 08:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4FA2, serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
        Validity
            Not Before: Oct  5 08:37:13 2026 GMT
            Not After : Oct 12 08:37:13 2026 GMT
        Subject: CN=6ac361b9-1af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:94:8c:f5:72:3e:38:c1:aa:a1:a9:a5:2b:c0:
                    fd:eb:8f:ea:fe:7d:d8:89:b1:fb:58:4e:07:17:fe:
                    72:3b:9c:70:65:28:bb:d4:c7:ba:41:84:e9:02:26:
                    9f:1c:e9:e1:de:78:2e:ad:bb:66:4c:40:60:f1:e3:
                    b6:0d:da:f3:5d:ba:b3:6b:b5:77:cd:f3:bd:ce:d7:
                    d8:4f:74:d1:90:9b:29:99:11:12:82:46:cd:29:dd:
                    b5:74:8c:30:64:b5:11:83:cf:92:5b:a6:f4:ec:e8:
                    a1:e8:b3:5e:67:1e:f7:46:a4:5a:f8:9a:29:10:6e:
                    b0:10:69:e1:30:c4:41:c3:39:82:17:96:cb:f3:fe:
                    39:92:9e:21:2b:73:dc:ab:22:4e:cb:38:15:f5:e3:
                    00:0d:e2:6c:32:5b:67:c1:f2:ff:f0:9c:2f:b0:44:
                    be:32:88:ae:b8:33:b8:1b:ba:1f:69:96:a5:41:9a:
                    4c:42:61:92:5a:92:be:62:c7:24:f8:3c:34:38:f7:
                    52:a6:20:f1:36:fc:6e:b8:63:eb:ab:df:48:14:dc:
                    b7:a3:d0:12:03:99:d0:49:67:6b:22:33:cf:cc:fb:
                    e9:4f:52:80:10:90:7c:54:ad:d1:7f:c7:e4:f0:b1:
                    a1:a7:0c:23:1f:a3:46:23:f7:78:ea:c6:4d:2f:49:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:E9:FE:C8:8C:59:14:1C:7A:8A:61:2B:03:31:D0:64:BB:7A:68
            X509v3 Authority Key Identifier:
                keyid:6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:51:2e:0b:d3:86:a3:84:20:2b:33:44:d5:68:bb:68:4f:8f:
         84:fe:05:4a:03:60:7f:bb:db:af:ec:81:bb:20:9c:f3:e0:9e:
         02:56:f0:e1:ed:85:5f:13:ca:98:97:c9:1d:37:8b:87:61:cb:
         fd:24:6e:b7:06:a6:ed:e8:50:98:e7:8d:5b:6d:73:fd:e5:a8:
         b9:5d:d1:d4:7e:c7:ce:99:96:97:bb:3a:46:22:78:89:20:5a:
         e7:f2:44:84:b0:00:64:14:6f:d3:ee:69:17:cf:25:d6:68:4e:
         da:02:f4:ce:cc:37:34:d9:ec:c0:9d:d0:7c:00:4a:fb:03:f9:
         55:22:b5:96:2b:1b:a1:e4:b0:8a:c5:80:01:df:99:a0:89:76:
         41:8c:57:8f:be:c7:ed:1a:31:64:5e:dc:75:58:aa:f9:cd:5c:
         b5:c0:b6:6b:d8:b6:04:7e:04:07:f5:e2:b1:f7:d0:7a:0e:5e:
         3a:e5:a3:2e:1e:64:7c:d7:50:14:ce:58:67:fe:9b:ba:f1:ee:
         08:62:b5:07:b8:18:ab:ef:d2:75:2f:4a:22:fc:1c:8b:22:09:
         a1:75:59:65:88:d8:d3:99:dc:62:50:01:64:b5:5c:9d:2b:72:
         8d:72:5a:c1:ae:a4:5d:55:c4:e4:57:56:3d:c1:41:d4:53:ab:
         eb:90:02:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:58:03 2026 by rpki-client