Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
File:                     b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json)
Hash identifier:          ZNXGHknuQxlo+uI3VRNKCcYfhwY8JD/Rr47LVwHy2a4=
Subject key identifier:   50:94:BF:21:17:7E:08:B5:F9:F7:D4:68:E1:3A:8D:1E:F4:B8:54:FE
Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
Certificate issuer:       /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Certificate serial:       87
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
Manifest number:          83
Signing time:             Fri 09 Oct 2026 08:26:16 +0000
Manifest this update:     Fri 09 Oct 2026 08:26:16 +0000
Manifest next update:     Fri 16 Oct 2026 08:26:16 +0000
Files and hashes:         1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: Xpuf2V3EJSvC1iqg5nj3aKZ/76tvB2Kl/ReWIiZJeZE=)
                          2: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=)
                          3: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
        Validity
            Not Before: Oct  9 08:26:16 2026 GMT
            Not After : Oct 16 08:26:16 2026 GMT
        Subject: CN=6ac8a528-57b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:3e:e5:8c:97:ae:98:09:35:fb:98:e7:a0:
                    ae:6f:14:2f:f8:93:a4:a6:85:da:b4:51:57:36:39:
                    b2:09:24:fe:07:c1:2a:96:e0:4d:62:3f:c2:c5:40:
                    59:b2:85:8e:93:80:7e:3f:37:e0:e0:61:0e:ef:bf:
                    1f:e6:31:9d:b5:7f:84:df:54:07:f9:d2:0d:9d:86:
                    8a:fe:3d:16:f7:a9:8b:e7:66:19:72:8d:83:04:08:
                    47:7f:70:b9:ab:16:8a:a7:40:cc:ab:dd:df:e7:94:
                    e9:6e:36:3e:8d:48:9c:b8:12:80:2e:f2:71:77:43:
                    65:4d:87:11:f3:b9:b8:b2:a6:64:51:5c:9d:12:02:
                    cf:84:82:74:15:3e:75:6f:f0:b2:fa:46:83:c7:59:
                    36:f8:e5:83:e9:c5:e6:76:92:b4:c7:3d:37:22:5b:
                    30:9f:12:4a:02:3c:7b:e7:c4:f0:f5:41:fd:9b:d6:
                    e7:17:d8:a3:63:76:4b:0c:5c:e5:dd:74:dc:a0:1c:
                    1a:9a:38:3a:84:ad:5c:53:b1:88:6c:f5:dd:c6:05:
                    99:66:d2:e4:91:22:dd:af:ac:02:0e:85:64:c6:b6:
                    cd:12:d0:57:a5:0e:d8:cd:3a:ca:04:06:f0:8b:e2:
                    3f:c3:72:8b:50:f8:9f:f3:82:6e:fa:2a:6a:d4:2a:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:BF:21:17:7E:08:B5:F9:F7:D4:68:E1:3A:8D:1E:F4:B8:54:FE
            X509v3 Authority Key Identifier:
                keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:3c:64:6c:26:33:5f:8c:02:c7:d3:01:5d:7b:0f:0c:76:f6:
         da:de:0a:c4:0a:03:8c:76:7e:51:84:1c:6b:f7:10:07:f6:14:
         5d:73:bd:99:c9:d0:aa:3e:6f:76:7e:30:99:e5:73:3e:e3:04:
         2d:f6:7d:a1:31:58:6e:34:ce:4d:4a:c4:77:37:92:da:63:04:
         f6:1d:80:99:df:57:d7:c7:ef:f0:35:3f:b9:ae:25:eb:a5:71:
         9c:a2:e7:4b:24:d3:cb:71:b1:25:7b:de:1f:a1:c9:8d:82:9d:
         75:46:f5:5c:0e:46:2b:b5:53:03:a8:04:74:3f:f7:68:d8:95:
         f5:9a:80:e3:a8:06:13:97:70:67:ea:f4:d5:94:95:20:81:c7:
         69:92:2b:d3:8d:0f:5c:c5:74:ed:91:a7:53:11:68:fb:1b:45:
         d7:cc:f0:9a:d4:b6:ea:70:db:51:e5:17:6d:cc:d6:06:f3:1a:
         5e:10:e4:c7:9e:bd:bb:5e:92:f3:65:64:f7:50:9c:9b:e6:5d:
         d4:76:27:ca:f1:62:09:43:29:3f:67:2c:8b:48:fe:18:f2:c2:
         a4:97:3e:dc:2a:e7:4d:d3:f8:fe:cf:06:4d:9b:f9:c6:64:db:
         7e:b8:5d:96:95:67:ee:6b:ad:7c:84:4c:3d:9c:8e:4f:9e:32:
         4f:df:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:10 2026 by rpki-client