Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          gW8fYWLcSIGvSVy5MHaCnLxGCGSpEVa+xo29xVzmuus=
Subject key identifier:   A7:9F:88:22:1A:69:DF:6B:B6:46:F6:9E:A4:33:6A:28:3C:A2:DD:69
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       067D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          0617
Signing time:             Tue 20 Oct 2026 16:18:08 +0000
Manifest this update:     Tue 20 Oct 2026 16:18:08 +0000
Manifest next update:     Tue 27 Oct 2026 16:18:08 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: jdutfExKbGK7SxhtMdngXjQK6K5rIwAQak91Q00kEC8=)
                          2: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: dd7meKv/ADGBb06PlyVAgXVbEhoDrwm3znm6AoIx0pY=)
                          3: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: oBgfP54aD9HhUPqc1HdORpbeKAMDVILuaJ39uAIvlZw=)
                          4: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: HsA7eSSW9DT4zOZgVVFq1jZy/9DDlS2+yIx7W2vAw1U=)
                          5: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: +cyf1mDAGTd2aVKxKqf7EL/GchLjgK78hZeJAK5X08U=)
                          6: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: SBniOwJpF70Ix0jWbrEbwm9I4bdyxhYIEqPTOAue5Cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 16:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Oct 20 16:18:08 2026 GMT
            Not After : Oct 27 16:18:08 2026 GMT
        Subject: CN=6ad79440-50e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:e9:13:e5:68:24:66:c8:7c:35:db:e5:91:
                    b7:43:8b:a9:e4:56:d7:5b:5c:9e:29:67:68:9e:85:
                    19:fb:9d:c8:28:96:0c:d1:af:7c:53:e3:43:cc:56:
                    ba:03:90:ad:ce:4d:fa:87:38:7d:cf:90:59:73:b6:
                    e6:1d:e2:da:8f:b9:ea:d5:ba:a0:f3:cc:78:0f:9e:
                    54:57:c7:b6:40:c9:fc:0f:0d:8c:3a:52:55:e2:95:
                    b1:c6:da:3b:85:4d:d0:fc:a5:71:c2:1e:27:80:6b:
                    47:37:67:2b:7f:f7:95:01:c4:e3:b6:f8:e8:7a:51:
                    d2:f0:39:ad:f3:6e:80:18:50:f7:08:a8:9f:a9:05:
                    44:7c:e7:7c:66:a4:53:43:12:49:79:83:69:69:83:
                    26:e2:0e:52:40:90:35:0a:ee:c3:80:3c:18:00:2b:
                    c9:d9:93:a2:aa:12:97:84:3c:c9:d9:50:af:31:11:
                    9b:de:41:20:af:64:eb:5b:38:5d:e9:d1:44:0e:14:
                    02:4e:8a:37:5b:0e:b8:19:7a:70:56:2c:62:92:13:
                    76:76:69:a9:96:c8:ec:c2:5f:c7:96:29:c6:b3:5d:
                    c5:ce:23:3b:d7:03:aa:42:db:72:89:a2:4c:db:68:
                    c9:c9:7d:bf:c9:fa:47:0f:9f:c0:10:80:02:8b:52:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9F:88:22:1A:69:DF:6B:B6:46:F6:9E:A4:33:6A:28:3C:A2:DD:69
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:3e:71:a4:5e:3b:63:c6:d0:f5:22:28:79:48:83:3d:fc:
         31:ed:65:8c:b1:2f:51:f0:90:ad:7b:c6:44:19:33:fd:0c:54:
         ae:41:83:41:e7:65:e2:da:d1:b6:03:93:7d:a8:e1:32:2c:30:
         f6:02:c8:2a:ce:a9:5e:69:d4:9b:78:2e:29:b6:71:58:b4:51:
         ef:73:55:e5:7f:98:bf:d1:cd:06:be:56:fb:97:f8:07:99:76:
         0d:fb:55:68:6a:ec:87:ec:a2:9f:c6:1d:68:05:97:26:e0:d0:
         ec:23:72:23:65:2c:76:4d:ec:74:5a:f1:41:ba:3b:4c:a2:a2:
         0d:19:63:2d:f5:6a:6f:70:ee:76:69:6e:19:53:b0:77:69:c2:
         0b:8f:a9:01:97:91:1c:2b:74:96:07:75:b5:30:77:1e:60:e1:
         4d:80:9a:9a:7f:a0:ff:55:04:c5:ad:79:01:10:89:51:34:b5:
         2b:79:98:c1:86:6e:41:7e:bb:9e:b4:5c:de:78:ab:d6:c7:92:
         cc:46:03:3a:48:1f:f2:78:4e:1d:3d:bd:ec:58:c3:36:ab:31:
         46:a1:32:e5:cd:5e:dc:7f:91:4b:0e:7c:6c:19:1a:1b:2b:75:
         b9:c0:c4:94:8d:49:af:1b:cf:d6:01:b3:08:a9:6b:1e:86:a8:
         33:ae:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 05:53:14 2026 by rpki-client