Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File:                     bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier:          csuMhaDOumHIAQinIZ8B314hBxql/GTk8N778EeDK3w=
Subject key identifier:   4A:CC:9C:08:0A:50:E8:30:B2:61:35:79:AD:4E:E7:6B:2C:D5:25:32
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3874
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number:          36AD
Signing time:             Tue 04 Aug 2026 14:18:00 +0000
Manifest this update:     Tue 04 Aug 2026 14:17:59 +0000
Manifest next update:     Tue 11 Aug 2026 14:17:59 +0000
Files and hashes:         1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: sFvfHMrsUNPghiMOwgpcZEsdn+7NNTmP5XFvbCR6Pac=)
                          2: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: 7WD0rxusumdkjqFR1GtAWnLENPD7bOV8YBlX7yMSo9c=)
                          3: BFB4B7B2EB5C11F0BDF448C8486F56BC.roa (hash: wG7b3Z0ho6SrOGKFgzP2mEwfhihA1VC5C8sAnk6BBjc=)
                          4: 89A73D46772311EBB972032EC4F9AE02.roa (hash: JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=)
                          5: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: yaorPh4VrqY9sKXfI0fuCpzkwD4NZvNSICyagXnbW3A=)
                          6: 181D46FCEE5611F0B0ABEB00546F56BC.roa (hash: mBp7rOQoogZqxxYLbCFoaus93SPSHgQg66CBxO3Z1Y4=)
                          7: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: 0iD1tqR2QJ8fz19EynrYV9CYES81mpV0yTPTczOdyPA=)
                          8: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: GcEl4TsoGi5NS6wuxb81i9vhnARHI3pK0QqdYDeI0Xo=)
                          9: 05BF31A412A111F19F0D7733B3EE528E.roa (hash: u0mR0BBsnvEnoYj/eS9qEAD0dwrm+KdGfWI0LcJUSMo=)
                          10: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: iFuOgI2hNJnbpJ1dk6CCrwS9Ybm5+7KFbmRcIgyHcAU=)
                          11: 88978730772311EBB972032EC4F9AE02.roa (hash: 9TVjQ38xCwazY1bMPEtKgrRo9kVFlqkK6Noa8Q400lE=)
                          12: 2HN2DqzzZQ8qfz_0CQYQHp7fzH8.asa (hash: 6dUdbNQB8ye7nA3A0bmLn3/knMmdudFU+gX78ZN6c+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14452 (0x3874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Aug  4 14:17:59 2026 GMT
            Not After : Aug 11 14:17:59 2026 GMT
        Subject: CN=6a71f498-4890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6a:66:ac:66:d3:e5:2b:a3:58:74:62:44:15:
                    e2:11:01:10:e7:9a:53:e8:d9:ad:e3:de:0e:8b:d3:
                    d6:1d:c6:13:a9:c7:42:46:5f:64:25:6e:57:22:89:
                    3d:25:8e:57:04:18:61:e8:0d:40:76:ee:c4:a5:e8:
                    e8:6c:db:06:ee:60:2c:2e:6e:9a:ab:b1:03:0c:01:
                    43:82:71:fb:b6:ce:2e:e3:a5:a2:73:f4:96:cb:20:
                    3b:52:7e:83:d0:ce:f4:aa:e3:77:b9:f1:86:ae:c0:
                    92:5f:86:53:b6:71:33:37:c5:75:aa:67:65:b3:6b:
                    a9:66:59:d6:05:dd:85:b9:30:a5:08:36:1d:23:3f:
                    8a:36:cc:0b:f1:5e:9e:c2:97:43:e5:61:71:9b:12:
                    a3:d9:63:35:87:2f:d3:76:e0:93:bb:3a:c7:35:18:
                    5f:27:e7:13:aa:b7:eb:23:2e:cc:e6:7b:d7:01:42:
                    43:67:f4:c7:e8:42:38:e2:b6:f6:4a:8c:24:ec:75:
                    8f:af:a7:ba:29:4f:44:3a:52:6f:ef:5e:63:b7:eb:
                    70:49:04:72:12:60:6b:e9:3d:0d:ba:b0:20:e2:83:
                    32:57:aa:e6:dc:48:72:4c:2a:e6:86:7a:13:e4:c0:
                    38:65:b4:98:08:9c:47:aa:c0:fa:e6:ab:8f:6e:96:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:9C:08:0A:50:E8:30:B2:61:35:79:AD:4E:E7:6B:2C:D5:25:32
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7d:e0:43:15:48:ee:79:74:ea:55:93:40:80:1f:ff:5d:fb:
         0c:12:2a:96:b6:0d:cc:2a:03:7a:36:59:c2:02:a9:d6:22:7b:
         d4:98:20:8a:51:38:ff:b2:4b:bd:2a:71:7c:17:63:89:c1:47:
         ff:27:a3:66:a1:b6:37:52:33:8d:c5:0b:90:67:15:7a:60:f2:
         6e:3d:fe:0b:41:0b:3c:60:f4:20:56:a9:c4:aa:cf:e9:f8:cb:
         a3:8b:02:1d:65:a5:11:0e:d4:8a:ed:38:c6:16:b1:9c:ed:c0:
         2a:8c:89:44:a3:d5:be:da:38:32:cf:2d:c8:1b:25:76:3b:05:
         e8:5f:d5:bf:62:b2:63:dc:10:60:c5:f9:3a:39:6a:f3:9f:f3:
         ea:fc:09:af:db:c5:e4:d2:cc:21:1d:94:ee:6e:c0:58:33:93:
         13:1d:cf:c0:d9:7b:24:52:18:19:fd:2b:de:99:be:14:20:c7:
         9a:d9:14:fe:61:03:3e:5e:20:29:bd:78:f3:d4:79:2e:f2:18:
         91:3e:4e:c1:54:3f:13:8a:f8:6b:5a:1b:bf:29:f4:1f:2c:fc:
         81:6b:3e:ba:43:34:37:03:ac:02:8f:34:52:b1:7a:45:20:9d:
         4f:ba:2a:f2:36:69:f1:10:a6:f6:62:3a:ac:46:89:1f:78:ce:
         83:a7:64:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 22:13:03 2026 by rpki-client