Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
File:                     RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json)
Hash identifier:          BtwMGyZ7Apq165Y0b1ph4SDNKru7Ok6gfi7pPq9aVTc=
Subject key identifier:   C6:FB:40:05:DF:1B:3A:3D:C5:F5:7D:EC:7D:84:89:0B:0A:45:8B:BC
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Certificate issuer:       /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial:       0872
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
Manifest number:          10CE
Signing time:             Tue 06 Oct 2026 21:01:34 +0000
Manifest this update:     Tue 06 Oct 2026 21:01:34 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:34 +0000
Files and hashes:         1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: PL0yxqgKF69GHCYj/AcLJFQ4B5o40pEofggudfFc8EQ=)
                          2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: jUqnFx87IlStP4kkY9M0idgA/Hwc78g7kwMihGngNEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 21:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2162 (0x872)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
        Validity
            Not Before: Oct  6 21:01:34 2026 GMT
            Not After : Oct 13 21:01:34 2026 GMT
        Subject: CN=6ac561ae-5f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:b3:b5:1c:9e:f8:14:3b:32:3c:f3:8a:d9:
                    a8:fc:5d:4e:e9:e1:8d:47:1a:6c:25:4a:d5:97:6f:
                    04:dd:9c:66:70:05:07:0a:4a:ba:93:c2:52:19:64:
                    c7:21:c9:e1:46:b2:8b:f6:f5:1a:3b:e2:5d:a8:b2:
                    6e:5f:c2:e7:1a:1e:44:58:fb:b7:eb:64:f8:bf:be:
                    8f:90:8d:9f:8d:ab:20:58:f7:ef:1d:97:1a:42:e1:
                    82:e9:7e:2f:e2:0c:fc:78:82:8b:e8:59:2e:5f:a4:
                    16:8c:7f:49:4c:7d:14:22:a0:7f:38:3c:43:fb:c4:
                    10:20:dc:cf:05:88:be:92:bd:4f:0a:78:91:eb:ff:
                    ca:8d:c7:49:6d:f9:36:8a:c6:63:42:91:de:ce:2f:
                    e9:9d:da:15:90:e4:d3:df:c5:15:16:88:28:99:1f:
                    3a:4f:2b:08:58:c5:f5:76:21:9a:c8:72:50:e2:45:
                    d3:52:70:fb:5d:4c:2e:40:23:5a:35:79:59:2c:91:
                    9f:9f:1e:5a:a2:22:9b:b9:f7:a6:3c:21:c6:99:79:
                    48:b2:d3:8e:70:a2:6f:c7:f9:f9:25:cd:bb:c3:6a:
                    c0:b3:f4:af:e2:bb:05:30:cc:0f:74:4e:02:ac:71:
                    6c:3b:42:42:0e:6b:28:54:0d:86:93:38:3a:18:0b:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FB:40:05:DF:1B:3A:3D:C5:F5:7D:EC:7D:84:89:0B:0A:45:8B:BC
            X509v3 Authority Key Identifier:
                keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:44:3e:fb:bc:1e:7b:54:f4:00:96:28:43:82:8a:63:d5:1a:
         1a:d5:3e:d5:5d:fd:2e:90:70:ca:82:99:20:8f:d0:03:6a:3a:
         3c:19:fb:29:7b:b5:21:29:06:6c:55:4d:e6:c9:f4:b9:a2:49:
         0c:ab:36:12:4f:27:b0:35:fb:d2:eb:60:21:52:41:67:c9:44:
         bd:6d:9e:ff:0f:6c:b5:d7:c0:9c:06:b2:15:d6:b0:a8:6b:b0:
         95:98:0d:58:a1:45:94:45:4b:01:29:a8:43:b5:83:35:be:2c:
         60:9b:c4:df:2e:33:69:14:59:ea:f7:34:ab:3e:68:ad:fb:82:
         8b:86:24:31:23:1a:91:37:a6:9b:8e:cf:35:2a:c0:55:0b:32:
         b3:6a:a1:13:d4:78:49:63:72:dc:63:1e:e3:04:2a:af:ff:87:
         b9:03:bf:0a:10:e9:71:26:3c:94:82:b8:23:da:1f:94:ef:3b:
         05:2d:b6:af:ca:f6:40:0f:f1:c9:5c:96:55:31:89:bc:6a:b4:
         7e:2d:91:bd:83:ba:88:1e:6d:45:f7:21:99:ae:49:a7:af:33:
         8f:9d:5c:38:85:4d:44:72:63:7a:db:c6:1b:d3:79:1d:a8:98:
         8f:fd:9d:36:e7:f7:a0:7b:3b:c4:82:75:30:6d:ad:db:b0:ed:
         78:26:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:54 2026 by rpki-client