Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
File:                     bGgIQDgcHvMtPI2786zECCz2pbM.mft (raw, json)
Hash identifier:          8e+yu+KF//Z6Iw0aBdWzYfQkydDJf2+oy5FRdrVdPIo=
Subject key identifier:   36:A9:CF:84:B6:5A:4B:CC:F7:0D:E9:5B:00:86:40:10:E6:61:29:C3
Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3
Certificate issuer:       /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
Certificate serial:       0B69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
Manifest number:          0B1B
Signing time:             Sun 04 Oct 2026 19:22:23 +0000
Manifest this update:     Sun 04 Oct 2026 19:22:22 +0000
Manifest next update:     Sun 11 Oct 2026 19:22:22 +0000
Files and hashes:         1: bGgIQDgcHvMtPI2786zECCz2pbM.crl (hash: MhtIYg2qzbZtijsvbl4XUWrcsik3R6G7JmET2Z+Zph8=)
                          2: 2131145E9E4C11EABF30421BC4F9AE02.roa (hash: L46lyNGF7xref2PgtpwYQAu20HQOQ2fkzes7fFR03pE=)
                          3: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (hash: 00l1R5FwZcWzFUVZ2aqvW97Qwqjz6xknwlkADPfSXV8=)
                          4: A32546F8A3DB11EA98BC5D48C4F9AE02.roa (hash: O9t3MGde1CPLLyHzaHW4c/VnESPgcMHRUVCLnNs5iqg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl
                          rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2921 (0xb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3
        Validity
            Not Before: Oct  4 19:22:22 2026 GMT
            Not After : Oct 11 19:22:22 2026 GMT
        Subject: CN=6ac2a76f-0954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:61:91:89:df:3f:5f:4e:4d:6a:e8:2f:b1:
                    33:13:20:72:d1:6f:72:90:42:34:fd:cd:ae:81:0e:
                    96:f3:69:ba:72:11:ce:5f:11:30:56:21:f8:4e:7f:
                    6c:0c:8f:58:e8:da:ba:1b:ac:5c:a6:5f:5f:03:e0:
                    16:03:e8:e2:bc:c4:a9:10:0c:ea:0e:3d:92:7e:28:
                    e0:20:32:96:9a:c8:3b:54:71:b8:a1:b5:6e:a6:88:
                    43:83:b2:22:96:fa:e2:3e:7f:87:d7:f2:6b:86:1f:
                    e4:d8:8f:ec:4d:5c:84:9f:60:23:f8:be:d5:0f:e4:
                    53:21:59:6a:a1:4c:1a:09:62:dc:d1:a9:05:c3:40:
                    c5:f1:9d:2e:08:df:f6:4b:1b:4b:ac:8d:ec:4d:07:
                    b7:95:82:7e:96:22:45:98:57:ce:fb:68:a3:1f:2f:
                    b5:a0:e1:e5:af:23:9d:21:66:61:86:da:14:8d:ac:
                    6c:88:e1:89:9a:ca:f0:de:9c:37:01:f7:5e:10:a8:
                    13:75:1b:70:e1:92:9d:f3:da:53:07:af:b8:3b:8f:
                    fe:d8:4f:ce:85:c5:0a:a4:da:06:2b:8d:8b:5f:a7:
                    70:34:11:5d:e4:97:17:d3:a1:93:dd:22:09:d6:e9:
                    08:ee:f4:1c:30:ad:80:c2:97:24:55:8b:ec:2b:1f:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:CF:84:B6:5A:4B:CC:F7:0D:E9:5B:00:86:40:10:E6:61:29:C3
            X509v3 Authority Key Identifier:
                keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c3:03:f1:d4:79:26:94:5e:79:80:43:2f:a2:ed:19:40:46:
         db:7a:33:f7:97:03:d5:2d:bb:05:59:e6:ab:ac:b8:c0:2c:fc:
         31:e0:bb:5b:4d:bc:e9:93:38:17:9f:03:90:49:01:35:0b:a0:
         ef:a0:d7:c5:74:49:6a:ce:21:17:1a:b3:6d:e9:c6:10:83:fd:
         59:01:5c:5f:fe:e8:42:dc:d0:5e:46:09:eb:ff:be:fc:71:82:
         23:84:4a:c2:99:99:a3:d3:45:34:2a:37:c8:94:4e:0e:b9:a7:
         56:0a:5c:14:b2:e3:ec:03:6b:e7:c4:c8:21:c8:15:b8:f5:c9:
         f7:91:ca:0f:63:a0:56:f5:e9:fe:14:26:2a:e0:6c:1a:03:02:
         5f:d3:8f:6d:e1:e3:b0:37:c7:27:1b:5e:c2:c9:e5:52:1e:11:
         23:74:53:12:e3:e3:6f:13:6b:fd:46:ed:84:7a:b1:b4:08:fc:
         35:bf:48:21:8e:ad:f2:e8:eb:12:22:db:c0:27:fe:30:ad:c4:
         17:46:3d:5b:93:2b:04:9a:6f:1f:d8:a4:80:87:73:74:17:f5:
         81:ee:6e:24:b5:c3:04:ff:89:4d:38:e4:d8:cd:00:4b:db:87:
         37:f5:de:0c:ed:8a:0f:9a:4e:17:de:69:f2:f2:f8:a4:db:3f:
         c7:d1:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 02:21:45 2026 by rpki-client