Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File:                     bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier:          VTj5wRPFPeuXVLCBnxT2PletuDzhlfKNydaEmdBfXwI=
Subject key identifier:   90:DA:7B:64:02:05:7C:1D:C9:07:CD:AE:7C:D8:A8:E4:73:51:BF:87
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer:       /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number:          8D
Signing time:             Mon 05 Oct 2026 07:59:03 +0000
Manifest this update:     Mon 05 Oct 2026 07:59:03 +0000
Manifest next update:     Mon 12 Oct 2026 07:59:03 +0000
Files and hashes:         1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: uuCE6IG07tTz3J6yPSYQ+GNtwNxu25lBUVblhRFWN+o=)
                          2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 07:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
        Validity
            Not Before: Oct  5 07:59:03 2026 GMT
            Not After : Oct 12 07:59:03 2026 GMT
        Subject: CN=6ac358c7-6f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:6a:c3:29:31:03:f8:c7:24:6f:35:4d:e1:
                    33:73:41:52:33:52:ba:a4:7a:ed:ca:07:fe:50:13:
                    cb:88:e8:2c:41:a6:e2:64:01:ea:e1:6b:06:72:fc:
                    88:a5:8a:ba:95:b0:aa:c8:13:41:86:15:c4:56:ab:
                    71:80:03:10:3d:9c:a5:aa:e6:30:4b:94:f0:41:cc:
                    ee:b4:7f:63:8f:2e:db:5d:b6:b3:b3:26:f9:af:e9:
                    3e:96:6b:2b:9d:72:31:61:39:54:f2:e2:2f:64:d1:
                    08:6d:23:09:9e:1b:42:4b:15:bc:7e:32:39:f7:c2:
                    12:00:0c:11:4d:fd:10:4d:dd:7d:a1:ea:52:00:51:
                    be:43:f5:cf:69:98:93:2e:65:31:f9:3a:c4:46:63:
                    12:35:80:ff:2d:14:fb:1b:e4:f1:49:b4:0b:f5:22:
                    63:b6:47:6a:5b:f8:fc:ec:2e:f3:50:1d:23:65:3f:
                    f6:52:ca:2e:d2:56:bc:85:d3:74:c9:00:25:63:0e:
                    16:ed:e7:f5:80:ff:47:4d:4f:32:c1:1b:4f:c6:5f:
                    66:e2:1a:e1:14:79:9d:6d:73:85:66:f9:dd:65:cd:
                    12:09:1e:54:b3:21:88:96:06:6a:31:c7:e6:72:10:
                    e6:60:2d:2a:29:3c:a1:e8:c5:88:f4:91:c5:73:df:
                    58:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DA:7B:64:02:05:7C:1D:C9:07:CD:AE:7C:D8:A8:E4:73:51:BF:87
            X509v3 Authority Key Identifier:
                keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:aa:ca:35:fb:bb:37:77:ba:59:45:20:c6:48:b8:59:cd:11:
         9c:f0:00:85:cf:7b:c5:4e:80:45:d5:c9:d6:7a:ae:d7:53:b3:
         16:d3:64:5b:17:03:6c:87:9d:aa:fe:c8:54:a4:46:b8:99:9a:
         c3:e3:0a:ec:85:d8:1b:18:a7:7b:65:14:fe:c7:ef:d7:13:51:
         a8:43:98:41:55:3f:81:94:a9:82:c5:15:73:72:24:0d:f5:63:
         75:5e:03:25:25:d0:94:b7:99:65:20:7d:68:9b:35:34:dc:b8:
         11:a1:79:1a:b4:54:26:ab:05:d0:63:40:c0:b8:f4:01:b3:50:
         32:1d:27:08:e5:ff:c6:cd:bd:72:d4:c8:a5:ad:55:2f:81:a9:
         d0:fb:1c:86:68:a2:52:98:ef:18:a1:48:4b:33:d4:8f:21:01:
         fb:58:97:6e:24:32:5d:c6:1f:a4:67:ed:06:d1:34:f7:ec:e2:
         d9:17:ba:23:a7:66:1d:ce:e1:72:d3:96:d6:05:ab:fc:24:20:
         c3:16:84:74:be:0a:66:87:0e:ee:18:26:19:f7:55:aa:af:5a:
         b2:04:38:e4:68:cb:62:cf:c5:e7:f6:39:05:e9:2a:47:67:9f:
         5a:8f:aa:52:e8:e7:92:44:80:95:e5:f4:90:59:d0:17:d7:31:
         f8:be:f2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 18:52:22 2026 by rpki-client