Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
File:                     BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json)
Hash identifier:          un9KvhwgIU1YkJwF4Xjtw4GJlsxAQMhlpMHYaZ6yJsw=
Subject key identifier:   F3:76:92:4C:96:46:ED:1F:73:7D:B9:EA:8D:FC:76:CB:03:67:41:DD
Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1
Certificate issuer:       /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
Manifest number:          0495
Signing time:             Sun 20 Sep 2026 23:46:59 +0000
Manifest this update:     Sun 20 Sep 2026 23:46:58 +0000
Manifest next update:     Sun 27 Sep 2026 23:46:58 +0000
Files and hashes:         1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: Z5nhfgTOdAjwJPTNNc2a57g413ydLl1cX3WhmHsIh/M=)
                          2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: QHGUM82zhuPv35Kjoao2FUx1+4roXHxbwl+YxAAtRCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl
                          rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1
        Validity
            Not Before: Sep 20 23:46:58 2026 GMT
            Not After : Sep 27 23:46:58 2026 GMT
        Subject: CN=6ab07073-92ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:38:70:4d:6c:b0:45:e4:29:56:7e:87:23:
                    a6:d0:24:e6:91:a5:83:ca:32:5d:9f:1e:19:a8:da:
                    1a:10:46:97:38:4c:d5:72:60:18:44:8d:79:c9:36:
                    b1:a5:0b:ea:a6:24:dc:02:82:50:c6:9c:c2:d7:7b:
                    6f:ab:77:53:6a:ca:b5:47:2f:6f:f8:0e:6d:d9:2e:
                    03:fa:8c:3b:75:fb:f5:1d:a6:42:44:57:fe:0c:c4:
                    4a:50:96:e2:0b:32:ba:ac:49:07:c6:a3:db:28:f8:
                    73:26:aa:c4:8a:38:66:76:b9:e4:e9:3f:20:43:08:
                    67:3b:c0:0c:2b:57:03:30:3a:39:ef:5c:36:a9:bb:
                    a7:77:94:7f:d4:eb:58:9d:7b:a2:43:74:eb:4e:1d:
                    eb:7a:2b:17:3d:bc:88:a4:2d:1e:70:31:21:49:c9:
                    d3:42:b2:4d:58:00:e5:d5:52:b3:06:f8:5e:8f:9c:
                    b8:e4:2a:b7:c2:8c:d6:8f:08:d9:7b:46:a3:7d:96:
                    7a:36:9a:4b:66:37:b4:2c:5f:dd:4a:67:f6:97:6d:
                    8f:04:f8:6e:4d:38:4f:1c:a2:dc:88:68:69:b6:ca:
                    b6:67:41:54:fd:78:e2:db:80:a2:8b:ff:63:5e:af:
                    59:93:2b:0e:cd:b6:af:35:35:b2:f3:a7:ab:57:03:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:76:92:4C:96:46:ED:1F:73:7D:B9:EA:8D:FC:76:CB:03:67:41:DD
            X509v3 Authority Key Identifier:
                keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:33:60:be:2e:0b:e0:07:3c:3b:96:68:b1:bf:b3:ed:99:5b:
         86:00:5b:47:58:39:a9:05:4a:11:cf:f4:61:a3:c4:5b:61:cf:
         96:64:c4:4e:e6:17:64:11:c9:1a:e8:87:4d:2e:00:29:93:bc:
         68:38:65:2b:f1:f8:e7:1f:62:98:f3:8a:35:c0:0f:ae:bc:2d:
         60:af:f2:cb:78:72:0c:01:df:b3:dd:62:1e:8d:8e:c7:33:1a:
         f3:09:26:71:31:4d:fc:c2:1b:ec:09:a9:85:be:04:e0:d5:43:
         8e:bc:fc:d0:ba:c8:ea:b0:e7:46:e2:20:68:a2:e6:18:a0:9c:
         2a:ab:0a:da:a0:6c:a2:87:0b:7e:fd:d6:ca:94:9c:15:cc:fc:
         3a:8c:f0:b3:d8:c5:0b:74:8f:b0:56:12:fc:c1:9c:9c:3b:80:
         8d:13:7a:59:93:2d:fa:31:f6:1d:22:8a:27:db:16:c6:47:5e:
         e1:73:80:32:1d:97:84:79:ce:34:50:58:c1:ac:5b:74:8b:57:
         56:73:90:80:03:0f:b8:af:6e:e5:b5:99:22:c4:9f:8c:a1:76:
         94:8c:17:3c:27:37:ba:da:c5:e4:48:cc:c0:90:78:62:69:43:
         d3:c7:97:68:2f:54:01:97:13:4f:a8:52:22:1d:33:d1:0f:e8:
         b1:63:fa:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz
RTM3RTFCQzEwHhcNMjYwOTIwMjM0NjU4WhcNMjYwOTI3MjM0NjU4WjAYMRYwFAYD
VQQDEw02YWIwNzA3My05MmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzGY4cE1ssEXkKVZ+hyOm0CTmkaWDyjJdnx4ZqNoaEEaXOEzVcmAYRI15yTax
pQvqpiTcAoJQxpzC13tvq3dTasq1Ry9v+A5t2S4D+ow7dfv1HaZCRFf+DMRKUJbi
CzK6rEkHxqPbKPhzJqrEijhmdrnk6T8gQwhnO8AMK1cDMDo571w2qbund5R/1OtY
nXuiQ3TrTh3reisXPbyIpC0ecDEhScnTQrJNWADl1VKzBvhej5y45Cq3wozWjwjZ
e0ajfZZ6NppLZje0LF/dSmf2l22PBPhuTThPHKLciGhptsq2Z0FU/Xji24Cii/9j
Xq9ZkysOzbavNTWy86erVwN0BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPN2kkyW
Ru0fc3256o38dssDZ0HdMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB
QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw
NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtjNgvi4L4Ac8O5Zosb+z7ZlbhgBbR1g5qQVKEc/0YaPEW2HPlmTETuYXZBHJ
GuiHTS4AKZO8aDhlK/H45x9imPOKNcAPrrwtYK/yy3hyDAHfs91iHo2OxzMa8wkm
cTFN/MIb7Amphb4E4NVDjrz80LrI6rDnRuIgaKLmGKCcKqsK2qBsoocLfv3WypSc
Fcz8Oozws9jFC3SPsFYS/MGcnDuAjRN6WZMt+jH2HSKKJ9sWxkde4XOAMh2XhHnO
NFBYwaxbdItXVnOQgAMPuK9u5bWZIsSfjKF2lIwXPCc3utrF5EjMwJB4YmlD08eX
aC9UAZcTT6hSIh0z0Q/osWP6tA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:29:01 2026 by rpki-client