Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
File:                     BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json)
Hash identifier:          JQIQA2S6yZ+OA/4udewQaUJX84uL9SOx9korlpux6pA=
Subject key identifier:   CE:1D:44:18:0B:AD:84:EB:B4:02:F8:37:2A:DF:F5:C2:3B:59:DC:3C
Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1
Certificate issuer:       /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
Manifest number:          0232
Signing time:             Mon 05 Oct 2026 02:58:09 +0000
Manifest this update:     Mon 05 Oct 2026 02:58:08 +0000
Manifest next update:     Mon 12 Oct 2026 02:58:08 +0000
Files and hashes:         1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: WWG/GA/IzPxhUCP7G90ztZg457Fqi7ZqtK0ey2ESldY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl
                          rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1
        Validity
            Not Before: Oct  5 02:58:08 2026 GMT
            Not After : Oct 12 02:58:08 2026 GMT
        Subject: CN=6ac31241-39ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:06:ce:3f:37:c9:ed:d5:5a:02:c8:7f:3a:
                    d2:a9:d0:4a:c0:87:d0:d7:fe:d9:01:38:e9:65:d0:
                    63:80:5a:00:39:75:35:f7:04:c9:a4:2a:56:f4:3f:
                    f0:6f:c9:c1:e3:61:5a:6c:63:09:8f:50:64:ca:67:
                    f6:fb:f2:8e:4f:3d:12:c9:f5:4a:67:80:4c:c4:9f:
                    1b:53:ef:41:7f:c5:54:36:2e:16:53:e5:95:a1:94:
                    45:6b:2d:ec:29:f7:d1:45:d7:3b:1f:c8:93:29:63:
                    5f:48:f9:68:9c:f3:52:97:f6:1c:79:63:0c:30:6c:
                    b7:92:be:65:23:96:2c:40:a4:b2:76:10:c4:12:5b:
                    78:ad:dd:c3:50:48:2d:30:e7:c7:9d:82:b6:ef:c6:
                    8b:7f:b0:90:50:2c:08:12:0c:a4:e6:4c:09:b4:e4:
                    56:6e:47:0e:e8:17:11:bb:7a:6b:86:26:b0:c5:20:
                    06:78:ae:ae:b2:a2:d0:d5:62:40:92:2f:b1:5a:2c:
                    df:52:4c:30:9c:92:7d:3b:df:02:e9:3d:6b:60:da:
                    00:c0:46:2a:09:3b:b1:8d:45:58:0c:5e:1c:3b:73:
                    19:97:8d:95:a9:d5:b6:46:6c:7d:a0:7c:ec:81:2e:
                    f4:c6:54:e8:ef:ca:9e:b4:ce:14:d4:ee:44:2a:c5:
                    9f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1D:44:18:0B:AD:84:EB:B4:02:F8:37:2A:DF:F5:C2:3B:59:DC:3C
            X509v3 Authority Key Identifier:
                keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:30:ae:8d:bd:75:ca:90:a5:89:0d:a9:0c:8a:cc:6d:90:
         2f:2c:a3:21:33:74:24:83:30:72:69:68:03:a3:bd:7a:b6:56:
         85:e8:f8:e6:11:4e:da:00:e2:36:50:23:df:fa:d1:84:d3:27:
         20:4b:bb:7a:80:0f:9d:8b:ab:95:00:fe:b2:80:af:05:e9:36:
         44:c8:77:38:54:09:0d:d0:38:f2:8e:97:e6:bd:95:cf:ac:a5:
         d4:80:ec:d4:34:62:9a:4b:8e:c7:d6:e0:2e:42:9c:b1:96:64:
         04:71:81:5d:cb:25:b5:3f:ad:f2:84:44:20:c2:a4:26:a9:4f:
         19:4a:a9:ae:1a:ec:23:05:7c:55:74:24:c2:53:d9:63:34:8a:
         a9:bf:4e:d8:01:35:d4:2c:47:06:35:91:81:01:3b:fa:01:7c:
         e0:1c:55:dd:47:cf:af:a0:dd:23:ed:62:d1:e3:e1:c5:4e:f8:
         71:2d:a5:4d:0f:0f:8a:63:ff:71:be:f0:9e:83:fb:1b:12:fa:
         80:42:73:9e:04:98:b0:68:24:c2:62:99:3a:7d:e6:9d:ca:4d:
         a2:4c:ac:50:cd:13:8e:4e:ae:f2:11:82:92:a6:03:18:cc:55:
         98:50:0c:bc:bc:7e:87:66:82:eb:fe:57:29:78:3a:51:7e:3c:
         4d:76:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:55 2026 by rpki-client