Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
File:                     X48BYbesuyVfE88IG2ZTYZtOLAI.mft (raw, json)
Hash identifier:          6x8UZsoS1Bzzx9cNGFwHnYQVmjJgShzFdiGYfUt7pAE=
Subject key identifier:   AE:2F:E3:6B:37:1F:07:A2:4D:0E:24:3D:28:85:09:DB:B3:E4:1E:25
Authority key identifier: 5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02
Certificate issuer:       /CN=A9149A0D/serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
Certificate serial:       08C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
Manifest number:          08BC
Signing time:             Tue 22 Sep 2026 20:20:09 +0000
Manifest this update:     Tue 22 Sep 2026 20:20:08 +0000
Manifest next update:     Tue 29 Sep 2026 20:20:08 +0000
Files and hashes:         1: X48BYbesuyVfE88IG2ZTYZtOLAI.crl (hash: oP6ioEfPX4XQQAiu+GtBiE4dlBBrz3vCcBmWpcJWJs0=)
                          2: B08421401D2C11F1AC765BFB153D8C67.roa (hash: TAh33/TweOL0Zp6UZEAPfCKrE9xE2i8YoGrm5wZloBU=)
                          3: 8FB8171E1D2C11F18BD061F8153D8C67.roa (hash: 0P5+1QsMe2etRxHYksVVwvkONUIo2rGlANvWQyHYTKo=)
                          4: 137DD3E8E60C11F0A18B1E57676F56BC.roa (hash: uV78r469K9kpBYYycBaJqz/OEoI2cFdGsz5vaAFm0kA=)
                          5: DFBB127A1FD911F18338B27E3F3D8C67.roa (hash: /SYY7WeR+aA+gbxGrf5qM5FajASTqqxf81wX3CNIlA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl
                          rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249 (0x8c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149A0D, serialNumber=5F8F0161B7ACBB255F13CF081B6653619B4E2C02
        Validity
            Not Before: Sep 22 20:20:08 2026 GMT
            Not After : Sep 29 20:20:08 2026 GMT
        Subject: CN=6ab2e2f9-371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:5c:bc:e4:f6:b1:68:42:00:44:5f:aa:85:
                    3b:a4:47:4e:13:a6:d4:a6:0f:43:08:03:21:87:90:
                    e3:12:9f:72:54:bb:77:7c:d8:b5:8f:7b:33:77:48:
                    1d:78:04:f7:d1:57:e9:1a:7d:91:79:76:9b:41:cd:
                    d2:f1:03:33:a8:11:06:fb:ad:65:2b:27:bf:69:bc:
                    f9:7d:8e:bf:68:09:57:46:27:6f:db:19:94:2f:13:
                    0a:4b:e6:a5:1d:5c:ea:51:66:49:8b:3f:e4:2f:5a:
                    14:6b:07:d2:a3:14:8a:75:3f:dd:58:e6:1b:f1:cb:
                    1c:e5:7e:51:13:03:9e:60:de:06:ef:8f:2f:b3:cf:
                    3b:85:a7:d4:fb:f2:5b:cf:a0:42:87:49:29:98:24:
                    5f:b9:89:0b:af:82:ae:5e:f3:72:5f:de:2e:95:0a:
                    61:9f:41:31:56:e7:d4:f1:d4:0c:a9:27:5c:ef:c9:
                    ee:b3:ee:b2:fa:75:36:01:6e:4d:c9:ae:80:a2:ab:
                    18:f1:4f:a6:d6:c6:e7:09:27:a5:46:ee:03:e4:40:
                    92:8e:77:a9:b6:50:8f:1a:0e:e0:d3:c4:38:aa:de:
                    83:9b:3e:f2:f8:7b:0c:a7:47:86:7c:a7:21:19:fd:
                    c1:e9:7e:7e:f1:79:83:3c:15:6d:af:7d:d6:e5:59:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:E3:6B:37:1F:07:A2:4D:0E:24:3D:28:85:09:DB:B3:E4:1E:25
            X509v3 Authority Key Identifier:
                keyid:5F:8F:01:61:B7:AC:BB:25:5F:13:CF:08:1B:66:53:61:9B:4E:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X48BYbesuyVfE88IG2ZTYZtOLAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A0D/0FB79164FB1511EAB011EC6EC4F9AE02/X48BYbesuyVfE88IG2ZTYZtOLAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:d3:a3:28:21:5a:75:2f:ad:b7:38:e7:51:70:7b:2a:d3:
         76:c7:c7:31:06:fc:77:f1:4d:37:98:18:71:07:be:3b:d5:ca:
         d6:d0:46:5e:55:94:df:1f:64:7e:57:a8:25:a0:a9:23:9d:fc:
         d2:70:ea:13:ab:fb:6d:24:95:50:8c:45:c8:8b:f0:74:4e:b4:
         2f:d4:af:3d:3c:92:f9:e5:f8:c9:e5:78:37:00:ed:9b:79:23:
         ec:7c:fe:c4:63:db:d2:91:50:07:cd:e7:84:f0:5e:1e:d2:f7:
         f6:19:d8:ce:50:42:87:fb:e7:23:05:96:e4:fb:ba:63:f1:5a:
         b4:7d:f2:f1:41:41:52:27:e7:6e:78:dc:f2:bb:93:73:a5:79:
         22:ed:74:da:b1:60:8e:38:e9:2e:b3:61:9c:b0:2d:c0:d0:fe:
         fb:90:66:d9:9f:01:c0:a8:f2:11:69:d8:8b:63:4a:eb:ed:23:
         07:96:10:ea:7d:db:d3:b2:ee:8f:2a:b7:20:ea:4a:4e:65:a4:
         e8:6a:5e:9d:af:51:37:53:30:9b:55:92:b3:75:fd:38:7f:91:
         8b:96:dc:5b:ab:2b:d8:58:f4:17:2b:27:0f:a1:42:cb:89:e5:
         dd:a8:94:11:a2:a4:a0:4b:9b:29:53:fb:05:90:0e:e7:05:13:
         4e:6f:29:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:35:36 2026 by rpki-client