Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          bckqQn+AycOT4nvifg1a1YPD4LclPSMdQo1ULPPYqKQ=
Subject key identifier:   1B:69:27:86:C5:3C:CD:4F:3B:3C:EB:10:3A:00:F5:92:39:EB:71:89
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       0583
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0579
Signing time:             Thu 24 Sep 2026 23:11:37 +0000
Manifest this update:     Thu 24 Sep 2026 23:11:37 +0000
Manifest next update:     Thu 01 Oct 2026 23:11:37 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: pm+NngjaTwdP4GBgAduUxffGYGrRIZrnTMnN2dplY24=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: 6tY3MA89EpAe/lRiSjB8kjlvtBFDcIlws9T/uGuzWKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411 (0x583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Sep 24 23:11:37 2026 GMT
            Not After : Oct  1 23:11:37 2026 GMT
        Subject: CN=6ab5ae29-147d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:70:cc:2f:75:09:37:15:37:78:27:92:19:
                    05:f3:dd:39:5e:e0:ae:dd:b5:74:52:df:dd:c6:69:
                    fe:c0:73:55:e8:5b:f7:57:fd:95:fb:28:c3:e8:47:
                    d4:ea:ef:fe:fd:ec:ec:07:35:af:be:09:12:fa:8a:
                    95:5e:43:ba:9c:2f:66:c1:75:8b:c9:76:2e:5a:e0:
                    4f:a5:dc:e8:28:62:df:e2:d7:bb:6b:bb:f3:da:dc:
                    93:5d:c8:45:45:88:28:f9:f8:e2:77:f5:7b:24:3b:
                    22:2d:2a:61:61:18:4e:61:25:57:93:cf:0f:99:07:
                    b9:45:5d:49:4b:90:a7:45:d2:7d:eb:2e:05:97:ad:
                    63:95:0c:6e:ea:4e:d8:77:0b:ec:b0:51:6c:24:5c:
                    a2:63:68:6d:36:63:ee:8a:30:d7:64:6f:4f:fb:65:
                    a6:62:83:5e:97:74:91:17:9c:03:76:2c:b8:9b:30:
                    2c:58:6f:89:3f:8c:e3:49:9c:36:7b:cc:cf:a9:e0:
                    4b:8a:5d:8f:18:5a:52:d8:ca:fb:d8:64:85:18:b1:
                    fd:89:e4:1e:2a:35:37:f9:f5:5f:f1:34:44:1f:96:
                    c1:38:c3:95:94:7f:9e:6a:9f:95:7f:1a:20:7d:64:
                    4e:60:49:a5:ce:e6:bc:30:a0:90:73:47:11:99:05:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:27:86:C5:3C:CD:4F:3B:3C:EB:10:3A:00:F5:92:39:EB:71:89
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:45:18:c4:e4:76:21:dc:6a:76:f9:03:00:c6:ec:c1:8a:
         e9:0c:be:1c:80:24:c3:8c:82:e0:40:75:a9:8c:e8:f6:4c:01:
         0e:09:e8:95:23:03:db:18:5b:92:63:a4:b5:50:8e:f7:ad:43:
         34:52:76:91:20:d0:b1:ad:0b:86:9e:f4:58:ad:cd:c5:b7:63:
         8b:79:3f:18:d1:eb:73:db:dd:f7:a6:1c:b4:a2:48:01:67:39:
         47:d9:9e:2f:8a:1c:e6:54:63:12:26:de:39:43:44:5d:28:53:
         e5:35:54:6f:d4:3c:35:56:00:59:c1:42:7e:68:77:6b:eb:58:
         1b:65:f8:ae:66:77:16:1b:de:55:53:d7:06:3d:f7:86:f4:9a:
         22:f5:d0:d6:a8:91:11:98:00:a5:9a:d4:66:84:9a:5c:34:02:
         f1:b5:9e:27:21:a8:8c:75:cf:c4:75:75:de:f0:fd:59:af:03:
         e2:5c:4b:61:de:2e:73:86:4c:95:c8:0d:a0:0b:b8:04:2e:45:
         fb:9e:53:31:4e:2e:b1:f2:41:b8:58:f2:92:9f:36:e5:af:e6:
         9d:dd:58:0c:ff:ea:e6:89:fa:73:c5:db:ae:74:2d:4c:a0:2c:
         88:de:61:85:19:c9:b5:c6:c5:f2:15:78:e2:2a:66:2a:95:97:
         96:e1:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:00:43 2026 by rpki-client