Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          lr7BhcRBsA5wL3sOJCJ7fXVNi8cD5KUKkwlglQeL6/o=
Subject key identifier:   A2:6B:19:63:0A:90:DA:CF:23:D7:56:31:43:19:AA:9C:C7:CE:8C:D3
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       061C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          05EA
Signing time:             Thu 24 Sep 2026 22:54:57 +0000
Manifest this update:     Thu 24 Sep 2026 22:54:56 +0000
Manifest next update:     Thu 01 Oct 2026 22:54:56 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: JfJTVgs9OLnhjiFC5tPbWzlW0VqgJiRsfrd/O0+6OTI=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
                          3: F10B6BDAB15E11F19966FC595911F970.roa (hash: Sk5NHBlI9Hm/01FV+Wxh8KFWaVLMatU4jdt2wMLVel4=)
                          4: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
                          5: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: fOItdik6vtxYgosTC2RuuMa1JaHzIaMudzCvyl8gM+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Sep 24 22:54:56 2026 GMT
            Not After : Oct  1 22:54:56 2026 GMT
        Subject: CN=6ab5aa41-8d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:1b:f3:d0:5e:fb:6b:45:20:bd:f6:58:de:
                    4d:bf:03:99:67:60:03:ec:c3:16:73:55:35:96:cb:
                    78:cd:91:8e:19:76:cf:24:fa:ad:fb:1f:61:9b:82:
                    31:24:0c:d9:9e:39:f5:a2:3d:11:56:f7:24:d0:4a:
                    d9:88:14:cb:b7:b4:3d:ae:fe:e7:da:79:d9:0d:a9:
                    9e:78:11:0e:68:7b:e0:0f:34:bb:a7:01:b6:1d:60:
                    6d:93:b4:66:86:4c:a0:48:75:d6:0f:21:98:c0:49:
                    8b:5f:57:67:7f:7d:4d:df:86:1d:e8:d1:61:5f:2f:
                    db:43:57:da:04:b4:0a:4f:4f:31:de:0f:fa:45:5b:
                    a0:a3:b5:72:56:2f:e4:50:92:d0:79:77:f9:fd:6e:
                    c7:03:fe:d8:10:8d:20:9a:21:6e:d5:22:60:74:49:
                    25:21:e9:ea:9e:10:36:1d:08:75:b9:43:13:34:38:
                    fa:4c:5b:a6:60:58:43:a7:59:cf:bd:19:36:70:e2:
                    dd:6d:3c:5a:3d:62:60:74:ce:46:be:80:e5:2d:17:
                    9f:c6:8e:48:7d:66:50:3e:48:59:26:f9:ee:41:d5:
                    af:be:cc:33:81:d7:e8:1c:2f:16:9e:92:c4:db:cc:
                    3e:8d:3e:8e:88:c9:8a:ec:c7:e0:d0:c5:8c:a7:b0:
                    73:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6B:19:63:0A:90:DA:CF:23:D7:56:31:43:19:AA:9C:C7:CE:8C:D3
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:5b:40:f4:bc:2d:f6:2d:91:a1:84:6b:7f:d3:0d:e6:66:
         f3:8c:79:8a:d8:16:0c:8b:8e:c6:19:02:2c:1c:ad:d0:a2:c2:
         24:57:48:14:3e:d2:db:eb:ca:e4:3f:1f:7e:1c:6f:c5:00:33:
         9e:85:ba:91:ca:1d:80:03:91:8d:54:e5:59:61:da:80:0a:7c:
         d3:f3:a2:42:9e:86:c9:e7:19:f6:a8:60:39:2e:f6:d1:de:ff:
         6d:2f:a2:9a:38:6b:66:37:4b:5f:ef:65:97:a6:2b:bf:03:d3:
         12:ff:81:b7:bd:6f:66:46:d3:03:56:eb:31:b6:4b:e6:f7:f2:
         4f:a1:de:c4:88:6b:19:11:32:aa:76:86:18:0e:74:2f:46:dc:
         1f:92:46:e6:4b:42:b6:d3:7c:e9:5f:81:0e:35:1b:4b:27:03:
         65:da:7e:51:a8:ba:e5:be:b2:37:0e:ba:bc:98:d0:be:58:e6:
         a8:d1:25:88:fd:1a:fe:11:97:b7:7d:ca:68:a3:4b:2c:77:b3:
         97:44:79:bf:c1:ff:e4:b6:56:d8:4d:fa:ff:ec:46:65:aa:7e:
         53:36:1b:5e:0a:e2:ba:05:2e:59:a8:44:18:11:42:3f:d4:d6:
         ae:48:08:8d:d1:6b:5f:8d:30:c1:f5:53:c0:79:cc:1a:a8:43:
         2d:39:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:47 2026 by rpki-client