Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          bc/hl3hkXv1EcLGJpr2ooGB3X6vvX/TG/hCM+Ql/2F8=
Subject key identifier:   0C:25:A8:98:AE:69:AC:DB:49:C5:10:C9:0F:21:88:89:CD:0D:1E:4B
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          0605
Signing time:             Thu 12 Nov 2026 22:45:24 +0000
Manifest this update:     Thu 12 Nov 2026 22:45:23 +0000
Manifest next update:     Thu 19 Nov 2026 22:45:23 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: vfr0WM9+bXkisBjG9PJDNfC8jCK2MRABTzGEyl23SVg=)
                          2: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: MwieAUsYm3NV4PWTPdvRH5f3142GqXPuPIPtCzMFaqg=)
                          3: F10B6BDAB15E11F19966FC595911F970.roa (hash: 8JLs4d5GjasBrFVrD+EYyHzQ25YU0nfjYQMQ8txKbX4=)
                          4: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: nXqCOiL/o9G8uSU94JvYraUG3Zy6YpcDAXzJdcb5rWc=)
                          5: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: rA4550QgDxB12iJcwwC+xAskKXyzIKLJQxU36lEB6G0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Nov 2026 22:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Nov 12 22:45:23 2026 GMT
            Not After : Nov 19 22:45:23 2026 GMT
        Subject: CN=6af64183-50d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:d0:f5:46:d2:45:1d:6d:9b:2c:1f:7d:17:
                    65:3d:4d:d7:ac:79:1e:d9:dd:42:ac:b8:f0:a0:e1:
                    22:90:03:a4:97:09:14:f3:09:b8:3b:bd:11:37:54:
                    bc:08:e7:dd:f4:96:46:26:09:84:3d:9d:6a:84:10:
                    13:88:c0:2d:f8:32:b7:98:f5:9b:42:2c:6e:19:11:
                    79:e7:86:88:de:9b:a0:be:db:60:d8:c9:92:eb:71:
                    b0:85:46:b0:fe:a2:0c:f4:4e:02:a5:40:29:5f:f6:
                    c6:e2:83:f4:90:16:2b:af:a2:6d:7c:96:37:ee:dd:
                    7b:4f:bb:e3:77:60:91:01:d1:7f:9d:99:08:01:2f:
                    b6:dd:31:1e:ba:89:70:07:7c:3a:fe:ff:b9:04:7f:
                    7f:01:08:3e:45:78:2c:c5:a8:29:06:4a:d2:c6:65:
                    f1:05:dd:74:e4:21:c5:71:fa:b4:61:1e:88:e0:54:
                    39:98:d2:af:e9:02:26:57:b8:87:0f:8b:ba:6d:2d:
                    fa:62:45:bd:d8:b1:ff:b0:51:b0:39:25:a4:3e:61:
                    4d:ee:e5:c7:ff:12:d7:30:b4:a7:01:0b:47:74:07:
                    b2:a0:f4:10:fd:12:1c:06:ad:99:24:1c:98:c3:e9:
                    26:f0:df:64:96:01:36:d3:79:20:23:79:b0:b7:72:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:A8:98:AE:69:AC:DB:49:C5:10:C9:0F:21:88:89:CD:0D:1E:4B
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:74:6d:d2:27:3c:bf:bb:38:35:22:34:86:07:82:9c:fb:b2:
         54:5e:65:ce:6f:b4:4f:0b:60:9a:6a:0e:6a:7d:1d:b0:21:73:
         a3:d4:e5:8d:c7:46:e4:d4:1b:47:10:a6:5a:49:c4:d3:31:c8:
         3f:8f:89:0f:b9:c7:d7:03:dd:78:c9:1f:9f:78:0b:02:d2:5e:
         07:f1:f2:1a:3b:0d:3c:2a:75:11:f9:da:c8:49:05:f2:90:ac:
         4f:0f:9f:7f:40:77:ad:0e:d9:16:a3:10:0e:3c:b3:f0:36:b2:
         e4:0b:62:27:98:f7:ec:c0:00:ff:61:89:fe:f6:e9:fb:dd:46:
         96:1b:86:1a:c0:f1:93:ba:27:21:9e:76:a1:91:00:1d:eb:ed:
         2d:45:2a:b8:bd:0d:c2:a8:de:b4:25:f7:8d:eb:c5:a4:0d:93:
         10:e0:d8:4f:50:28:76:c1:21:1d:56:0d:e4:3a:00:59:cd:d3:
         ce:2f:d6:45:93:c0:27:55:19:30:09:b6:a3:9d:78:64:95:54:
         2d:c4:26:e6:51:78:34:4b:e8:14:a8:e4:9a:2d:8a:af:2d:7e:
         78:71:6a:f0:04:93:55:01:cf:24:c4:71:16:04:cd:d7:8d:88:
         56:ed:db:87:ad:2f:4d:c0:fe:d1:3b:f3:f4:85:54:54:36:f5:
         af:d0:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:11 2026 by rpki-client