Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          9t0Q6asXHlmAfbmLl8DOweHUfHbfrLPqGqEXl+UIwLA=
Subject key identifier:   8F:45:B9:26:A3:EA:BA:FA:FE:54:2B:C1:F6:08:8F:F8:90:14:15:AC
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       061B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          05E9
Signing time:             Tue 22 Sep 2026 22:44:14 +0000
Manifest this update:     Tue 22 Sep 2026 22:44:13 +0000
Manifest next update:     Tue 29 Sep 2026 22:44:13 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: aZjONvdjcQpXHEmuMUMz/ihTps/NnTCrVsnqsX8mKIc=)
                          2: F10B6BDAB15E11F19966FC595911F970.roa (hash: Sk5NHBlI9Hm/01FV+Wxh8KFWaVLMatU4jdt2wMLVel4=)
                          3: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: fOItdik6vtxYgosTC2RuuMa1JaHzIaMudzCvyl8gM+0=)
                          4: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
                          5: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1563 (0x61b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Sep 22 22:44:13 2026 GMT
            Not After : Sep 29 22:44:13 2026 GMT
        Subject: CN=6ab304be-4d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:ff:9d:f4:3a:de:79:00:a9:51:8a:05:c4:
                    45:08:83:d7:c6:92:aa:e6:69:29:e8:67:b3:47:83:
                    22:df:a6:51:59:00:9c:cf:62:a2:78:4b:2e:25:78:
                    a9:d5:82:df:b4:0d:b4:86:65:fa:8e:e4:9f:49:64:
                    62:94:cb:d1:c0:1b:ef:d4:de:80:38:af:8a:dd:0d:
                    59:bc:36:b4:22:88:34:c1:8e:c5:69:6a:c5:8f:3b:
                    17:d4:c6:82:07:00:51:03:a1:4c:2e:45:1a:ad:3f:
                    d4:ea:b6:a4:ec:3c:44:e5:bf:91:b0:75:cf:96:59:
                    10:2e:f9:fc:65:36:02:04:b6:63:18:2f:59:96:53:
                    2a:29:4c:70:6c:99:d4:85:c4:39:81:50:71:a5:d6:
                    fe:84:12:f3:2e:ed:da:d7:16:c6:43:4a:9e:99:7d:
                    c5:c2:52:04:b0:c5:c9:c9:da:9c:95:e7:e2:5c:fe:
                    a8:8d:9d:16:7d:e8:29:f9:c8:6b:c6:16:20:32:1f:
                    94:e8:d0:0a:b7:aa:90:a2:1b:cc:6b:2d:55:dc:10:
                    91:1a:28:4e:d2:73:c3:eb:0e:10:be:37:ba:d9:ae:
                    40:d9:b0:59:25:67:45:84:6d:fe:72:d1:6f:fb:38:
                    1b:c0:c6:75:1f:0e:28:66:4b:d9:3f:2f:8e:7a:79:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:B9:26:A3:EA:BA:FA:FE:54:2B:C1:F6:08:8F:F8:90:14:15:AC
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f5:a2:d5:bc:66:a9:fd:0a:ab:34:e6:63:bb:51:66:a7:79:
         01:0c:48:b7:3e:0e:f1:1b:1f:06:64:df:28:bd:46:00:74:67:
         1e:49:02:46:11:19:3a:6c:dd:de:71:3a:99:c3:b0:4b:54:57:
         37:4f:a5:5f:0b:36:49:82:dd:77:f3:5b:d4:e6:69:ef:15:b0:
         e7:26:02:47:7e:3e:9e:6a:de:57:13:32:e5:dd:4f:f6:ee:51:
         42:57:f1:aa:ae:4a:70:f8:2d:63:06:a9:89:c0:ba:4a:96:3e:
         d6:ec:1c:28:f5:32:dd:0e:5e:62:5e:a7:79:f7:32:79:c0:0f:
         63:50:8b:1c:a7:6d:3b:ca:07:d7:7c:fb:9a:ac:44:a3:c9:da:
         f0:c2:33:2a:cd:d4:18:c3:79:2d:66:c2:9e:45:d0:66:39:f4:
         e9:48:34:9f:de:ba:1c:ee:9d:26:0b:0a:fb:e7:2b:b4:2d:3e:
         d7:99:7c:82:e3:19:64:24:70:2c:1b:58:c8:59:76:29:d8:5f:
         28:3b:d4:90:44:84:43:67:79:a3:33:8f:49:83:eb:df:6d:1a:
         a2:3e:41:f7:45:35:04:55:40:b0:ab:df:79:b5:b7:19:39:11:
         bb:d7:75:9e:07:14:c3:da:cc:5c:e4:59:59:fb:cd:cb:01:d9:
         80:6f:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:57:06 2026 by rpki-client