Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File:                     bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier:          mm3VLhwTixMK1YevVEgxOB6IueUaebBvGKZE3bhBqX4=
Subject key identifier:   F8:C0:5C:54:7F:A4:30:AC:09:B0:10:36:DB:A2:CE:7E:1C:88:C0:8F
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer:       /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial:       19B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number:          199E
Signing time:             Fri 25 Sep 2026 02:55:12 +0000
Manifest this update:     Fri 25 Sep 2026 02:55:12 +0000
Manifest next update:     Fri 02 Oct 2026 02:55:12 +0000
Files and hashes:         1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: Yl6vVx6xNTmosHZmgZ72rIDl5NO/PR7Y0A92AFKVv9o=)
                          2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: d+TSvpxly3k8El4+pV6d2wdav1wdXrK2Z6zZMFeDKxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
                          rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6583 (0x19b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
        Validity
            Not Before: Sep 25 02:55:12 2026 GMT
            Not After : Oct  2 02:55:12 2026 GMT
        Subject: CN=6ab5e290-94c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:ad:da:a1:3f:c0:67:ab:6a:82:e4:02:25:
                    da:9e:d9:0d:fb:18:77:f5:18:6b:f7:4e:99:2c:d8:
                    3b:79:6a:bd:ed:d9:23:13:6a:67:a9:96:56:61:3e:
                    33:79:b0:ce:a9:4c:33:4d:7a:9b:1d:5d:4f:80:95:
                    9d:9c:ca:fc:3d:cf:41:8b:0a:4b:17:06:fa:ae:23:
                    12:99:a6:34:ef:bd:f6:22:0f:7b:68:89:49:74:b4:
                    88:81:7a:6d:de:0a:6f:c9:3b:13:13:39:67:56:58:
                    b6:66:7c:b5:ae:bd:c4:b2:da:74:82:8e:54:02:9f:
                    ee:f1:fd:ae:9a:be:93:c0:59:07:17:c6:d1:ff:54:
                    89:a4:39:63:35:21:5a:2c:1b:d5:c7:3b:ab:6d:36:
                    ff:63:d4:44:ec:f2:9d:3c:65:64:70:f5:a8:96:7a:
                    b7:54:b8:f7:e7:10:ad:6c:01:2b:f8:06:80:b2:b6:
                    a0:69:49:6d:c1:07:46:af:aa:be:30:bb:86:55:51:
                    29:d1:a2:7d:a9:30:bf:93:7e:3e:d3:de:e5:48:42:
                    0e:3a:6a:e4:0b:60:2e:42:80:22:32:f0:c1:9e:4e:
                    c6:63:d3:05:4d:7a:79:45:39:df:c8:6b:51:d7:31:
                    b6:e1:a3:39:e8:68:01:8c:df:53:cc:b6:3b:e2:c8:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C0:5C:54:7F:A4:30:AC:09:B0:10:36:DB:A2:CE:7E:1C:88:C0:8F
            X509v3 Authority Key Identifier:
                keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:35:d7:2c:1b:3e:e0:e8:4e:ad:d7:b8:f8:33:5f:44:08:
         12:fa:ec:9b:f0:98:c3:d5:9f:e9:85:fc:35:fe:83:b9:38:0f:
         41:4f:8c:b5:d4:d9:24:5a:12:1d:02:3f:63:30:1f:5a:eb:87:
         d4:ad:e5:81:e9:56:df:42:80:70:d7:04:e4:b7:97:36:82:ee:
         71:1a:78:98:df:82:1a:cb:46:98:80:62:92:5e:74:c5:c5:79:
         92:4d:14:e8:40:e5:39:87:56:1f:0c:f4:4d:36:f9:93:2c:0d:
         4e:71:ab:d1:d4:36:c5:8f:85:1f:c8:1e:c2:ca:82:0f:f0:8c:
         e4:60:b1:42:c9:c8:88:9b:16:ba:bc:79:a0:67:66:7f:f7:c0:
         ce:43:07:30:1b:4e:bf:ce:f7:fe:82:06:4f:59:6c:7c:33:fd:
         cd:71:08:a0:a8:83:5a:b1:e0:03:bd:29:7d:a9:c9:cc:f1:99:
         d4:d3:f3:f0:68:5e:07:bb:bc:13:8a:7b:a0:3b:6b:54:1c:c1:
         bd:d7:c1:98:cb:78:85:a6:66:aa:be:01:59:55:11:fb:72:fc:
         94:d3:01:5d:94:fa:b3:d3:14:68:dd:51:53:10:2c:7f:67:65:
         b1:f8:54:d0:c6:bb:33:3c:92:ad:88:de:3b:a8:f8:da:3f:36:
         98:ef:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:55:29 2026 by rpki-client