Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File:                     BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier:          gGppUkONeH/V8QUA6IduJY9MY02k3EcHN+KDGtAZlVA=
Subject key identifier:   DE:75:20:A6:8D:86:AA:12:6A:93:9E:70:0D:92:2F:D0:43:31:25:32
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer:       /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number:          05CA
Signing time:             Tue 22 Sep 2026 22:43:44 +0000
Manifest this update:     Tue 22 Sep 2026 22:43:44 +0000
Manifest next update:     Tue 29 Sep 2026 22:43:44 +0000
Files and hashes:         1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: /u4zpmPVjL5HVbCh+JhhO55yjQPK4g/d8xNXRi6L7Mk=)
                          2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: iLxN7LT1IEtQtAY80tP96cs82/jh9f03RNlgXMxxJP4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
                          rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 22:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
        Validity
            Not Before: Sep 22 22:43:44 2026 GMT
            Not After : Sep 29 22:43:44 2026 GMT
        Subject: CN=6ab304a0-0915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:c4:dd:38:d2:ff:df:4a:9b:e4:a7:6c:8f:
                    33:44:4f:44:40:da:38:80:ca:f5:46:71:39:6c:0c:
                    22:70:08:a3:72:8e:9b:71:38:a9:c0:27:ed:5c:02:
                    6e:1c:54:41:07:5e:58:de:2b:51:68:ed:65:c7:8e:
                    27:bf:36:a3:ab:4e:40:3d:8a:4f:d4:a4:2d:c6:b7:
                    82:1b:49:c9:42:51:b1:89:8f:f3:0d:33:6c:6f:b4:
                    24:55:11:1c:2f:2f:bf:39:06:1e:3b:dd:de:3b:f9:
                    72:40:68:67:49:6b:f5:0c:62:44:0b:54:df:e6:bb:
                    d4:0b:27:b4:0e:08:1f:5d:36:85:75:3a:7a:79:e5:
                    54:0d:e8:5b:35:c2:bd:03:bb:f2:82:36:e9:9e:d1:
                    e0:17:1f:f4:83:3b:56:ef:e5:41:e6:25:93:1d:d5:
                    cc:7f:98:e0:b0:4c:77:36:e5:5d:3d:fc:ab:91:7b:
                    30:fe:a6:1b:1b:c0:e5:1d:df:45:56:f8:71:a5:90:
                    34:ee:af:f9:df:68:99:42:ec:59:a6:80:9c:a5:55:
                    09:02:ed:ba:4d:3c:ac:ec:d2:bb:9e:9f:7e:d6:d8:
                    b5:35:fe:28:8c:66:cb:2d:a6:77:d9:69:c1:b8:2a:
                    78:85:a0:7b:52:78:e1:d0:16:a0:f0:db:7f:68:db:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:75:20:A6:8D:86:AA:12:6A:93:9E:70:0D:92:2F:D0:43:31:25:32
            X509v3 Authority Key Identifier:
                keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:b5:01:6e:4d:ac:2a:40:a6:b6:90:43:aa:9b:ca:3a:99:
         67:1b:4f:91:50:56:38:d3:4d:54:83:40:65:7f:67:64:e2:c8:
         93:1f:a0:75:e0:8e:c6:8c:af:e8:f6:25:5e:7b:59:4a:96:f4:
         5e:18:56:5c:ee:a8:a8:a3:73:71:58:63:b8:c6:28:a1:57:75:
         ae:be:d9:39:e5:b9:5b:67:cd:cd:87:16:a2:7d:f5:a8:b1:8e:
         3a:17:8d:fa:f8:8b:82:04:51:57:1e:d8:43:94:61:25:aa:ab:
         25:5a:26:c1:7c:58:9a:1f:88:24:ce:da:14:f6:9c:cd:27:e1:
         6a:48:2f:30:b6:f1:34:5c:de:ef:5b:e4:12:2c:f1:f0:dd:a4:
         46:58:0b:55:5c:ec:c6:1e:0c:b2:5a:ff:0a:5d:df:27:8c:4a:
         3f:d6:8b:f4:09:05:81:67:bc:69:a4:83:eb:10:f5:2e:59:ea:
         9b:26:62:41:44:97:e5:ac:92:ab:3f:a0:e2:e6:a8:79:bc:fb:
         45:13:87:6f:5e:68:39:f5:a4:5b:d1:0f:11:8b:c6:29:9a:49:
         00:df:8e:42:d9:1f:df:3d:31:6e:bb:e5:e7:3f:cd:0f:b9:40:
         cb:08:04:01:20:57:dd:29:aa:7d:74:a0:d9:3a:b8:90:c5:de:
         40:66:aa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:03 2026 by rpki-client