Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File:                     Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier:          gMkm/E3CV0XFpgcM/HfIFVrAA5Hrkp0AyoXdg5nWTQs=
Subject key identifier:   50:68:69:46:B4:9D:53:91:4B:0A:12:10:39:9B:FC:E5:E4:31:9C:C9
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer:       /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number:          A9
Signing time:             Wed 23 Sep 2026 06:55:36 +0000
Manifest this update:     Wed 23 Sep 2026 06:55:35 +0000
Manifest next update:     Wed 30 Sep 2026 06:55:35 +0000
Files and hashes:         1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: ojdie6duKe9264D0sOiUELqeD1oe1LXidLHsGKDZSjo=)
                          2: B3DDEA88828A11F1AF550BB764A30FBC.roa (hash: lF8LdyJYxdygPDY/iay/bIGZwwTX+1F7bIj3qljxFr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
        Validity
            Not Before: Sep 23 06:55:35 2026 GMT
            Not After : Sep 30 06:55:35 2026 GMT
        Subject: CN=6ab377e8-4c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:49:e1:ae:73:16:40:ba:cd:64:07:13:72:
                    28:67:e8:b2:6a:e3:c0:45:e0:0a:fd:7c:02:e4:7a:
                    f2:86:7c:cd:dc:ab:3b:43:2c:b1:7e:d2:1b:76:80:
                    99:26:be:68:2a:78:9c:39:aa:20:ac:bc:1a:c3:ec:
                    f6:81:45:e3:20:44:c8:8f:56:d0:82:49:57:e9:2c:
                    f7:61:a6:a9:7b:3f:16:fa:d9:6d:17:8e:4a:a4:01:
                    cc:a9:c2:4e:6a:0c:ea:fe:47:f8:2c:b4:63:0a:e0:
                    77:62:a5:b6:04:25:20:09:23:6b:96:70:0a:e0:0d:
                    4f:7b:72:bd:2f:12:c1:a0:01:4e:6f:57:29:79:a9:
                    3c:b3:d9:b4:2f:b3:4b:b9:b3:35:45:e6:00:d9:80:
                    d4:39:ef:28:ea:19:54:4b:91:c7:21:f2:a6:fa:73:
                    e1:1b:2c:05:c1:e5:94:c4:ad:0d:aa:69:cc:0c:d6:
                    86:47:50:ef:f4:68:94:e2:02:84:f7:e2:8e:28:04:
                    fb:d7:b3:98:a3:f9:64:0d:bd:77:1c:c3:69:64:15:
                    8d:3a:2a:2b:02:7d:53:fc:6a:9f:b5:6c:2b:d9:cb:
                    00:da:6c:68:fb:96:e2:fb:b6:40:ef:40:b4:19:d0:
                    e7:a2:a8:5a:19:16:83:15:60:2a:a3:34:25:45:a0:
                    8d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:68:69:46:B4:9D:53:91:4B:0A:12:10:39:9B:FC:E5:E4:31:9C:C9
            X509v3 Authority Key Identifier:
                keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:51:94:65:8f:e9:a4:ba:eb:f6:fc:2f:06:dd:cb:4b:6b:cd:
         e5:cb:8e:85:21:cc:96:0e:fc:17:95:f3:10:55:7a:63:d3:47:
         7d:51:7a:ae:bf:d8:82:a6:58:a4:c2:2e:6e:65:5b:f1:f9:7c:
         bc:b2:df:0d:3e:0e:8e:ea:c5:62:2c:ea:fe:86:ef:fd:2e:69:
         0b:94:38:0a:d7:3c:98:5b:28:ed:cd:17:41:67:97:93:d2:f3:
         2c:10:cb:4c:5d:2b:e8:1a:4e:2b:33:69:16:4e:04:f5:92:ef:
         a3:e7:96:cf:d0:c9:23:31:f0:cd:9b:82:b4:0d:a6:50:f2:13:
         83:f2:c0:8d:fe:16:08:6a:ea:f0:27:5f:0a:d8:d6:07:8d:ef:
         c6:04:e6:8a:97:fa:e0:af:30:a9:f6:e3:ae:75:9d:fd:62:1a:
         95:be:16:57:27:60:37:4f:ca:0a:65:e3:aa:cb:4a:3b:9a:81:
         3d:48:86:89:62:5d:73:b2:e2:7a:3c:34:69:6e:70:f2:82:45:
         8f:d3:4a:67:63:ed:3e:11:24:ef:c2:d1:3c:04:10:a7:e6:b2:
         18:d4:49:b5:ad:a4:39:7b:79:86:8d:56:7e:b0:1c:45:93:aa:
         14:d4:a9:b4:00:22:d9:e4:02:cf:06:78:68:62:e7:14:af:9b:
         3f:c0:0d:aa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFGQkUxMTAvBgNVBAUTKDA2MkQzMTNCMDk5QUU4NkIzRjRGRTJFMjBCQjQ1RjhF
ODY1MzYyNzMwHhcNMjYwOTIzMDY1NTM1WhcNMjYwOTMwMDY1NTM1WjAYMRYwFAYD
VQQDEw02YWIzNzdlOC00YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0JhJ4a5zFkC6zWQHE3IoZ+iyauPAReAK/XwC5HryhnzN3Ks7QyyxftIbdoCZ
Jr5oKnicOaogrLwaw+z2gUXjIETIj1bQgklX6Sz3Yaapez8W+tltF45KpAHMqcJO
agzq/kf4LLRjCuB3YqW2BCUgCSNrlnAK4A1Pe3K9LxLBoAFOb1cpeak8s9m0L7NL
ubM1ReYA2YDUOe8o6hlUS5HHIfKm+nPhGywFweWUxK0NqmnMDNaGR1Dv9GiU4gKE
9+KOKAT717OYo/lkDb13HMNpZBWNOiorAn1T/GqftWwr2csA2mxo+5bi+7ZA70C0
GdDnoqhaGRaDFWAqozQlRaCN5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBoaUa0
nVORSwoSEDmb/OXkMZzJMB8GA1UdIwQYMBaAFAYtMTsJmuhrP0/i4gu0X46GU2Jz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUZCRS9CQTAxOERCNEJB
MUUxMUYwQjk4NzM5M0JDNEY5QUUwMi9CaTB4T3dtYTZHc19ULUxpQzdSZmpvWlRZ
bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0JpMHhPd21hNkdzX1QtTGlDN1Jmam9aVFluTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUZCRS9CQTAxOERCNEJBMUUxMUYwQjk4NzM5M0JDNEY5QUUwMi9CaTB4T3dtYTZH
c19ULUxpQzdSZmpvWlRZbk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFlGUZY/ppLrr9vwvBt3LS2vN5cuOhSHMlg78F5XzEFV6Y9NHfVF6rr/YgqZY
pMIubmVb8fl8vLLfDT4OjurFYizq/obv/S5pC5Q4Ctc8mFso7c0XQWeXk9LzLBDL
TF0r6BpOKzNpFk4E9ZLvo+eWz9DJIzHwzZuCtA2mUPITg/LAjf4WCGrq8CdfCtjW
B43vxgTmipf64K8wqfbjrnWd/WIalb4WVydgN0/KCmXjqstKO5qBPUiGiWJdc7Li
ejw0aW5w8oJFj9NKZ2PtPhEk78LRPAQQp+ayGNRJta2kOXt5ho1WfrAcRZOqFNSp
tAAi2eQCzwZ4aGLnFK+bP8ANqg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:17:02 2026 by rpki-client