Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          S/GdBOICdMlT4HjmFOV8O1VYBq0pnCj19d6eMCzdyS4=
Subject key identifier:   56:D4:A4:0A:8A:61:A0:71:6B:D0:48:DF:84:58:B1:E1:4C:46:3D:BC
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          0283
Signing time:             Fri 25 Sep 2026 01:54:11 +0000
Manifest this update:     Fri 25 Sep 2026 01:54:10 +0000
Manifest next update:     Fri 02 Oct 2026 01:54:10 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: WIQKzOent4JZwwR+opztX2WNSXgGOdsIoA0XY1d0a5k=)
                          2: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
                          3: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 01:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Sep 25 01:54:10 2026 GMT
            Not After : Oct  2 01:54:10 2026 GMT
        Subject: CN=6ab5d442-28a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:79:be:5a:b2:7d:85:c1:27:b7:55:3e:39:
                    43:b5:26:f3:db:d3:bc:f7:69:20:7d:68:3d:77:11:
                    46:3a:10:43:b1:f3:42:dd:ce:b9:37:ce:55:85:37:
                    97:c9:20:44:f3:4f:f5:01:f0:ae:4b:c5:41:81:eb:
                    6a:4c:29:0f:2a:cc:7c:85:eb:ad:cb:a0:00:92:53:
                    1d:f4:d7:a4:34:23:c4:ac:54:c4:57:9d:51:34:6b:
                    db:f1:f6:63:a6:ae:3b:a7:61:ee:f3:ae:a0:ea:f2:
                    b6:1f:ae:3d:ab:7b:3f:c0:62:fd:78:b3:de:e4:5a:
                    74:4a:78:10:5a:e5:52:53:49:56:73:80:24:b7:0a:
                    c5:70:22:ae:5a:47:ae:af:00:a4:62:8b:d5:ba:c9:
                    e4:fb:39:2b:02:c7:01:6c:f3:6b:3c:22:91:de:77:
                    5a:4d:ae:9e:b4:2b:d1:39:bf:03:12:c2:30:aa:20:
                    39:93:9c:73:21:56:29:3e:71:d2:4f:89:f0:41:0f:
                    09:61:1b:15:db:ed:45:c8:6f:84:77:87:4c:58:ee:
                    40:9b:ad:19:fc:e8:d3:17:6f:28:b8:08:ac:4d:8e:
                    1a:1e:13:63:36:76:3f:54:fd:03:33:b9:8a:71:be:
                    48:fd:65:b1:9e:75:4d:66:88:f6:67:e7:ec:45:8c:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D4:A4:0A:8A:61:A0:71:6B:D0:48:DF:84:58:B1:E1:4C:46:3D:BC
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bd:89:aa:77:17:34:d4:f0:7f:e3:03:4d:2d:40:f5:1e:42:
         31:12:c7:17:71:55:da:9c:98:d4:a2:0f:d5:0a:bd:fd:ba:26:
         fe:f6:cd:68:b2:0b:c0:29:e7:38:02:cf:94:69:9c:62:db:20:
         de:eb:34:3b:4a:de:68:e7:5c:c6:56:94:88:e4:92:ba:ef:a7:
         e3:e4:e9:35:f7:6b:d4:57:30:99:c6:8e:66:65:a0:2f:d7:af:
         b6:49:63:4a:4d:75:1d:a1:98:c6:de:6c:01:3f:d1:be:cc:f9:
         be:29:8e:54:c1:01:9d:32:e8:f6:5c:25:38:d9:1f:a5:5f:c0:
         3f:e9:f7:3b:a2:fb:eb:44:45:50:79:1a:77:b2:18:b7:69:b1:
         0f:0b:35:dd:0b:73:68:15:f4:cd:1b:fd:6e:15:50:26:b3:38:
         46:52:2d:6e:9c:24:17:55:b5:61:96:5b:3f:2c:f8:ba:34:c2:
         77:53:d0:06:64:b5:33:14:8b:c0:fe:a7:14:b1:e8:38:5f:52:
         40:fa:31:75:8c:fc:c2:28:56:70:97:d9:b6:2d:f3:d5:77:5d:
         58:7a:04:16:a9:06:40:77:3e:68:4e:c5:01:f2:80:24:f6:66:
         c3:93:7b:74:4f:8e:7e:08:a8:ee:e2:ee:8f:03:b1:54:0e:d2:
         6d:f7:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:58:15 2026 by rpki-client