Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          dB+YQclyj5izambN9eyFm6zbboL/VDNpNErR/JZfN6M=
Subject key identifier:   D1:D7:7E:6F:B9:F5:6D:1F:9A:C9:F9:4F:DD:B6:B3:87:78:87:BF:53
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       0291
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          0285
Signing time:             Tue 29 Sep 2026 02:15:20 +0000
Manifest this update:     Tue 29 Sep 2026 02:15:19 +0000
Manifest next update:     Tue 06 Oct 2026 02:15:19 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: MsLTtXck+DVWoYMB0BkqarSTIsXks0CDPZyVsYROLgA=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 02:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Sep 29 02:15:19 2026 GMT
            Not After : Oct  6 02:15:19 2026 GMT
        Subject: CN=6abb1f37-4436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:e6:0e:6e:3d:15:84:5b:a4:d1:ba:2d:f9:
                    6e:05:6f:7a:40:8f:a5:70:7e:19:c5:d9:95:5c:f1:
                    cc:18:59:b3:37:ad:18:bc:25:3d:98:21:c5:30:92:
                    c8:e0:90:cd:f5:a9:cd:71:d4:d7:e5:1a:fa:1f:9c:
                    50:5c:f3:91:34:34:0f:2f:0d:9e:b2:c7:68:cf:fa:
                    34:02:b9:5a:a0:df:d3:f3:ba:ab:09:fd:67:79:08:
                    e3:6a:68:46:40:2e:fe:2c:8a:9e:84:18:23:83:18:
                    82:d6:45:a3:87:e1:07:21:cb:21:00:8d:f6:2f:72:
                    c3:80:d0:5d:5e:91:96:34:66:41:1a:64:e1:08:d3:
                    10:37:7d:74:18:10:5b:9e:38:7a:86:81:72:92:a4:
                    b1:98:33:2b:d0:0a:2d:2a:14:70:8a:46:d7:09:84:
                    78:ef:5d:18:2a:b7:ac:c5:74:ac:13:bb:50:17:ec:
                    e6:1e:14:94:e9:3e:b1:79:4f:6c:81:1a:e7:c3:2f:
                    09:c0:6d:44:e2:7c:df:12:2f:a7:69:50:12:09:84:
                    c6:f5:99:f6:3f:0b:9e:9e:85:b5:cf:e9:11:92:21:
                    e4:4b:a6:ee:5c:d7:e6:03:75:80:64:ac:1f:63:70:
                    b5:ab:58:c6:41:ad:4a:2f:46:68:a6:d3:7b:58:50:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D7:7E:6F:B9:F5:6D:1F:9A:C9:F9:4F:DD:B6:B3:87:78:87:BF:53
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:85:a7:f2:5f:7a:4f:bb:a0:85:ea:b8:44:8d:9f:5e:53:
         24:7b:d8:24:b9:d7:21:54:cd:90:b8:40:09:49:14:3c:4b:f8:
         f4:20:f6:83:bd:b7:65:b1:43:ef:c7:8a:3a:7a:03:36:b0:b6:
         6d:22:9d:cc:5a:0d:c3:e2:b0:bf:64:38:3c:7f:eb:50:56:4a:
         0a:fe:c6:e7:cb:f0:8b:6d:d4:30:bf:f7:ab:cf:f6:b1:e0:85:
         0f:6f:59:bc:8b:42:35:ab:ba:99:4d:84:ca:b0:03:f9:0b:fa:
         0f:f4:a9:de:54:a9:46:7e:9e:27:8b:38:8d:1c:76:21:ec:42:
         5a:e5:92:28:36:7f:26:16:73:84:4a:f3:5e:ef:06:38:d6:88:
         27:e0:10:c6:d8:e9:28:59:44:7f:d5:b2:1c:e4:7c:ed:81:b8:
         ba:3f:c1:13:80:02:d2:9c:d8:69:7e:19:22:67:c7:96:4e:7d:
         82:03:30:2f:63:24:e3:d9:03:26:5d:1c:36:56:28:c3:81:e3:
         bf:93:0e:59:f4:38:90:86:bb:99:3c:b8:92:0a:f2:72:36:91:
         2d:0e:63:90:86:36:e5:45:ea:e5:c3:24:d4:d6:4f:d0:bb:1f:
         9a:40:fb:01:79:dd:d5:04:23:52:c6:f7:7d:58:eb:61:85:cb:
         01:44:56:d8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4
NEExMUQyRjYwHhcNMjYwOTI5MDIxNTE5WhcNMjYxMDA2MDIxNTE5WjAYMRYwFAYD
VQQDEw02YWJiMWYzNy00NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZHmDm49FYRbpNG6LfluBW96QI+lcH4ZxdmVXPHMGFmzN60YvCU9mCHFMJLI
4JDN9anNcdTX5Rr6H5xQXPORNDQPLw2essdoz/o0ArlaoN/T87qrCf1neQjjamhG
QC7+LIqehBgjgxiC1kWjh+EHIcshAI32L3LDgNBdXpGWNGZBGmThCNMQN310GBBb
njh6hoFykqSxmDMr0AotKhRwikbXCYR4710YKresxXSsE7tQF+zmHhSU6T6xeU9s
gRrnwy8JwG1E4nzfEi+naVASCYTG9Zn2PwuenoW1z+kRkiHkS6buXNfmA3WAZKwf
Y3C1q1jGQa1KL0ZoptN7WFDvIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHXfm+5
9W0fmsn5T922s4d4h79TMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG
ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG
eFFfSG1UMUFRUXVFb1IwdlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvIyFp/Jfek+7oIXquESNn15TJHvYJLnXIVTNkLhACUkUPEv49CD2g723ZbFD
78eKOnoDNrC2bSKdzFoNw+Kwv2Q4PH/rUFZKCv7G58vwi23UML/3q8/2seCFD29Z
vItCNau6mU2EyrAD+Qv6D/Sp3lSpRn6eJ4s4jRx2IexCWuWSKDZ/JhZzhErzXu8G
ONaIJ+AQxtjpKFlEf9WyHOR87YG4uj/BE4AC0pzYaX4ZImfHlk59ggMwL2Mk49kD
Jl0cNlYow4Hjv5MOWfQ4kIa7mTy4kgrycjaRLQ5jkIY25UXq5cMk1NZP0LsfmkD7
AXnd1QQjUsb3fVjrYYXLAURW2A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:56:15 2026 by rpki-client