Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File:                     Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier:          vapt6hckYMfEn9F328bHF62Zy8vfVpnEEG/n71qFycY=
Subject key identifier:   A8:65:16:B1:C1:35:72:87:B9:B6:03:E5:8D:A3:A4:2E:B0:E8:BE:B9
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number:          021D
Signing time:             Fri 25 Sep 2026 03:00:11 +0000
Manifest this update:     Fri 25 Sep 2026 03:00:11 +0000
Manifest next update:     Fri 02 Oct 2026 03:00:11 +0000
Files and hashes:         1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: o9umP5wnq1foLyE8nqwzqhHaNeUEtSS2gYSAbsd30z4=)
                          2: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
                          3: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Sep 25 03:00:11 2026 GMT
            Not After : Oct  2 03:00:11 2026 GMT
        Subject: CN=6ab5e3bb-7630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:f9:7c:2d:59:41:6a:78:52:cf:aa:47:fd:
                    90:a0:d8:49:a0:21:a1:52:e7:35:21:28:89:0b:cc:
                    08:f2:c7:6d:a7:4b:08:17:e8:94:35:61:b2:76:f0:
                    36:d0:c1:55:3f:11:14:f4:d4:48:8e:97:59:ae:e2:
                    d8:bd:38:a8:6a:55:f8:30:c6:d8:a6:78:27:ad:ee:
                    1b:73:70:80:43:05:1a:d2:36:05:a4:68:9b:c8:61:
                    5e:f5:de:b4:a8:3d:f2:4a:f6:5e:77:38:b9:f3:d9:
                    f1:f6:ce:65:93:52:6a:75:f8:2b:5a:1a:d0:40:66:
                    38:13:9c:15:20:03:b8:3e:27:66:c6:68:f2:c4:61:
                    de:3b:27:30:60:fc:1d:e4:16:74:0f:17:78:c9:d1:
                    8b:a8:bf:a6:ff:dd:65:3c:17:e4:35:30:b3:20:fa:
                    f6:54:c8:78:1d:a5:ae:6a:6f:22:91:69:9f:d4:33:
                    b8:bc:67:22:40:00:ea:e5:76:89:82:1d:37:ec:2b:
                    38:64:77:e0:c5:7f:7b:e5:44:2e:5e:24:ba:9e:9f:
                    13:85:d3:27:07:cf:c0:a4:b7:fe:0f:66:2b:7b:10:
                    43:bf:46:32:06:1e:05:dc:0d:07:41:57:45:61:e9:
                    83:57:31:0f:2b:be:8c:59:93:40:2b:4d:20:00:71:
                    39:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:65:16:B1:C1:35:72:87:B9:B6:03:E5:8D:A3:A4:2E:B0:E8:BE:B9
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f3:d9:48:7b:17:95:1c:44:31:05:d1:a0:b8:37:ee:f9:17:
         0c:77:e5:64:8a:2b:14:07:90:47:dc:09:5c:79:12:d3:a3:ac:
         c9:80:d8:10:6c:a5:0f:a8:c0:60:f7:2f:b0:e7:60:96:4c:d8:
         cb:6e:71:fc:5a:46:e1:16:d8:75:fd:b7:71:c9:49:d7:f1:d3:
         1c:ab:bc:77:cc:81:a8:f2:8a:89:c2:cb:e3:59:95:fc:af:46:
         f9:d9:2e:41:ae:52:02:80:24:65:bc:b5:d8:13:04:00:9c:ff:
         81:39:bc:2b:82:61:9d:f5:9c:94:dc:51:de:33:f1:4d:87:ba:
         40:99:20:99:c6:b9:3c:d6:9c:8a:88:42:78:a0:12:88:2b:09:
         5c:21:5c:c8:d0:cf:53:fb:03:cb:44:30:2f:38:bd:7f:28:f2:
         0e:69:7f:f6:0c:a9:07:39:96:31:1e:a3:a5:c2:dc:26:fc:f5:
         e8:c6:a4:f6:12:0c:87:45:32:07:29:cf:81:0d:52:d1:53:f8:
         ea:1d:b8:59:ae:e0:aa:d2:31:f0:65:2a:c9:79:30:3d:54:8b:
         57:a9:8c:bd:5f:65:0a:82:f9:d5:b1:96:20:b6:24:d4:ad:59:
         ed:26:3d:92:8d:4c:63:4f:2b:d9:d0:10:2a:97:81:de:0e:75:
         36:8f:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:07:23 2026 by rpki-client