Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft
File:                     BtTD6uQMf9AlUslwVVe7ElIwSxM.mft (raw, json)
Hash identifier:          Vbfb2wYOumiBvoY8sGQG2Sv6ljOYDF5cHik9DcuRRRQ=
Subject key identifier:   FB:5C:4F:1F:9F:5D:9E:48:5A:85:BF:00:09:C0:8C:20:44:CB:07:4B
Authority key identifier: 06:D4:C3:EA:E4:0C:7F:D0:25:52:C9:70:55:57:BB:12:52:30:4B:13
Certificate issuer:       /CN=A9141292/serialNumber=06D4C3EAE40C7FD02552C9705557BB1252304B13
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BtTD6uQMf9AlUslwVVe7ElIwSxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft
Manifest number:          15
Signing time:             Mon 27 Jul 2026 11:25:53 +0000
Manifest this update:     Mon 27 Jul 2026 11:25:53 +0000
Manifest next update:     Mon 03 Aug 2026 11:25:53 +0000
Files and hashes:         1: BtTD6uQMf9AlUslwVVe7ElIwSxM.crl (hash: bopi4DQI+NP6QS8eYjGXWxvoOv1F82SmaE0zKhY2egE=)
                          2: AFAA70006C4E11F19C8D01206747A888.roa (hash: detNCGua+LFGQ93jwIwmDG3FnbF4x476o7ZvEGWi28I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.crl
                          rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BtTD6uQMf9AlUslwVVe7ElIwSxM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141292, serialNumber=06D4C3EAE40C7FD02552C9705557BB1252304B13
        Validity
            Not Before: Jul 27 11:25:53 2026 GMT
            Not After : Aug  3 11:25:53 2026 GMT
        Subject: CN=6a674041-0a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:c7:95:47:99:90:0e:a6:d5:1c:8c:90:e4:
                    80:01:e1:a2:ab:de:47:18:90:1a:70:0d:72:5f:2d:
                    ae:9a:cf:ed:41:b6:70:4f:76:5d:a1:6b:bc:f3:d3:
                    7a:6a:7a:7e:e5:17:9f:b7:a9:b4:8a:f4:96:64:a1:
                    b3:24:e4:06:da:ff:79:63:52:0f:cb:75:19:51:38:
                    61:de:58:04:79:f7:a1:f7:5b:a8:5d:3a:5d:47:d9:
                    6d:07:a8:72:56:f7:4a:68:2e:4b:e5:aa:67:8f:17:
                    4e:43:5d:98:cb:75:9a:72:f0:51:aa:19:14:10:dd:
                    0b:ad:62:79:9b:e9:8c:d7:a1:17:65:22:39:40:24:
                    1e:4d:6d:0b:1a:69:91:66:6f:1e:c2:84:3b:71:c6:
                    f6:82:56:4a:64:65:62:25:45:5f:e4:a2:16:2c:97:
                    ef:8e:53:0d:a7:8e:f5:67:69:3c:cc:6b:de:ee:68:
                    39:b5:ba:8a:49:8d:90:09:cc:ee:88:4f:51:d9:38:
                    56:f1:0a:d2:4c:cb:f1:fb:35:26:d9:b9:e3:53:c3:
                    21:46:d8:5a:94:c2:2c:df:ca:7a:05:49:72:cf:4a:
                    f9:90:d4:65:79:3c:45:ba:1f:ad:05:9f:0c:c7:2b:
                    52:67:b1:db:5b:93:61:53:ab:e1:9a:fe:0d:7a:c6:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5C:4F:1F:9F:5D:9E:48:5A:85:BF:00:09:C0:8C:20:44:CB:07:4B
            X509v3 Authority Key Identifier:
                keyid:06:D4:C3:EA:E4:0C:7F:D0:25:52:C9:70:55:57:BB:12:52:30:4B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BtTD6uQMf9AlUslwVVe7ElIwSxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141292/FA8C3D766C4C11F1A8AAF10C6647A888/BtTD6uQMf9AlUslwVVe7ElIwSxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:2d:39:cc:2b:ce:fa:8d:d1:a5:5c:4d:41:02:2c:8c:ba:
         d2:f9:19:59:30:cb:88:c9:ac:34:e1:a9:b8:2c:23:1f:5c:90:
         48:6c:e9:b4:bc:c5:2e:8d:fe:76:a7:09:fe:0f:2d:d8:ee:6c:
         78:67:c5:71:4f:0f:1e:07:2f:84:41:22:b0:b5:6f:0e:9f:ff:
         11:91:f6:8a:a3:59:bb:9a:56:13:cb:df:a7:c6:4d:7e:2d:42:
         e2:e5:ae:11:12:63:91:10:3a:4c:47:69:2a:d9:86:3b:f5:4a:
         f8:a0:cf:3b:52:e5:ae:fe:da:5c:45:20:4c:cd:0f:b3:10:1f:
         97:50:a7:35:d0:0e:5a:32:82:3e:30:07:96:aa:bc:e5:fa:07:
         ab:c1:66:df:5e:ae:48:f2:48:92:9a:f5:23:50:33:16:19:e5:
         f5:c0:cc:b2:cf:3f:3a:c7:e9:29:e3:aa:03:a8:f7:70:49:87:
         29:1d:10:8b:04:15:f0:8d:24:ce:47:38:70:4b:78:85:51:fa:
         13:49:24:04:e6:52:61:7c:39:e3:d0:4f:95:fe:46:fe:02:15:
         4a:f1:a7:82:6a:62:76:55:f7:23:7d:1b:02:d1:46:73:61:c4:
         f3:54:07:51:9b:3b:52:12:df:ff:5f:b6:6c:01:ec:e5:13:9c:
         0f:2d:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:46:31 2026 by rpki-client