Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
File:                     bjpCzSsjnaPmWO-5fq0VsObt2qE.mft (raw, json)
Hash identifier:          QtHeLcJcF0z+WGIpRNyijDifIvakT1Wo0sk+zdw1Gz0=
Subject key identifier:   61:D9:EE:64:74:27:C8:86:A2:30:F4:DA:82:29:78:3B:43:A7:14:65
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Certificate issuer:       /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial:       0482
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
Manifest number:          0479
Signing time:             Tue 13 Oct 2026 00:13:47 +0000
Manifest this update:     Tue 13 Oct 2026 00:13:47 +0000
Manifest next update:     Tue 20 Oct 2026 00:13:47 +0000
Files and hashes:         1: bjpCzSsjnaPmWO-5fq0VsObt2qE.crl (hash: c6DMdDoLsOV/7FpFQB35roVIHkVcRAbPrEt72Byr9As=)
                          2: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (hash: rD7xbaxDGtxMLLPNlo5JYzCCoS0tSS52lqqObFtwgek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
                          rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 00:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1154 (0x482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
        Validity
            Not Before: Oct 13 00:13:47 2026 GMT
            Not After : Oct 20 00:13:47 2026 GMT
        Subject: CN=6acd77bb-64cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:86:ad:80:03:9f:82:23:df:8f:ce:ed:04:
                    06:f0:37:c0:b0:29:39:60:d8:27:a0:59:f0:1a:fe:
                    ae:4b:0f:4c:15:c3:73:db:3c:68:a1:09:f7:ed:94:
                    c4:6c:c9:78:5e:79:29:35:5e:77:7f:f5:8a:ee:85:
                    32:dc:41:07:35:ed:63:25:07:0d:86:5c:a3:b7:09:
                    e6:f8:5f:d0:e0:78:ad:40:6e:8e:bf:df:35:cf:73:
                    b5:85:66:f5:37:c3:36:4a:f7:f8:7c:ed:e4:04:05:
                    c5:ed:7b:7b:27:16:20:6e:e3:71:d6:04:68:b6:47:
                    f7:a2:5d:d5:12:a0:09:f4:cb:b3:4a:e8:1e:77:a3:
                    74:08:f0:db:d2:56:7b:8c:ac:2d:51:90:cb:e0:17:
                    96:5f:5d:04:5a:ed:00:08:36:c3:d7:7d:e4:cf:72:
                    74:20:71:a9:44:e0:e0:52:60:ae:19:ee:ba:27:98:
                    31:3a:09:81:38:50:03:9b:29:e7:f5:23:42:4d:38:
                    31:c3:37:0e:98:62:90:10:d2:c6:3a:0a:20:24:45:
                    d4:93:30:61:4e:48:a7:b5:bc:62:c6:fe:1e:49:90:
                    78:90:12:8a:9b:65:e0:01:17:62:d2:cc:f0:8d:76:
                    d5:6f:ca:23:ef:f2:cb:c7:ac:a5:d6:20:aa:57:e0:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:EE:64:74:27:C8:86:A2:30:F4:DA:82:29:78:3B:43:A7:14:65
            X509v3 Authority Key Identifier:
                keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d1:80:f4:19:81:42:48:c8:c3:f6:b0:dc:1a:c0:12:ae:eb:
         ce:fe:61:06:d7:8c:94:87:0b:8d:1d:85:b8:6b:a5:f2:c1:82:
         4d:e8:e6:25:2b:df:cb:47:e8:d5:d1:25:52:fb:a4:35:6f:7b:
         b8:36:30:f5:77:6f:44:40:56:07:36:0a:bd:6a:a9:31:54:43:
         4a:20:12:71:5a:8f:9d:10:7e:57:f3:bb:f0:5c:af:bc:2b:0c:
         6b:13:bc:ca:41:73:24:4e:52:cd:74:e0:c9:a1:57:94:41:01:
         db:9c:93:a8:39:bd:01:0e:7d:70:92:bd:c8:3b:84:90:73:29:
         76:1c:b2:02:61:3d:d9:30:39:78:18:0e:67:22:a1:ab:1a:92:
         99:d1:d4:7c:1c:a4:05:77:ac:e5:50:bc:38:2d:b7:36:fe:63:
         f0:af:3a:ec:43:9c:a2:f1:d0:04:a1:24:4e:35:c5:13:62:98:
         07:69:ab:7c:8f:0e:fc:6f:e7:1c:32:c9:de:5f:90:90:24:80:
         fc:ca:00:41:34:e1:38:cc:fd:98:ef:d5:b4:0e:b8:bd:38:cc:
         b0:43:e6:e2:85:78:26:59:43:a2:6e:4b:50:d3:af:dd:5d:98:
         e6:8a:2f:26:98:e5:09:67:28:e9:72:bc:e8:30:de:52:87:bc:
         d1:09:c5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:02:48 2026 by rpki-client