Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          DhDvZL0uursw24IDCEvRt3UXGhlg7oYjzqgmNFAHPYg=
Subject key identifier:   CB:9E:14:68:FA:1F:31:86:98:E7:B6:27:EB:F3:8F:64:06:34:3A:2E
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       0581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0577
Signing time:             Sun 20 Sep 2026 23:10:35 +0000
Manifest this update:     Sun 20 Sep 2026 23:10:34 +0000
Manifest next update:     Sun 27 Sep 2026 23:10:34 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: yzv2fl807dLHQzhdOZEGi5hi7rdhcJYXginFDdVftQI=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: 6tY3MA89EpAe/lRiSjB8kjlvtBFDcIlws9T/uGuzWKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Sep 20 23:10:34 2026 GMT
            Not After : Sep 27 23:10:34 2026 GMT
        Subject: CN=6ab067eb-3f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:13:ae:72:67:c0:0d:3c:50:53:cf:18:de:
                    fc:3d:de:25:49:94:8d:cf:2f:e0:b8:5e:9d:66:fe:
                    83:9f:17:e1:6b:52:67:8e:7d:a6:14:fa:5b:e0:5b:
                    ed:6f:14:f7:a2:0a:d3:cd:4d:dc:c6:9a:91:1e:47:
                    4c:89:ec:80:c0:dc:69:bc:06:8f:f9:b6:db:16:21:
                    23:66:e3:10:94:9a:b0:9b:96:b1:72:69:c1:6a:7c:
                    93:a1:a2:13:36:94:89:90:99:ba:ed:b7:7b:ce:70:
                    29:1f:14:4b:66:3b:22:82:c9:86:16:38:65:b9:86:
                    6d:cd:63:ce:0a:ed:b4:b0:d0:c4:c9:3d:5e:72:6f:
                    0a:37:f6:72:f1:a9:9b:87:0e:3b:41:84:e8:8a:2e:
                    43:41:2a:60:08:10:bd:4f:de:91:ae:79:5e:92:d5:
                    ef:e8:24:95:4f:0d:de:6b:ef:10:2d:f9:80:a7:6d:
                    f5:9a:0c:06:05:5d:82:57:ca:93:d1:89:87:e8:53:
                    14:32:33:9c:fd:88:70:1e:1b:fc:fa:c0:71:1a:cc:
                    7f:fd:fe:62:db:c7:43:c2:b9:6d:5f:0c:ad:09:b5:
                    73:0a:a9:8d:4a:ce:ea:05:24:25:74:46:a0:46:2c:
                    09:52:8e:d7:eb:c6:b8:f0:da:d2:24:ac:53:60:45:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9E:14:68:FA:1F:31:86:98:E7:B6:27:EB:F3:8F:64:06:34:3A:2E
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:cf:50:c0:be:39:41:bf:a8:1a:e4:e0:ef:fd:77:d5:ed:
         7d:dd:c8:96:32:2d:09:40:95:94:47:1b:8c:ff:39:b9:38:68:
         a4:4c:f7:c0:2f:00:6d:6b:42:c2:7a:36:cc:d3:aa:17:61:b3:
         aa:05:45:de:9e:70:d3:4d:bb:ab:0e:32:da:a5:d0:50:ed:f5:
         14:67:6a:b7:53:55:11:4c:1b:cc:44:eb:04:27:f4:3d:ed:22:
         62:b8:e8:49:b0:66:ee:9b:50:82:f3:dd:08:19:40:7b:87:07:
         2f:a3:c0:e0:a9:22:7e:df:e5:04:b6:b4:6b:a7:82:d8:47:23:
         8f:b4:47:be:78:0f:55:14:8b:93:7e:82:d3:41:75:44:9f:22:
         ac:5a:77:64:f4:c7:8c:8b:55:48:74:02:e8:79:63:28:61:ce:
         89:54:4f:93:27:e8:1d:d3:4d:f6:b3:fa:df:b9:c0:b3:e8:88:
         59:a1:36:0e:ce:68:73:4c:91:33:5c:bb:44:de:62:d4:0e:51:
         d8:bf:55:fd:14:76:4d:df:c1:89:f8:2f:17:4d:01:ba:c4:7e:
         71:ce:16:d3:2d:30:c4:27:4b:48:5a:1c:74:90:e8:c4:ee:e5:
         f7:ed:f7:b4:5c:77:c6:46:83:38:4c:c8:f8:19:37:31:c7:e3:
         1b:20:f2:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG
OUExNDJFRjkwHhcNMjYwOTIwMjMxMDM0WhcNMjYwOTI3MjMxMDM0WjAYMRYwFAYD
VQQDEw02YWIwNjdlYi0zZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoCkTrnJnwA08UFPPGN78Pd4lSZSNzy/guF6dZv6Dnxfha1Jnjn2mFPpb4Fvt
bxT3ogrTzU3cxpqRHkdMieyAwNxpvAaP+bbbFiEjZuMQlJqwm5axcmnBanyToaIT
NpSJkJm67bd7znApHxRLZjsigsmGFjhluYZtzWPOCu20sNDEyT1ecm8KN/Zy8amb
hw47QYToii5DQSpgCBC9T96RrnlektXv6CSVTw3ea+8QLfmAp231mgwGBV2CV8qT
0YmH6FMUMjOc/YhwHhv8+sBxGsx//f5i28dDwrltXwytCbVzCqmNSs7qBSQldEag
RiwJUo7X68a48NrSJKxTYEWpYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMueFGj6
HzGGmOe2J+vzj2QGNDouMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2
OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2
Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhR/PUMC+OUG/qBrk4O/9d9Xtfd3IljItCUCVlEcbjP85uThopEz3wC8AbWtC
wno2zNOqF2GzqgVF3p5w0027qw4y2qXQUO31FGdqt1NVEUwbzETrBCf0Pe0iYrjo
SbBm7ptQgvPdCBlAe4cHL6PA4Kkift/lBLa0a6eC2Ecjj7RHvngPVRSLk36C00F1
RJ8irFp3ZPTHjItVSHQC6HljKGHOiVRPkyfoHdNN9rP637nAs+iIWaE2Ds5oc0yR
M1y7RN5i1A5R2L9V/RR2Td/BifgvF00BusR+cc4W0y0wxCdLSFocdJDoxO7l9+33
tFx3xkaDOEzI+Bk3McfjGyDyiQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:32:55 2026 by rpki-client