Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File:                     BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier:          fObQ3U+JYCrNYjPcha5IMYrUUHWh5OrYOyyuCUekBEI=
Subject key identifier:   1E:2C:0F:A5:C5:AD:16:26:C3:AF:9A:9F:DB:19:4A:C9:C9:7E:53:C7
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer:       /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number:          0281
Signing time:             Sat 03 Oct 2026 02:34:36 +0000
Manifest this update:     Sat 03 Oct 2026 02:34:36 +0000
Manifest next update:     Sat 10 Oct 2026 02:34:36 +0000
Files and hashes:         1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: RWHhIE4jtCAbqALFAMFAngCG4qr4j18eKHf8ize597s=)
                          2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=)
                          3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
                          rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
        Validity
            Not Before: Oct  3 02:34:36 2026 GMT
            Not After : Oct 10 02:34:36 2026 GMT
        Subject: CN=6ac069bc-c0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:33:a7:5d:a4:97:51:d7:99:e8:8d:aa:f0:
                    41:0d:42:10:41:75:ce:c1:06:f7:9a:26:2d:55:56:
                    28:9a:87:4d:5a:0d:31:9d:33:1d:b7:c4:6d:f5:9a:
                    ae:0f:5d:3a:ae:77:a1:ae:db:b9:73:e1:b1:6b:07:
                    db:a8:18:6a:64:4f:76:fc:94:3d:d1:1a:f6:db:49:
                    ec:08:f7:34:16:51:4d:ae:d3:76:c4:2e:fe:48:c6:
                    25:6d:d2:2a:ca:3a:36:bd:77:db:77:33:55:60:1c:
                    51:be:ab:88:ed:c1:6d:b8:27:e6:d3:49:07:3d:19:
                    94:ae:a6:10:83:d9:93:1f:2e:c9:3c:fc:2d:b8:d4:
                    44:c6:94:63:8f:9c:a4:c2:2b:c3:74:75:a3:9c:2a:
                    af:c3:77:40:09:83:54:0e:73:1b:11:53:2b:f4:13:
                    d7:4f:dd:7d:bf:ac:15:6e:b8:a6:ff:5d:8a:86:7b:
                    80:8d:ad:b4:06:a6:cb:35:48:98:94:1d:d4:ba:fb:
                    69:2a:be:ae:68:95:1e:e7:4f:bf:78:88:7b:70:25:
                    73:07:cb:ad:13:75:05:8e:93:9c:66:ac:35:f1:58:
                    42:af:1d:cc:89:80:ea:df:5e:be:11:48:d3:ba:26:
                    ef:50:3d:e7:51:43:cb:06:b8:60:41:09:95:d3:d4:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:0F:A5:C5:AD:16:26:C3:AF:9A:9F:DB:19:4A:C9:C9:7E:53:C7
            X509v3 Authority Key Identifier:
                keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fd:05:e1:d0:0e:31:12:c6:c5:fe:31:ec:3a:68:da:fd:9e:
         51:d7:70:37:a7:c5:f5:8b:5b:61:1f:c6:f9:ea:42:d6:2c:a6:
         d7:e8:7c:46:b8:e5:25:57:b3:d3:88:3e:5b:2d:9e:e7:72:17:
         50:04:dc:df:1f:13:49:72:59:8c:7c:f2:4c:b9:54:05:ad:1d:
         04:9d:63:1e:7a:51:0d:62:05:b1:c8:b6:df:55:ca:68:7b:43:
         e4:df:f6:f2:f3:31:7a:9a:a5:f5:72:e0:de:1e:e1:f6:b6:df:
         5a:ee:64:43:30:e3:45:6c:c1:72:d9:2b:25:8d:a1:5d:8b:6c:
         a0:a9:4d:83:74:86:d8:4e:39:f8:17:27:e8:4d:53:90:60:11:
         d0:00:e7:c9:4d:e9:4c:37:67:92:b3:00:e4:0b:79:28:f5:d8:
         51:e9:8a:d6:25:fc:4d:3a:22:44:58:b1:5e:ca:9b:94:33:8b:
         b4:d7:8b:3b:51:b1:1a:ec:c1:8a:2b:eb:d8:1e:c3:04:df:f1:
         a3:b3:f5:b3:b7:ef:61:70:2f:3e:32:10:a7:61:29:e0:ca:5c:
         85:1d:45:65:a6:b5:b9:6b:9e:84:20:f9:79:b8:d4:51:d7:ae:
         b4:26:6c:11:57:a6:73:17:40:c1:3c:54:a6:71:ce:94:90:58:
         be:c1:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:14:02 2026 by rpki-client