Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          FZwoRJwKRpPsGdk/fM1K5Pn4WZvcCfz+YuhVw0iBk5U=
Subject key identifier:   14:34:84:BC:51:E0:F1:FE:FF:6E:5E:19:33:5B:31:F2:7E:2B:91:0A
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       061A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          05E8
Signing time:             Sun 20 Sep 2026 22:54:45 +0000
Manifest this update:     Sun 20 Sep 2026 22:54:44 +0000
Manifest next update:     Sun 27 Sep 2026 22:54:44 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: hDje1+zcGNmn7zdl3zg0O1RK1KuoXDdLLaT8HsEFAbA=)
                          2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
                          3: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: fOItdik6vtxYgosTC2RuuMa1JaHzIaMudzCvyl8gM+0=)
                          4: F10B6BDAB15E11F19966FC595911F970.roa (hash: Sk5NHBlI9Hm/01FV+Wxh8KFWaVLMatU4jdt2wMLVel4=)
                          5: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 22:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1562 (0x61a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Sep 20 22:54:44 2026 GMT
            Not After : Sep 27 22:54:44 2026 GMT
        Subject: CN=6ab06434-773d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:6d:d9:b5:66:1f:43:70:45:63:31:59:aa:
                    43:6f:de:8c:75:bd:ad:b1:e9:e0:bf:47:ee:3d:40:
                    12:9f:13:60:77:6a:25:63:b7:81:e4:1d:4f:3a:e7:
                    7e:c6:c7:ea:04:97:36:95:d2:24:1a:b1:db:9b:d6:
                    37:59:66:b5:ec:16:f5:23:69:25:fb:76:2d:43:ce:
                    45:df:60:9a:e3:2e:74:50:3f:61:5f:94:9c:00:90:
                    ef:90:6f:f3:82:f3:e2:2d:83:6e:ba:51:04:fc:14:
                    66:84:08:28:2a:f5:3e:dc:98:ae:28:85:89:66:d5:
                    fa:40:05:1b:05:21:b2:78:b3:a4:a7:47:bb:17:03:
                    aa:d0:79:70:3f:67:7e:72:c1:2b:6f:15:cf:e1:36:
                    0e:8b:05:b3:a6:8e:32:77:86:21:fc:14:be:20:c4:
                    c2:c9:d7:80:b8:f9:50:b0:93:9b:c4:e7:bb:14:a5:
                    ed:82:1f:18:75:95:82:0f:d3:c2:4e:29:a3:40:b8:
                    c0:f7:c7:17:a1:9b:5c:e9:68:1d:3d:cd:f7:3e:2c:
                    3b:2c:35:2f:c1:92:fb:3a:7e:d8:26:70:f3:20:ea:
                    8a:fd:1c:08:94:cd:31:43:c3:a3:cb:b3:0a:60:05:
                    f1:92:68:08:16:ac:a3:df:5e:bd:ed:ba:eb:4e:9f:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:34:84:BC:51:E0:F1:FE:FF:6E:5E:19:33:5B:31:F2:7E:2B:91:0A
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:9b:fd:5b:e1:83:fd:dd:8d:e9:29:df:18:74:a1:fa:43:
         4b:8c:be:cd:b9:6d:98:b4:dd:e6:e8:54:87:ce:e3:0f:0e:25:
         de:d3:11:97:a4:f4:a2:dc:21:d5:39:b8:37:fa:a9:95:28:94:
         c6:86:e2:79:70:0e:7d:a5:2c:6e:ac:17:5a:32:18:60:ad:c6:
         d0:34:d7:67:b5:77:ca:48:9b:1a:1e:00:d7:d6:32:d7:5b:c2:
         db:cd:74:dc:08:26:37:bb:1b:a0:bf:0a:92:64:bb:64:0e:31:
         bf:df:56:7f:c4:ea:8e:97:06:86:ea:7c:02:24:92:16:df:43:
         5d:c4:99:bb:dd:ff:e3:fc:6d:f2:b9:70:28:8f:d8:fc:b8:96:
         f5:de:1e:7f:48:cd:6b:79:4a:e8:0a:ca:f6:99:74:b6:72:c4:
         82:72:5a:2f:7b:4c:53:50:a0:65:06:ed:82:32:64:84:2b:69:
         cf:ef:e1:d1:df:d3:2b:c4:15:59:63:22:12:df:da:a0:dc:50:
         42:86:e8:00:14:46:e6:ab:a4:f3:fa:f5:45:f3:b6:b3:cc:46:
         a4:7a:54:a3:78:a0:06:8e:11:6f:c0:0c:69:a9:86:cd:61:ab:
         72:3e:4c:21:a3:c3:a7:c3:3b:c2:f3:0d:0d:cf:2c:20:cf:12:
         74:e4:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:27:04 2026 by rpki-client