Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          ajmfrrwvNK9a/x/kQejfyc4uWuF2UnXNpy17JmsSFJc=
Subject key identifier:   22:B6:70:B2:16:60:70:86:84:E1:0C:AB:0B:78:F0:E6:72:97:6E:52
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       063C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          0606
Signing time:             Sat 14 Nov 2026 22:46:56 +0000
Manifest this update:     Sat 14 Nov 2026 22:46:56 +0000
Manifest next update:     Sat 21 Nov 2026 22:46:56 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 9nQN5zFTLndk9E/0tZX/R6axbIhaFz0wmMhyUZM/874=)
                          2: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: rA4550QgDxB12iJcwwC+xAskKXyzIKLJQxU36lEB6G0=)
                          3: F10B6BDAB15E11F19966FC595911F970.roa (hash: 8JLs4d5GjasBrFVrD+EYyHzQ25YU0nfjYQMQ8txKbX4=)
                          4: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: MwieAUsYm3NV4PWTPdvRH5f3142GqXPuPIPtCzMFaqg=)
                          5: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: nXqCOiL/o9G8uSU94JvYraUG3Zy6YpcDAXzJdcb5rWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 22:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Nov 14 22:46:56 2026 GMT
            Not After : Nov 21 22:46:56 2026 GMT
        Subject: CN=6af8e4e0-5527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:68:3c:9b:86:8e:5b:b8:32:3f:56:42:ee:
                    d7:35:3d:5e:90:4f:89:54:82:cb:67:88:18:b6:30:
                    b3:b8:e8:7b:9f:9b:b9:27:bb:64:c4:2d:5b:92:d6:
                    f0:49:ff:9c:be:4b:10:0d:b8:db:76:ee:5f:01:df:
                    c8:54:b2:86:8a:ba:2f:02:08:21:88:d5:7a:65:c9:
                    59:89:5d:e1:c7:c4:7e:8a:63:3b:29:22:1f:fe:02:
                    54:66:f3:a7:40:8b:c9:de:4f:9f:4e:0c:75:29:8c:
                    d0:21:ba:34:67:37:49:e5:05:d3:b6:17:69:64:c0:
                    34:a2:0e:a4:4b:13:d5:f5:cd:4c:12:77:9f:9c:3c:
                    37:65:cc:ac:2a:2c:a8:b4:4c:7f:d7:5c:a4:ad:d4:
                    0f:93:e6:bc:77:b5:f3:51:ca:50:e6:63:df:a5:31:
                    55:55:cb:9b:d4:ea:a9:b6:46:57:3e:22:d7:14:90:
                    ac:70:07:cc:99:f2:24:fd:b9:46:26:67:e1:40:70:
                    d2:d7:78:04:c2:0a:56:c3:f9:90:58:5f:9e:45:04:
                    0b:a1:5b:bb:dd:95:4c:ba:be:fa:89:b7:8a:7e:5e:
                    b9:ac:6e:2e:63:91:f8:65:57:35:59:9e:42:1d:89:
                    85:03:ad:89:2e:6b:83:da:6a:50:7e:54:46:1e:9d:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B6:70:B2:16:60:70:86:84:E1:0C:AB:0B:78:F0:E6:72:97:6E:52
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:21:ef:f4:2b:97:48:09:fa:a2:ed:a6:8f:34:a3:b9:80:6a:
         7a:de:ab:26:10:9f:8e:52:fc:dd:89:8e:b5:a4:fe:1a:1e:b8:
         0e:89:a0:1d:b9:81:55:88:95:35:34:62:d1:81:d4:fb:95:0a:
         5b:6f:72:71:31:e3:a2:67:b4:5d:3a:6c:bb:16:25:17:31:43:
         45:df:6c:1f:7a:09:29:2b:6f:31:81:4f:48:e7:9b:3d:be:3b:
         ae:97:d4:96:7d:9d:ee:cf:1d:3b:4a:ec:33:32:96:f2:cc:c4:
         cd:a8:21:1d:c6:db:3a:48:ec:7f:2a:f3:eb:b9:93:36:50:ef:
         52:65:15:9d:49:35:64:25:ae:d3:8a:1b:0d:c8:e9:14:1f:7a:
         c0:78:30:51:12:8f:bd:74:e4:e9:d2:a5:90:1e:b5:39:12:5f:
         59:51:c9:47:ff:82:9c:e5:8b:f0:12:1e:1e:2b:ed:30:a2:20:
         0d:6a:8b:29:b4:58:98:e6:7a:cc:28:2b:0d:9c:f3:1a:bc:28:
         09:0b:68:0a:5f:8b:f0:f4:f4:f7:2c:c1:7a:69:24:91:cf:6b:
         b4:62:04:2a:a2:a6:0f:fb:d2:0a:56:c2:84:7c:b9:9e:37:24:
         03:63:a4:7f:68:71:d8:17:d8:b0:c4:1f:ca:02:b8:87:d1:0b:
         20:39:c8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:19:36 2026 by rpki-client