Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          Sup11k3RAsgAmZ02KfNc7T7mKFlP3u3sZfaS60MTQRY=
Subject key identifier:   05:55:CC:5C:A0:1C:0C:08:1E:7F:4F:7F:78:F4:33:DF:A2:DF:C4:0C
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       05C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          0596
Signing time:             Thu 16 Apr 2026 23:12:40 +0000
Manifest this update:     Thu 16 Apr 2026 23:12:39 +0000
Manifest next update:     Thu 23 Apr 2026 23:12:39 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: t0zlWmDTRnHaaZwTTaw+uEInx39WCFtwlazgvKhD7mY=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
                          3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Apr 16 23:12:39 2026 GMT
            Not After : Apr 23 23:12:39 2026 GMT
        Subject: CN=69e16ce8-4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:f2:ca:03:eb:d3:fe:88:c6:8e:ef:d1:8d:
                    8f:24:eb:21:b7:86:5e:cc:94:70:9d:b8:34:d5:4a:
                    ed:96:4f:01:78:74:e2:8e:18:d6:46:b4:d2:17:f7:
                    e2:28:6b:fb:82:cb:a4:e9:c7:e7:91:d7:bd:0f:82:
                    df:dd:44:84:b9:6d:1e:eb:79:39:59:52:9b:86:7e:
                    1f:f7:8a:50:83:2f:41:4e:6a:01:a1:36:ad:76:78:
                    03:8d:c0:52:83:c0:9a:bf:d2:97:72:f3:ee:b1:12:
                    0a:85:ac:7c:a3:d4:85:07:28:d9:04:db:da:2f:05:
                    a2:27:f3:23:71:13:a1:20:54:df:42:ae:76:1b:6a:
                    37:97:48:43:86:e1:c5:40:2e:f2:eb:78:88:ee:3e:
                    3d:f5:bf:08:27:ec:7d:c4:01:08:3e:7b:ea:72:c4:
                    f4:51:48:53:3b:9b:c3:f4:ca:94:f4:4c:4b:26:51:
                    a1:77:4d:76:23:7b:bb:ca:01:f6:db:6d:1b:c9:ef:
                    53:b8:93:c2:58:5b:4b:79:87:2b:5a:28:11:2f:c2:
                    d6:a4:1e:f7:90:ba:4b:36:f4:6b:c7:47:86:69:24:
                    1d:03:ab:a6:e5:ec:8b:9d:7d:fb:88:9e:75:20:b8:
                    60:98:e9:73:61:39:69:7c:21:9a:49:51:b1:1a:8e:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:55:CC:5C:A0:1C:0C:08:1E:7F:4F:7F:78:F4:33:DF:A2:DF:C4:0C
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9c:af:6f:72:f4:86:7c:1b:9d:ac:8e:d0:50:f9:29:79:24:
         8c:3f:5a:9a:d1:f3:e2:4c:34:b3:66:4a:ea:21:a0:d4:9e:4f:
         64:68:19:a2:43:df:60:e0:c0:80:af:b4:ec:de:b8:21:e8:bd:
         8e:47:d0:fd:62:a5:2d:50:60:43:c6:b3:12:f3:00:2d:ce:b9:
         4a:95:86:d5:f9:41:1f:84:6f:4d:64:79:f2:4f:22:47:ec:11:
         08:e9:5f:d6:2f:2c:e9:8d:c8:ed:d2:0f:20:61:e1:63:35:09:
         a1:ad:37:31:17:ae:24:75:9a:9b:03:53:a3:54:ab:89:c0:8f:
         af:c6:34:32:a9:6c:73:b5:61:42:a3:8d:41:ff:de:42:a8:d9:
         c9:78:5f:23:31:af:04:b2:04:60:76:a0:7a:63:c7:18:ba:ec:
         9c:c3:91:35:cf:9f:1e:4e:6e:45:ac:b5:64:4a:87:77:d5:0c:
         f2:8b:af:df:5d:26:d0:ff:83:94:b7:81:8f:e9:7d:b4:fe:2d:
         e8:f5:26:95:eb:f3:b6:74:84:09:d9:8c:4d:9b:17:1f:7c:e6:
         df:0e:41:3e:4c:5f:ed:3b:79:80:50:b0:89:6a:fd:68:e2:7e:
         77:01:92:35:13:b6:c8:7b:fd:f9:15:f9:68:d9:50:77:a6:33:
         2e:57:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:14 2026 by rpki-client