Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
File:                     bXCBEk8H_qBymCIdIb-UA2jT-_o.mft (raw, json)
Hash identifier:          2v3ST/OIFXK+LH1stAzo74Bxa9HrA+fOWsON9dfHvBs=
Subject key identifier:   47:62:2D:67:B2:B8:66:8A:32:4E:E6:49:19:29:D5:AC:69:EE:7C:DD
Authority key identifier: 6D:70:81:12:4F:07:FE:A0:72:98:22:1D:21:BF:94:03:68:D3:FB:FA
Certificate issuer:       /CN=A9157AC6/serialNumber=6D7081124F07FEA07298221D21BF940368D3FBFA
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
Manifest number:          46
Signing time:             Mon 21 Sep 2026 08:26:18 +0000
Manifest this update:     Mon 21 Sep 2026 08:26:18 +0000
Manifest next update:     Mon 28 Sep 2026 08:26:18 +0000
Files and hashes:         1: bXCBEk8H_qBymCIdIb-UA2jT-_o.crl (hash: 3JMSMfDHlV/I6u0Bgbg4cr79z6YmflchKBYkF/uz88Q=)
                          2: ECE5B66E6F0F11F1A31C64DE84A30FBC.roa (hash: i24Uxxkgrbji9z54Ow7Jw2e9+h7i/J19UczyJNjiFts=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.crl
                          rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157AC6, serialNumber=6D7081124F07FEA07298221D21BF940368D3FBFA
        Validity
            Not Before: Sep 21 08:26:18 2026 GMT
            Not After : Sep 28 08:26:18 2026 GMT
        Subject: CN=6ab0ea2a-5490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:d0:11:7c:63:c5:8a:4e:7f:eb:73:48:7a:
                    77:2b:36:87:76:6e:e7:2a:62:6f:31:7d:d7:3b:d5:
                    a3:83:b5:2f:6a:c3:5e:42:5e:de:a5:da:db:03:bd:
                    a1:f9:1a:89:47:3a:9e:1b:a7:56:10:40:e8:aa:6b:
                    28:ff:7c:b2:c1:b0:f0:e3:25:51:46:c1:e3:4b:7c:
                    be:5d:ad:1a:72:4b:ba:af:68:5e:f1:00:bf:e5:a2:
                    b2:02:65:28:2a:83:a1:d6:96:c1:b2:6e:fd:bb:ae:
                    f9:19:ed:23:8d:82:19:0e:6a:1a:53:7c:49:d5:e1:
                    fe:b5:7a:33:d3:e5:f7:48:7b:97:17:2d:90:fa:1d:
                    f3:92:65:61:56:ee:65:e9:37:a4:ab:8e:3d:d2:ac:
                    fb:43:a2:96:5a:aa:70:c2:73:8f:19:29:7b:d1:fc:
                    7f:0b:97:1c:74:d6:45:d5:6c:a3:99:ef:84:76:03:
                    ad:ba:6e:bb:0b:5c:ce:c6:54:e9:d9:b9:73:16:a7:
                    9a:9d:6a:e2:e9:ef:52:1c:10:9c:5a:aa:f6:c0:47:
                    48:e1:d8:27:c4:7a:9a:00:eb:a3:4a:05:4c:ae:2e:
                    dd:56:58:6a:ed:e4:3f:04:d7:98:10:f8:09:db:8f:
                    f9:d3:d3:75:ae:ef:24:2d:25:e0:73:7a:c7:5e:75:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:62:2D:67:B2:B8:66:8A:32:4E:E6:49:19:29:D5:AC:69:EE:7C:DD
            X509v3 Authority Key Identifier:
                keyid:6D:70:81:12:4F:07:FE:A0:72:98:22:1D:21:BF:94:03:68:D3:FB:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXCBEk8H_qBymCIdIb-UA2jT-_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157AC6/851461804E0211F1BC2D5411C8833773/bXCBEk8H_qBymCIdIb-UA2jT-_o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:d5:69:86:75:01:a7:b9:6d:a9:ea:63:e2:d6:86:7d:97:
         69:c2:66:78:7d:17:c7:45:21:f6:17:3b:8c:64:4e:e4:42:a4:
         5f:08:e7:f4:59:9d:25:44:7a:ea:8c:21:f4:5d:c6:9b:4a:35:
         19:a4:02:f7:ac:e3:a0:d4:4a:4f:40:b8:82:99:32:25:df:28:
         3c:07:b6:94:25:5b:a7:90:86:07:8b:5d:e9:f8:5e:df:aa:72:
         c3:6c:54:14:75:9b:24:c5:f1:6a:d4:27:7c:14:f3:48:b2:49:
         ef:13:6f:38:05:30:0a:7c:b8:40:a8:e2:17:c1:0d:eb:62:fc:
         d5:3d:b6:df:a9:a7:dd:18:de:9d:e8:b2:b0:a9:1e:4e:ec:ee:
         b6:50:50:d0:95:7a:c8:ec:96:56:38:f1:44:fe:7d:a7:7d:6f:
         1a:07:2d:fa:41:bc:a8:8e:47:18:66:2b:c0:ca:c6:b9:a7:1a:
         5c:13:f3:17:69:dc:cf:15:1f:67:43:19:a6:0c:67:36:37:90:
         2d:1e:48:6b:91:49:67:bd:ed:10:a3:57:33:cb:d9:04:ef:38:
         51:30:76:74:5b:11:a1:0d:90:d7:3f:92:66:8b:f9:e8:f9:a1:
         ac:db:56:d2:cd:56:e8:48:5d:18:3f:74:06:61:8a:ac:ac:3c:
         83:3f:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:44:42 2026 by rpki-client