Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          Q4aeDv0JC19HAhP5hfI0RusXeRmmBK7rdHbzysegvJ0=
Subject key identifier:   31:30:58:25:94:E8:7A:99:BA:49:18:13:76:40:4D:5B:FB:9F:03:13
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          BB
Signing time:             Mon 21 Sep 2026 06:54:56 +0000
Manifest this update:     Mon 21 Sep 2026 06:54:56 +0000
Manifest next update:     Mon 28 Sep 2026 06:54:56 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: U7OE6rcqO+TfGgJMaPzJiGFB1+rfc1qRsVAY5ivSikY=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Sep 21 06:54:56 2026 GMT
            Not After : Sep 28 06:54:56 2026 GMT
        Subject: CN=6ab0d4c0-01dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d4:7e:a1:f9:63:89:96:ce:9a:16:7e:9b:14:
                    03:48:22:b7:aa:02:dd:45:35:d5:a4:fa:e2:57:76:
                    77:ab:5b:e6:10:94:e1:dd:93:c4:eb:dd:a5:86:99:
                    4a:cb:b0:b2:2f:1e:7e:78:3b:ac:b7:f8:41:95:68:
                    fc:23:a8:16:49:b1:a8:0c:88:8f:52:47:0f:f5:b9:
                    ac:3b:31:6d:ec:ea:36:2b:5f:28:78:29:8e:74:b6:
                    fa:76:9b:ca:ae:f3:c5:d4:84:c1:71:b9:04:17:9c:
                    73:de:72:42:0e:66:1c:bb:6f:34:26:b7:59:dd:c3:
                    f0:98:ff:24:2a:57:b8:63:74:b0:05:91:26:cc:71:
                    72:de:0d:76:53:ba:7d:31:f4:cb:a0:09:a2:98:4e:
                    a4:90:e3:cf:55:5d:30:23:f8:95:e0:5f:80:c1:04:
                    29:aa:6b:4a:87:22:82:f7:c8:5e:86:98:97:1f:36:
                    1a:b1:c9:0f:4f:2c:8a:a5:e7:47:a0:bd:0c:fa:5a:
                    5b:dc:df:56:34:05:cd:94:da:7a:9e:be:a4:06:23:
                    1f:4f:32:c8:f2:06:a9:b7:8a:42:cc:df:39:88:ed:
                    01:11:01:be:6e:43:7a:70:25:39:17:b0:80:f7:ac:
                    cd:b7:de:85:4f:76:a9:93:32:0d:3b:3f:e3:16:4e:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:58:25:94:E8:7A:99:BA:49:18:13:76:40:4D:5B:FB:9F:03:13
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:f0:60:e6:9e:42:56:8d:9d:a2:c1:78:d8:ec:84:e5:51:
         c3:6f:68:c7:2b:34:b5:7d:d6:4c:a8:b9:f9:c0:87:f6:af:47:
         ae:74:4e:04:4b:23:ac:a8:89:d2:d3:1b:87:70:59:7d:6c:83:
         c4:2b:11:06:bf:51:fd:f7:8b:d8:2b:c1:0d:8d:a4:f3:18:37:
         66:52:ac:50:56:99:d5:76:25:4e:fa:98:6c:77:ab:4a:c9:a5:
         80:24:77:a3:fa:c6:f1:65:ee:9f:94:22:35:07:af:6e:21:51:
         83:02:9c:dc:15:bf:aa:09:6d:91:71:fa:7e:be:76:f7:6f:7f:
         88:19:28:fe:be:5b:0b:b8:66:00:52:49:a0:bf:dd:cf:11:6f:
         a9:9b:06:fb:cd:3c:7a:f7:50:65:cd:51:4d:ca:0f:f9:d0:6a:
         d3:5a:22:f0:90:7a:a5:45:2e:db:f5:66:96:13:b8:92:ca:bb:
         9a:71:13:38:e9:0d:70:c4:24:15:90:22:b4:a9:20:38:71:e8:
         42:42:b7:70:50:1f:37:ce:f3:a8:ca:33:8c:9e:c4:96:53:c5:
         dd:da:ec:5f:d6:b1:30:40:37:99:c2:51:fb:56:ae:2d:34:3f:
         86:02:3f:61:52:74:29:45:39:50:f7:24:16:0c:e9:78:90:12:
         d0:18:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:17:33 2026 by rpki-client