Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File:                     B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier:          vyRCGs2a4SMvQglaxtXMPz4yqYAIkvuGl2x2/xq3Mpk=
Subject key identifier:   68:BD:1C:32:97:E9:7E:C6:DD:36:94:7A:8A:93:69:95:DB:C2:20:48
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0CDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number:          0CAA
Signing time:             Fri 02 Oct 2026 18:51:18 +0000
Manifest this update:     Fri 02 Oct 2026 18:51:18 +0000
Manifest next update:     Fri 09 Oct 2026 18:51:18 +0000
Files and hashes:         1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: +IuXfvZtZfOX5DxCEO4mSzOlsxMyWmEfQmoVYfUz0Xo=)
                          2: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=)
                          3: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: ysJpjq4GZRT81ypvyps70Xs2FSrmpAOh+0WROxWsBRE=)
                          4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Oct  2 18:51:18 2026 GMT
            Not After : Oct  9 18:51:18 2026 GMT
        Subject: CN=6abffd26-ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:d0:2f:67:0b:b0:22:54:30:47:47:63:aa:
                    58:a3:97:64:af:39:d7:74:9f:c5:54:3d:b7:4e:9a:
                    57:78:56:3a:8b:87:59:b6:90:65:01:56:a4:19:94:
                    dd:a7:d0:ee:96:02:c9:79:26:b8:b5:3a:46:8c:0a:
                    47:d9:64:e2:fe:bd:5b:54:cf:94:8c:83:eb:7c:26:
                    d1:2e:47:fc:fd:e7:c4:c1:fc:84:7a:f2:29:a7:b5:
                    71:ca:a0:11:fb:5b:01:97:0e:73:59:09:df:14:a0:
                    75:72:de:29:94:2b:e2:83:8f:82:88:ab:70:4f:0c:
                    e4:d2:95:34:20:48:a3:11:59:ab:8a:c6:3c:88:a1:
                    0e:49:e0:86:42:f5:83:6b:0c:6f:bf:24:5c:3f:04:
                    d1:a4:39:cc:3f:74:e9:f4:81:f9:11:03:a8:c7:02:
                    6b:12:7f:e6:36:9f:7c:31:ec:27:a4:1d:58:6c:ce:
                    0f:8e:c3:5e:51:b3:7f:46:93:bb:1b:65:2c:fb:aa:
                    71:eb:84:fa:00:49:d9:b5:59:a3:f6:27:0b:2a:40:
                    66:62:71:7e:d2:d6:28:71:2f:23:24:87:31:a3:7e:
                    7a:11:f2:34:65:b6:4f:f6:f6:e5:24:61:ba:8a:3f:
                    24:00:36:c6:02:a8:d7:fa:75:f3:13:d1:6c:e7:6a:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:1C:32:97:E9:7E:C6:DD:36:94:7A:8A:93:69:95:DB:C2:20:48
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c6:49:ad:08:15:70:57:9d:d6:88:59:e8:4e:0c:f0:18:00:
         1f:62:95:16:e9:eb:a2:fc:1b:10:24:f8:dc:eb:63:3d:d2:ff:
         da:ee:34:a9:be:12:14:01:33:af:7f:09:d6:89:fb:ce:ce:57:
         1e:fe:ab:a7:59:1e:f2:b5:12:61:2b:d2:6b:bc:e5:c2:ae:27:
         a1:f9:1e:b3:5d:da:e3:1b:4d:4e:16:c2:fd:17:29:da:06:e4:
         09:87:ec:50:12:e0:5c:db:9f:68:da:d5:e8:9d:06:41:35:82:
         90:0e:a8:2e:fd:f5:c7:6a:0a:ca:66:14:cb:07:b9:a4:c7:f2:
         55:57:66:2a:82:61:b1:83:80:0f:63:3a:fa:44:b7:6c:73:6c:
         06:88:b3:45:ba:b8:1c:29:17:f0:0d:13:7a:73:07:e9:81:12:
         44:4c:6e:0c:cb:fb:c3:3b:dd:9d:53:72:79:b7:d3:0d:3c:ce:
         d4:ef:f5:8f:7a:44:ef:5a:36:11:0a:15:bf:de:f3:73:26:5e:
         2b:f5:56:34:a3:e2:e3:ac:34:b3:c2:b8:97:9b:9a:38:e6:a8:
         c4:02:ab:01:da:7b:73:42:8b:a2:c2:66:93:c2:9c:3a:c2:20:
         06:eb:16:05:d3:f9:6f:17:7c:82:81:dd:50:30:db:06:2f:eb:
         b8:03:87:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjYxMDAyMTg1MTE4WhcNMjYxMDA5MTg1MTE4WjAYMRYwFAYD
VQQDEw02YWJmZmQyNi1iYTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0NLQL2cLsCJUMEdHY6pYo5dkrznXdJ/FVD23TppXeFY6i4dZtpBlAVakGZTd
p9DulgLJeSa4tTpGjApH2WTi/r1bVM+UjIPrfCbRLkf8/efEwfyEevIpp7VxyqAR
+1sBlw5zWQnfFKB1ct4plCvig4+CiKtwTwzk0pU0IEijEVmrisY8iKEOSeCGQvWD
awxvvyRcPwTRpDnMP3Tp9IH5EQOoxwJrEn/mNp98MewnpB1YbM4PjsNeUbN/RpO7
G2Us+6px64T6AEnZtVmj9icLKkBmYnF+0tYocS8jJIcxo356EfI0ZbZP9vblJGG6
ij8kADbGAqjX+nXzE9Fs52oBKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGi9HDKX
6X7G3TaUeoqTaZXbwiBIMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnsZJrQgVcFed1ohZ6E4M8BgAH2KVFunrovwbECT43OtjPdL/2u40qb4SFAEz
r38J1on7zs5XHv6rp1ke8rUSYSvSa7zlwq4nofkes13a4xtNThbC/Rcp2gbkCYfs
UBLgXNufaNrV6J0GQTWCkA6oLv31x2oKymYUywe5pMfyVVdmKoJhsYOAD2M6+kS3
bHNsBoizRbq4HCkX8A0TenMH6YESRExuDMv7wzvdnVNyebfTDTzO1O/1j3pE71o2
EQoVv97zcyZeK/VWNKPi46w0s8K4l5uaOOaoxAKrAdp7c0KLosJmk8KcOsIgBusW
BdP5bxd8goHdUDDbBi/ruAOHPg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:33:30 2026 by rpki-client