Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File:                     BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier:          tzf8vjVAjidUAeb9Q8d9BNH7WOnILkodVDVwuEcx0vc=
Subject key identifier:   E2:8D:18:1A:92:3C:58:23:2F:D1:9E:CB:2F:FF:13:84:17:3F:02:E9
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer:       /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial:       0303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number:          02FD
Signing time:             Wed 19 Aug 2026 01:32:20 +0000
Manifest this update:     Wed 19 Aug 2026 01:32:19 +0000
Manifest next update:     Wed 26 Aug 2026 01:32:19 +0000
Files and hashes:         1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: 54oyn/WpY4reGfVdEL0+x3hMEq5QMm2394xXbtEmx7M=)
                          2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
                          rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 01:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
        Validity
            Not Before: Aug 19 01:32:19 2026 GMT
            Not After : Aug 26 01:32:19 2026 GMT
        Subject: CN=6a8507a4-42a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:73:f6:22:dc:ab:81:d4:60:69:24:65:0c:
                    b5:76:84:e7:6e:43:0c:fa:04:51:39:34:51:0f:ed:
                    b1:cb:57:1b:57:fd:d4:3d:5e:f4:3a:a8:db:2e:56:
                    61:ab:9f:ba:37:8e:bb:dc:ad:77:3f:50:de:b9:26:
                    b2:85:db:ba:e6:82:19:cc:5b:95:ab:4e:6a:1b:56:
                    44:a4:a1:fd:ee:1e:bf:af:1e:6d:46:ff:14:00:1d:
                    64:02:01:c3:77:f7:c3:d1:58:f8:0d:1d:4e:c3:2b:
                    e7:69:72:5b:50:20:e8:93:8b:3c:f0:be:6e:c5:37:
                    89:fe:6f:aa:10:f2:97:67:61:43:29:94:80:dc:41:
                    16:01:34:44:f5:69:28:58:3d:6f:7c:9d:fa:b3:48:
                    1f:5f:42:22:d4:09:ca:f5:39:70:9e:dd:51:54:45:
                    c9:53:37:63:fd:b8:6a:72:dd:98:75:e7:98:cb:4f:
                    0d:7f:39:7d:b0:65:78:06:49:e7:5a:a0:2c:6e:eb:
                    9c:ee:57:c1:7e:d4:71:d5:9d:bc:b2:a8:8b:4c:2c:
                    7d:84:a5:ef:af:74:8c:80:5e:88:19:23:b5:ea:c6:
                    cc:dc:a8:4d:4c:1d:c4:70:cd:e6:fc:9e:cf:63:e8:
                    bf:17:0d:1c:a3:a7:73:34:0e:2e:08:3d:c9:68:03:
                    8c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:18:1A:92:3C:58:23:2F:D1:9E:CB:2F:FF:13:84:17:3F:02:E9
            X509v3 Authority Key Identifier:
                keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1e:25:ac:bf:24:5d:4f:87:6e:49:10:b7:1b:1f:24:ce:20:
         15:88:a7:4b:7b:9f:4f:24:cc:89:70:e5:6d:27:5a:6a:21:09:
         64:a6:2a:16:21:6c:b7:e2:4f:87:d4:27:95:b1:3c:21:8a:89:
         f9:28:74:57:a9:e9:08:e5:b1:b6:7a:01:62:59:84:b9:f4:2c:
         f2:ea:42:e7:af:97:0c:52:d7:0f:bf:d8:1f:65:fe:04:16:17:
         6a:15:42:ea:0c:68:a7:23:8e:d6:51:c1:e9:25:6b:bb:e5:1a:
         06:80:5b:3e:31:1f:f1:6c:98:9e:0d:93:25:9f:d6:e4:9a:7c:
         5c:e0:c9:00:9d:7a:87:cd:8d:f9:48:68:8d:14:05:c8:fe:58:
         bb:3a:f9:8a:b0:b9:f4:cd:f5:4d:61:eb:bf:d6:3d:fa:d7:3c:
         9c:29:32:3b:bf:6e:87:c1:5d:a2:a4:ef:02:13:96:7e:14:59:
         e6:42:35:89:51:80:2e:56:03:16:72:6e:ea:8b:d9:8d:d6:3f:
         b6:21:0a:7f:61:e0:0c:7b:90:b6:29:6a:6b:b1:ea:ca:3f:e4:
         1c:94:fd:20:1b:54:36:31:d5:47:3e:2c:52:8e:a4:3e:a0:e8:
         33:ae:ba:0b:80:1b:cc:78:6f:e3:5a:f1:49:0d:d8:bc:90:80:
         83:6e:94:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:54 2026 by rpki-client