Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          vlYhyxDo/BcSb+z4CsZl+0dye1PXz7Q6EelkxR8pRm4=
Subject key identifier:   44:C9:0A:C4:86:2E:78:99:13:11:F6:C8:FA:98:7A:15:F1:C7:20:FD
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          028E
Signing time:             Sat 17 Oct 2026 02:19:43 +0000
Manifest this update:     Sat 17 Oct 2026 02:19:42 +0000
Manifest next update:     Sat 24 Oct 2026 02:19:42 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: V4/um7TM3k8hDrqDwgCgeT7u3y/AEtUEn83OgOYGn64=)
                          2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
                          3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 02:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: Oct 17 02:19:42 2026 GMT
            Not After : Oct 24 02:19:42 2026 GMT
        Subject: CN=6ad2db3f-47a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:3e:6f:f0:3e:ca:ae:f4:7c:1b:3b:59:07:
                    9c:6e:87:b8:d7:65:58:e0:65:4b:da:ca:41:6c:ff:
                    f0:3e:0c:ed:7f:f8:4f:d0:e1:2c:65:bc:5d:4d:c0:
                    03:6c:42:97:91:df:20:7a:0e:2e:0a:95:41:94:9a:
                    f4:5a:d5:b8:17:ff:6b:cf:08:83:10:d2:b6:b8:c9:
                    3f:87:d6:07:43:4e:92:85:1f:aa:71:d7:3e:4d:c5:
                    30:20:4b:d1:b7:ac:2f:1f:99:5b:27:22:9d:62:77:
                    89:a1:c9:78:91:2f:28:85:35:90:d6:b6:93:49:a7:
                    9d:2c:d1:52:12:a4:da:8e:f2:f3:59:17:e3:14:fa:
                    73:42:3b:ff:5a:08:9e:d9:2c:64:9b:39:9a:30:a1:
                    74:65:25:fc:2b:03:4d:f5:19:26:3b:ae:b4:90:1b:
                    0f:b7:0c:63:00:d7:3b:18:f4:b5:08:0f:0b:ed:9a:
                    0e:59:aa:25:61:07:bb:cb:40:7a:1b:21:37:a1:73:
                    d9:9b:78:37:ea:46:38:52:24:7b:11:d1:df:a3:ce:
                    35:39:30:63:2b:cc:76:b0:75:67:a9:1d:4d:67:0a:
                    65:11:60:30:82:9f:02:b1:b0:73:44:df:38:cb:28:
                    7c:ce:47:ce:16:5d:62:33:96:b7:b9:88:f7:4b:2d:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C9:0A:C4:86:2E:78:99:13:11:F6:C8:FA:98:7A:15:F1:C7:20:FD
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:23:23:a5:d5:d5:85:75:06:01:6f:9e:03:e1:92:8e:24:ce:
         61:58:11:71:13:1d:30:69:16:2e:10:80:44:21:04:4d:69:b8:
         be:08:36:4c:61:33:2d:ed:86:d0:4b:37:ad:8d:d5:07:f4:61:
         e9:1a:b8:8e:ca:43:42:a4:38:d4:7d:72:4e:49:30:8b:38:ef:
         dd:5d:15:67:a1:40:7a:3e:af:0f:ea:a4:1e:cf:9a:a6:29:fd:
         80:d7:c8:79:2a:80:39:60:87:56:07:c2:67:8b:f1:66:1b:fc:
         3d:24:1d:62:6e:b0:dc:9d:d9:1c:82:f8:68:3f:9c:12:9b:cb:
         77:78:87:ae:4b:ac:e2:96:2a:ba:e5:22:7c:fc:81:47:73:60:
         7c:72:bc:5c:b2:73:a9:20:4d:ec:0f:63:84:6d:ea:f5:59:1f:
         0a:47:89:2e:81:7b:1f:2c:1f:ec:ee:4a:27:f9:82:71:e0:cc:
         05:aa:e7:a6:78:62:e5:00:f9:e4:e5:6a:90:1a:18:1a:0e:8c:
         cd:04:12:ff:c7:1e:ea:c6:6e:a1:ee:0e:7b:0e:7d:b6:7a:8e:
         80:f4:a5:be:a8:91:08:65:b8:75:ff:23:71:24:da:c3:c0:aa:
         25:bd:67:62:c4:ab:83:94:a1:2e:7a:41:18:4e:9b:e5:f3:2b:
         a4:42:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:26:28 2026 by rpki-client