Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
File:                     bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json)
Hash identifier:          Lyt9dWxgi6LC0Z6VeQXYHssoOmoHC4Nsqmw8TgSCoNQ=
Subject key identifier:   80:22:BE:C6:C4:C2:07:7C:26:11:75:F8:0B:EF:03:76:7B:F8:F8:C4
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
Manifest number:          0125
Signing time:             Sun 25 Oct 2026 06:24:16 +0000
Manifest this update:     Sun 25 Oct 2026 06:24:15 +0000
Manifest next update:     Sun 01 Nov 2026 06:24:15 +0000
Files and hashes:         1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: O2HBGZCcjQ1ENGpMtIr//kcPQFHNapBOHXbTul4rDEM=)
                          2: 8E12F81EB9C811F1825220804011F970.roa (hash: NvMgDPV/fuvHOu1OztVQ9qG+Kdx0hWblcdN34ndbxJY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: Oct 25 06:24:15 2026 GMT
            Not After : Nov  1 06:24:15 2026 GMT
        Subject: CN=6adda090-ac2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:24:cf:19:1f:a8:94:d1:cc:6f:6c:34:6b:
                    5f:2b:3f:8d:cf:88:76:a0:e3:5a:42:b0:33:8a:f9:
                    81:d2:5d:54:bd:96:55:a5:b7:9e:d1:63:e8:27:94:
                    de:31:4b:57:97:6d:f1:b4:9b:7f:c5:f3:ad:48:92:
                    dc:ac:0b:f6:a3:a9:e4:14:15:9c:35:17:5c:9a:1b:
                    3b:9a:f9:fa:f3:cf:37:dc:99:32:fd:ef:5c:9f:35:
                    6b:26:70:96:1b:25:9f:12:b5:85:b7:58:89:80:b7:
                    9a:3f:f6:d3:8f:8f:4b:bf:86:94:0e:32:b6:65:c3:
                    b9:50:3e:05:f8:f9:47:57:2a:ed:fd:1b:f6:1b:bb:
                    53:cf:2f:d2:fe:3f:3d:1d:a3:df:e9:9b:bc:c6:e7:
                    30:8c:fc:6d:b1:b2:fe:9a:67:c5:c7:fd:31:dd:f6:
                    81:ce:ad:ae:7d:6c:78:c5:0c:64:d9:65:00:6e:ad:
                    3e:21:4a:8c:b9:95:03:51:e2:0e:57:b4:43:51:5e:
                    b1:be:ed:ab:e3:d2:15:26:90:d3:24:05:01:bc:18:
                    df:57:4a:f3:d9:48:4c:d6:cc:d9:0e:52:7c:a0:7e:
                    f7:73:e3:be:0d:d2:33:a9:e8:56:e9:3e:f4:b2:f0:
                    8f:9f:71:8a:56:1d:04:7b:98:ec:b9:69:aa:9a:28:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:BE:C6:C4:C2:07:7C:26:11:75:F8:0B:EF:03:76:7B:F8:F8:C4
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c6:85:0a:66:32:b4:6c:bf:27:80:34:5b:5f:8f:b8:68:cd:
         d3:f0:52:4c:73:6d:03:b8:cc:e0:3f:99:ae:1c:e7:13:91:4e:
         0a:2d:8f:d4:2b:d7:0e:64:4a:10:48:aa:25:25:db:d8:38:60:
         ff:9d:54:ef:0f:61:de:29:5b:a8:03:5b:56:23:bb:ef:0f:d1:
         0c:45:a5:b4:34:18:98:d1:0e:db:a9:e7:32:5c:29:cf:a7:3e:
         2f:30:03:1e:b5:bc:c8:16:fc:08:a2:13:d0:90:c9:8a:2d:74:
         05:1e:3a:5c:1b:7e:39:0b:0c:34:1a:81:1a:36:ab:48:d4:92:
         c7:2a:2e:ec:4e:f9:b7:68:fc:a5:0d:cd:78:b3:bf:7b:4d:61:
         d9:8d:68:0e:dd:29:f0:58:8d:10:b7:b2:e8:ab:18:f4:fd:8c:
         d1:47:16:5c:2e:88:53:9b:74:9e:c5:94:c8:3c:48:51:1f:a8:
         3e:1d:d4:4e:5a:6b:c6:fd:e5:c4:eb:d2:c3:6c:14:22:4f:eb:
         e6:2b:15:72:ed:1b:c4:00:f0:6d:4a:9d:db:f3:20:71:66:3c:
         e3:e5:2c:58:39:13:d5:9c:0f:7f:25:02:0f:4b:68:93:62:fe:
         a4:20:d6:9b:d2:0b:3c:f0:9d:c9:76:1b:a4:6d:57:06:cc:64:
         e3:1d:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:47:32 2026 by rpki-client