Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
File:                     bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json)
Hash identifier:          ysS+/dOyr7tFWdm1jOd0snru0stbRbzg1gPaxY9CZKA=
Subject key identifier:   02:53:3E:E4:E6:2C:17:FA:00:CF:A7:F8:3D:8C:F9:11:C8:D9:39:9A
Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D
Certificate issuer:       /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
Certificate serial:       0A05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
Manifest number:          09F1
Signing time:             Fri 02 Oct 2026 20:04:22 +0000
Manifest this update:     Fri 02 Oct 2026 20:04:21 +0000
Manifest next update:     Fri 09 Oct 2026 20:04:21 +0000
Files and hashes:         1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: AZhzkr3ygcsTRR0FTxXdMPxrk17InkIu4oUFwM4MZuM=)
                          2: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: KtM1qdNq8NLmdL1fYFZUXHnl3LLm8zBtR6oGd0S8GvM=)
                          3: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: cck9l5p1Y817gKyMVifPqAKE3qUy9cXSYCmRB8J3Rtg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl
                          rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 20:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D
        Validity
            Not Before: Oct  2 20:04:21 2026 GMT
            Not After : Oct  9 20:04:21 2026 GMT
        Subject: CN=6ac00e45-2a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:b0:bc:95:2c:b8:5f:c7:74:da:7a:c1:96:
                    48:16:0e:fa:80:ee:e9:4f:52:85:77:ec:d7:26:06:
                    e1:e6:65:e2:8f:fb:ca:1e:b4:4a:35:64:20:3a:28:
                    41:1b:16:4a:92:b8:35:af:e6:99:93:66:ab:75:0f:
                    d6:ec:af:b8:81:b0:46:61:2e:c4:e5:f3:0d:d4:80:
                    09:b8:ca:f0:96:e3:46:92:dd:35:4a:ae:48:dd:04:
                    73:71:ae:69:df:fa:26:0f:3e:95:61:2b:2d:14:f2:
                    12:3a:2c:2c:9f:81:1f:06:d0:09:9e:3c:59:e1:2d:
                    5c:6d:9b:f8:a6:1c:fe:14:69:ff:07:02:fd:8f:c3:
                    79:f7:a8:a3:4d:f5:1a:af:d4:19:b7:86:4d:72:1e:
                    c4:73:ec:86:6c:8f:23:fa:12:73:55:32:2f:53:48:
                    31:c2:b1:6b:01:55:9a:99:ba:8f:b8:9f:28:f0:ec:
                    88:60:a7:84:08:7d:99:36:f7:c2:22:69:c6:8a:bc:
                    9b:98:84:71:8b:b9:c7:4c:41:a7:06:fb:db:18:82:
                    93:bc:cb:24:58:c9:98:96:6f:f9:64:25:0d:e8:d6:
                    11:67:36:96:2c:ec:28:6c:3b:f6:f5:02:06:90:97:
                    0e:a6:39:3a:7e:9a:5d:11:ee:f9:6b:e6:89:c4:82:
                    0f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:3E:E4:E6:2C:17:FA:00:CF:A7:F8:3D:8C:F9:11:C8:D9:39:9A
            X509v3 Authority Key Identifier:
                keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:8a:45:0f:ce:5a:89:b1:cf:31:a8:68:38:26:f4:66:cd:
         4d:dc:e0:cc:58:4a:26:75:e9:e9:55:de:5b:9c:1b:d3:80:38:
         f3:b4:c2:b4:ac:ba:64:e9:05:df:a3:cd:9d:8a:b3:d1:83:83:
         f3:06:ed:18:87:1c:64:a8:16:c4:d2:59:f4:01:5f:7f:eb:ba:
         6e:36:4a:e2:68:8f:9e:43:23:38:1f:f0:e1:fe:51:3d:36:80:
         d1:10:66:4f:e6:ab:55:2b:c3:2a:dd:5a:75:c2:67:04:e8:b7:
         32:7f:01:29:d6:fc:77:8a:df:34:56:5e:fe:76:ec:c6:c2:de:
         a8:83:ee:ae:6a:d5:70:19:41:95:ed:6b:ef:7c:11:1e:c3:85:
         b9:5a:0b:50:62:28:07:28:21:f2:a8:fa:66:0e:bc:53:7b:50:
         d9:a1:e6:16:8b:8a:0a:f2:fb:87:82:ef:44:df:e6:c7:25:99:
         1e:07:d0:ed:ad:c3:07:cc:c9:8f:c5:e7:59:cb:a1:b1:73:a8:
         20:e3:be:5b:04:b1:58:6a:72:f8:4a:6e:72:f9:51:cf:61:40:
         6d:7c:c1:39:41:41:ea:b8:1c:cb:91:84:53:c3:41:77:5f:18:
         2c:77:a6:6b:bf:24:34:44:e7:bf:9b:10:38:6e:1e:aa:b0:26:
         0a:41:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:20:32 2026 by rpki-client