Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File:                     bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier:          nCYsHi56V8a+7SAp52LpzqnIX0DzEp5kTk0jg5exSHA=
Subject key identifier:   B0:27:22:0A:89:99:5B:2D:4A:89:7E:CB:AD:09:D0:FD:BF:5A:8F:E5
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer:       /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial:       01B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number:          01B5
Signing time:             Mon 19 Oct 2026 04:33:01 +0000
Manifest this update:     Mon 19 Oct 2026 04:33:00 +0000
Manifest next update:     Mon 26 Oct 2026 04:33:00 +0000
Files and hashes:         1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: qjznLHoId39sV1LO4E9ofj8u7hua7gIExW0nyd3XDC0=)
                          2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: 2BRjq0vlRoD+HqKB9CtvDdhLLOAhzln8ABpkfA4fmK0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 04:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
        Validity
            Not Before: Oct 19 04:33:00 2026 GMT
            Not After : Oct 26 04:33:00 2026 GMT
        Subject: CN=6ad59d7d-f189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:91:6b:8b:a7:0f:8f:c8:2c:68:1f:d4:a0:
                    4e:45:9b:11:c6:28:74:df:0a:6f:2b:b7:d5:f3:3c:
                    b4:77:30:bc:47:09:3f:8f:2d:8f:9c:af:53:09:0d:
                    c1:80:e8:1e:5a:65:98:d7:70:08:73:22:63:ac:45:
                    40:95:f0:27:22:c0:74:63:38:7c:b1:81:13:03:ab:
                    5e:98:80:6c:34:87:3d:f9:5f:47:5e:0a:d7:bc:b1:
                    fc:7d:df:18:19:60:8d:81:72:53:8e:1c:6a:09:3e:
                    66:9d:1c:ef:ce:54:b2:7e:23:32:f1:5c:5e:d4:fa:
                    e7:fe:99:b9:8a:ca:68:0e:c9:6e:9a:c8:1f:0a:85:
                    61:51:17:7c:da:a5:a5:4c:7a:dd:94:7f:a3:3c:44:
                    8d:ec:ac:f9:c9:34:26:d5:c0:1c:34:3e:60:3f:65:
                    31:c4:17:46:68:1a:b9:9c:20:be:60:b5:5d:06:c4:
                    6a:0c:4f:0f:3d:e2:33:58:52:88:38:1d:40:de:be:
                    f3:ad:7f:aa:a3:f6:26:1b:e2:58:11:bb:36:6d:86:
                    06:88:57:47:40:74:f3:a3:59:cb:16:92:e1:8d:1a:
                    b7:9f:f6:88:2a:ff:6a:7a:74:9c:d9:b8:56:7f:35:
                    3a:93:7e:d7:96:d7:8f:0e:50:e9:e5:9e:2b:6a:00:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:22:0A:89:99:5B:2D:4A:89:7E:CB:AD:09:D0:FD:BF:5A:8F:E5
            X509v3 Authority Key Identifier:
                keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7e:cc:e0:8e:6b:30:27:01:f8:ca:0e:e0:d3:d9:0d:df:49:
         b4:22:f7:a8:c7:10:39:27:16:ff:02:9f:3e:fb:c7:41:ec:bc:
         30:0c:b2:ca:1c:b3:c5:0b:0d:e8:d6:fd:56:c5:b4:ae:61:52:
         99:89:f1:5a:92:45:bc:7d:e0:95:4f:27:f6:62:73:13:01:af:
         b3:80:3c:4b:75:7c:b6:be:62:60:36:f4:1c:c7:15:03:02:4a:
         fe:5b:30:35:33:ac:45:57:62:96:19:d4:ed:53:6b:fc:42:ee:
         86:d9:79:10:41:69:a5:87:96:69:1f:76:48:dc:54:7a:e9:04:
         34:f3:a2:02:e9:c3:ec:bf:22:d8:d2:7d:ef:00:f1:e8:f8:38:
         d5:a5:b8:2a:18:a8:e1:21:b6:ba:d5:18:03:f2:a8:52:0f:6e:
         9c:4e:93:a8:57:29:b5:7a:0b:44:32:e9:9f:ef:dc:d9:5e:84:
         58:c8:ab:22:d4:72:d8:fe:5c:ea:e8:5a:f7:30:f7:82:50:c3:
         b3:40:60:ee:5d:3b:32:24:c3:51:19:84:33:10:6c:97:9b:7d:
         bc:41:2a:79:8e:d9:63:8e:f5:f3:34:7b:e5:c6:5b:95:e5:92:
         4e:77:50:77:19:e1:5d:e0:50:33:b5:f2:fe:af:48:54:71:ca:
         4a:1c:ea:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:09:23 2026 by rpki-client