Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
File:                     B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft (raw, json)
Hash identifier:          8alJzWqY9OsJ7isV3wQy6qNraXiG2oLfCiiBvJkzrxs=
Subject key identifier:   02:00:51:54:A1:18:FC:52:B3:6C:60:5B:24:FB:FC:77:92:A7:75:D3
Authority key identifier: 07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6
Certificate issuer:       /CN=A9150064/serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
Manifest number:          2A
Signing time:             Wed 19 Aug 2026 09:32:11 +0000
Manifest this update:     Wed 19 Aug 2026 09:32:10 +0000
Manifest next update:     Wed 26 Aug 2026 09:32:10 +0000
Files and hashes:         1: B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl (hash: fk9Eva5KnoRsC9Qr0mWFfZHLUjdELWOCxJjTOmWRzlM=)
                          2: 606B4F366BAA11F1B898E4FE7347A888.roa (hash: mCkDe+LQ4xS6iJMKnCjHdo+T5H+lGEomCZURvH9FzsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150064, serialNumber=079228FDFA2ED5300A3F691896A82BE5B216EBE6
        Validity
            Not Before: Aug 19 09:32:10 2026 GMT
            Not After : Aug 26 09:32:10 2026 GMT
        Subject: CN=6a85781b-7bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:7a:0e:33:60:79:c8:b0:ac:a9:fd:b7:0b:
                    e3:91:b3:44:1b:4f:7d:9f:36:e3:86:95:14:ad:82:
                    58:82:87:33:c2:84:11:1e:58:d1:75:0d:1a:dd:83:
                    a6:6a:ec:84:00:66:24:3e:05:72:5e:a3:d5:88:53:
                    d8:02:97:a4:d1:9d:2b:69:9f:79:6f:7a:d0:d9:7d:
                    cb:b5:97:2d:23:3b:2c:4a:05:c1:18:d7:42:28:b1:
                    32:13:16:29:6a:d3:b5:0b:4b:c0:8b:cc:59:d2:4e:
                    78:71:e3:07:20:9b:58:6f:5b:d0:a9:19:1a:19:5b:
                    eb:e7:77:c5:12:1d:0d:3d:5e:c2:3c:b8:e4:92:12:
                    2d:02:6c:f5:b7:a8:c6:bd:3e:31:58:d1:29:3a:48:
                    f7:d5:7f:c7:aa:b5:97:e5:74:cd:3f:14:fa:28:c0:
                    3d:82:14:2d:d4:92:af:76:e0:aa:da:df:9f:a6:bd:
                    40:02:bb:4f:2e:e5:15:7b:21:81:1c:80:23:fb:d2:
                    4f:ca:e4:f1:6c:e2:ee:59:c3:61:75:47:b0:34:69:
                    a2:19:cc:ee:9c:79:1b:d6:0e:af:de:45:1f:1c:57:
                    cf:10:f4:2d:2f:b6:ea:11:8c:1c:11:3a:4f:42:d3:
                    7c:d6:e0:d3:11:67:b9:dc:c6:2d:03:e3:51:a8:c0:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:00:51:54:A1:18:FC:52:B3:6C:60:5B:24:FB:FC:77:92:A7:75:D3
            X509v3 Authority Key Identifier:
                keyid:07:92:28:FD:FA:2E:D5:30:0A:3F:69:18:96:A8:2B:E5:B2:16:EB:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5Io_fou1TAKP2kYlqgr5bIW6-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150064/802ED1FA60AE11F1A72B58CC7B47A888/B5Io_fou1TAKP2kYlqgr5bIW6-Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4c:62:a1:54:c0:5d:be:77:6b:11:71:61:17:d9:cb:82:12:
         ca:4d:d2:ea:0c:04:e9:40:6b:c9:f1:44:67:9a:cc:57:e4:41:
         29:ed:28:0b:ea:12:c2:f7:3a:15:34:64:9f:a1:19:78:5e:36:
         84:0b:df:48:1f:22:1e:f1:5a:62:15:8b:5a:17:51:48:d2:d3:
         dc:5f:c2:b9:08:14:38:8e:3f:ce:5c:c8:e2:ea:9b:78:5b:66:
         11:37:89:d5:3d:b9:94:ef:74:5d:a8:a3:0a:92:ff:08:c4:15:
         80:32:70:4f:16:1d:ce:ee:10:f7:5a:32:f7:dc:1b:28:fd:6e:
         38:10:92:cc:46:c4:70:9a:c1:79:3e:4c:3b:04:53:34:ac:b2:
         f8:62:70:3c:ba:3b:bf:ec:d8:eb:6c:b6:9d:b5:99:a5:ae:99:
         73:65:34:79:79:1c:9c:8e:ef:11:47:cc:a3:4e:7c:1b:43:41:
         39:fd:50:7b:d5:93:63:6a:30:31:18:75:fd:1b:ac:c2:c0:9a:
         9c:28:a6:3e:98:a7:47:ca:ce:cd:af:bb:b7:59:9b:f4:30:53:
         ea:0d:f5:f1:8f:b9:0a:45:6b:0d:fe:1c:eb:3a:42:93:5b:2d:
         83:e5:5c:32:e0:8a:35:a1:06:be:fa:d2:26:56:fb:f0:3d:1b:
         2a:0b:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:18 2026 by rpki-client