Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          HkX4iXPq1ia3pKh08coUnsTAmncnh4raNAhQMME0C2Y=
Subject key identifier:   0B:28:36:37:B1:84:EA:9D:1D:EA:20:F2:66:63:EE:6D:40:63:80:78
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       0628
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          05F6
Signing time:             Sun 18 Oct 2026 23:08:24 +0000
Manifest this update:     Sun 18 Oct 2026 23:08:24 +0000
Manifest next update:     Sun 25 Oct 2026 23:08:24 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 7Nrw3Ip6Ov89Ff8AaSHemRxk7/uXMM7fieNfsWeBBp8=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
                          3: F10B6BDAB15E11F19966FC595911F970.roa (hash: Sk5NHBlI9Hm/01FV+Wxh8KFWaVLMatU4jdt2wMLVel4=)
                          4: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
                          5: F2CC3FB6AC5A11F1945B3E894711F970.roa (hash: fOItdik6vtxYgosTC2RuuMa1JaHzIaMudzCvyl8gM+0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 23:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Oct 18 23:08:24 2026 GMT
            Not After : Oct 25 23:08:24 2026 GMT
        Subject: CN=6ad55168-184c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:8d:80:ee:37:cf:7d:fc:45:31:de:b7:28:
                    aa:2a:71:dc:9b:38:e4:f5:ba:57:97:b5:bb:bb:df:
                    a2:7e:0e:6e:d7:6a:57:d4:f9:66:6a:cc:e7:ba:93:
                    6b:98:29:06:99:8e:09:0d:ba:a4:ef:e9:8a:3a:4b:
                    96:61:17:b3:64:a9:89:dc:db:a0:75:bb:3e:d9:8e:
                    c4:99:7b:85:b2:e9:ca:f3:c6:dc:08:89:38:0a:0c:
                    51:f9:f4:10:f2:9c:61:12:80:92:a6:8b:17:de:53:
                    39:7f:f4:68:42:94:21:11:1d:89:26:46:0b:0b:52:
                    36:11:1d:ff:77:7c:b4:dc:b1:65:1d:ce:e3:58:35:
                    1a:d2:7c:c9:5b:42:2b:99:af:e7:50:39:25:69:6b:
                    ed:79:34:c1:11:79:6f:91:da:4f:4a:72:9b:a9:11:
                    80:57:14:5d:6a:55:43:7f:6c:db:a2:a4:a9:9c:39:
                    86:e2:24:fb:a5:06:7a:45:f1:03:31:22:a2:52:fe:
                    5c:db:48:45:bc:23:fc:6d:96:8b:34:3c:bc:4d:58:
                    da:87:4b:08:f2:26:89:02:d8:d7:ec:b8:41:12:5d:
                    f0:c2:3d:14:81:a3:8b:37:b4:82:36:9e:90:e7:ad:
                    25:7e:6f:65:22:fc:1c:31:78:55:f8:e2:f6:45:d0:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:28:36:37:B1:84:EA:9D:1D:EA:20:F2:66:63:EE:6D:40:63:80:78
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:ea:5f:95:52:bc:7d:f7:19:97:ad:57:85:67:af:00:5c:
         43:b7:90:c7:fb:4d:ce:ae:f0:fd:57:89:95:0b:1a:7c:56:79:
         c9:ac:c3:5d:38:24:dd:65:ba:2e:68:09:5f:ff:f6:7e:ed:b2:
         7d:4a:c2:4d:a7:83:b7:3b:05:8c:9c:63:e0:de:5c:ae:16:49:
         2f:d6:4d:7e:e2:c2:a4:88:d0:fc:45:d8:1b:bd:e2:a2:b6:9d:
         5b:b4:1f:82:23:85:3f:d8:ac:37:c0:08:b8:f4:c4:b1:84:91:
         ee:32:2f:13:f6:f6:39:72:95:30:c6:31:32:00:fb:fa:87:89:
         18:ba:61:5d:4e:0c:09:98:05:61:88:2b:4d:8b:03:bb:d5:f0:
         34:82:ea:2a:2e:fc:64:4b:5a:bf:fb:b6:fb:9e:ab:52:64:09:
         bd:71:8b:2e:22:8c:99:28:f3:76:a4:b2:19:56:4f:29:fd:44:
         a2:60:b9:ff:7c:af:76:b8:0c:87:5c:69:45:ed:65:9b:d9:7a:
         1f:a3:71:0b:92:72:23:c0:4d:4b:cb:87:63:f3:ce:86:21:13:
         c3:d6:74:2b:03:bb:c9:e8:0f:5b:47:90:05:50:e5:49:55:8e:
         b0:21:37:52:9f:7c:57:6d:2c:96:c3:c8:7d:be:0c:b1:9d:aa:
         09:2a:75:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3
OTI5Mzc2N0EwHhcNMjYxMDE4MjMwODI0WhcNMjYxMDI1MjMwODI0WjAYMRYwFAYD
VQQDEw02YWQ1NTE2OC0xODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/uNgO43z338RTHetyiqKnHcmzjk9bpXl7W7u9+ifg5u12pX1PlmasznupNr
mCkGmY4JDbqk7+mKOkuWYRezZKmJ3Nugdbs+2Y7EmXuFsunK88bcCIk4CgxR+fQQ
8pxhEoCSposX3lM5f/RoQpQhER2JJkYLC1I2ER3/d3y03LFlHc7jWDUa0nzJW0Ir
ma/nUDklaWvteTTBEXlvkdpPSnKbqRGAVxRdalVDf2zboqSpnDmG4iT7pQZ6RfED
MSKiUv5c20hFvCP8bZaLNDy8TVjah0sI8iaJAtjX7LhBEl3wwj0UgaOLN7SCNp6Q
560lfm9lIvwcMXhV+OL2RdCoSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsoNjex
hOqdHeog8mZj7m1AY4B4MB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx
MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp
SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAe83qX5VSvH33GZetV4VnrwBcQ7eQx/tNzq7w/VeJlQsafFZ5yazDXTgk3WW6
LmgJX//2fu2yfUrCTaeDtzsFjJxj4N5crhZJL9ZNfuLCpIjQ/EXYG73ioradW7Qf
giOFP9isN8AIuPTEsYSR7jIvE/b2OXKVMMYxMgD7+oeJGLphXU4MCZgFYYgrTYsD
u9XwNILqKi78ZEtav/u2+56rUmQJvXGLLiKMmSjzdqSyGVZPKf1EomC5/3yvdrgM
h1xpRe1lm9l6H6NxC5JyI8BNS8uHY/POhiETw9Z0KwO7yegPW0eQBVDlSVWOsCE3
Up98V20slsPIfb4MsZ2qCSp1eg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:49:30 2026 by rpki-client