Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
File:                     BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json)
Hash identifier:          cUjgbT1cCEM6GISf4i1krhSqDbIHRoMoQxteBTtfvFo=
Subject key identifier:   72:4C:D3:5D:CD:AB:17:17:F7:28:E7:D8:3C:AC:3C:FB:79:43:3F:DC
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
Manifest number:          05AD
Signing time:             Sun 31 May 2026 23:53:45 +0000
Manifest this update:     Sun 31 May 2026 23:53:44 +0000
Manifest next update:     Sun 07 Jun 2026 23:53:44 +0000
Files and hashes:         1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: h/vCRWoqfMaoQb121/sEdpSA/KAyiJoBRaKGzFfHhDM=)
                          2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: Gj/DCWs1F9RZkFkqiUEW2gLhuWp6lEu8uKedmbMhlY0=)
                          3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: May 31 23:53:44 2026 GMT
            Not After : Jun  7 23:53:44 2026 GMT
        Subject: CN=6a1cca09-7d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:b4:08:3f:fc:6d:f5:b5:e1:f3:8e:ce:dd:
                    0e:c6:d7:90:14:d4:8c:43:f3:df:62:6b:fd:82:9a:
                    84:09:24:2b:7f:83:cf:9d:40:a9:e8:a8:cf:d7:2d:
                    f5:80:d7:ca:9a:ce:b1:ae:dc:fe:49:d5:f4:77:2a:
                    28:07:01:1f:b4:ad:c2:67:74:55:cf:76:bc:d8:30:
                    f4:3e:18:64:58:bf:b9:c6:43:f3:d1:6c:a4:af:11:
                    df:92:20:b3:4a:b5:96:dc:fc:0f:7e:8a:0c:3a:91:
                    4c:77:ea:9f:9c:89:80:f6:84:91:95:67:71:54:86:
                    c7:eb:ba:08:cb:5a:2a:a1:7b:02:7c:f6:31:f9:1f:
                    5b:10:71:08:b4:2e:de:05:8b:56:7a:87:9b:82:47:
                    e3:87:66:ba:3f:f2:d8:01:4f:35:7b:4c:57:8b:87:
                    0a:09:f3:98:8a:55:8f:aa:60:ae:9c:69:bd:62:56:
                    13:66:8b:f5:4e:f6:22:69:ba:6f:4d:3a:75:15:24:
                    4b:d9:f9:ef:bf:bf:7d:69:8b:8a:b7:76:3c:69:14:
                    e2:32:ca:53:d5:07:db:58:5f:1f:15:c2:83:52:3c:
                    58:4f:26:11:a5:0f:ac:cc:79:5c:46:6d:03:f8:97:
                    0d:e7:17:05:c7:fe:cc:75:f5:44:97:62:3e:52:ed:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4C:D3:5D:CD:AB:17:17:F7:28:E7:D8:3C:AC:3C:FB:79:43:3F:DC
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:9c:a0:4d:e2:d6:b5:1f:68:9c:2f:4c:8b:d7:84:c9:8d:
         c6:e5:c0:cc:b4:e6:ef:da:44:c6:f0:96:77:87:e1:ce:83:c0:
         e9:47:9d:74:c2:f8:b6:5c:5e:b3:41:bf:79:da:7f:6b:e2:c4:
         4b:d3:d8:5d:91:42:37:9e:53:eb:a8:c5:a7:87:da:a0:c5:c1:
         d5:fd:a4:0c:91:ad:72:35:f7:97:b1:7e:6a:f0:c9:94:a2:bd:
         fc:fa:2a:fe:9b:42:e7:5e:68:c6:07:dc:eb:d7:af:5c:b3:36:
         0f:a5:a6:59:44:c6:f1:cf:dc:b2:f9:5e:0e:21:4e:c0:05:7f:
         67:c7:98:85:7c:01:4c:f0:f1:9f:bd:ea:f4:5c:9e:4b:e1:c6:
         5e:05:4a:2d:77:36:af:2f:49:f6:0c:21:78:04:ca:f7:40:3e:
         7d:e7:82:cf:85:ed:97:88:c4:8e:93:84:7c:c7:28:6a:4f:21:
         c9:41:18:b7:c1:5f:02:0d:ce:93:b7:4a:ab:6c:d2:8f:e9:a0:
         23:06:e7:c9:27:b0:96:94:af:26:ac:52:ae:ea:27:6c:86:24:
         47:33:ce:b5:4f:06:71:19:cf:d8:40:12:19:35:2d:3a:f1:c9:
         5f:74:65:0c:e7:84:2c:91:8c:8a:c6:ea:b9:74:7e:f1:52:37:
         78:e1:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:56 2026 by rpki-client