Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File:                     0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier:          aG2yOKIAyuyfQ6hvbBIHC7ouxRYP3xSKX2DaermjmYs=
Subject key identifier:   7E:DC:F5:67:52:CA:2A:95:A6:C4:D4:51:07:B5:87:ED:12:D2:66:20
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number:          09D3
Signing time:             Tue 08 Sep 2026 19:58:13 +0000
Manifest this update:     Tue 08 Sep 2026 19:58:12 +0000
Manifest next update:     Tue 15 Sep 2026 19:58:12 +0000
Files and hashes:         1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: WvjBY12O9sBiQY42ep9cF9IghAVvSKYk1xar+Guhfj0=)
                          2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: F7WyOekFgI8ivePs6ZQwLbNz0QkuTR1HhVS0Z6YFZWs=)
                          3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: CYtTamBw2WXxPcIM3rrSk3dBYaMWIxNwfk91+jxjXp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: Sep  8 19:58:12 2026 GMT
            Not After : Sep 15 19:58:12 2026 GMT
        Subject: CN=6aa068d5-5ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:e7:8c:7a:eb:c5:78:d4:a4:f1:36:c4:e4:
                    d5:74:5a:db:02:08:4d:ad:b2:6e:60:e7:93:f2:87:
                    64:4f:02:10:e2:09:17:ca:57:6b:c1:b1:4f:7a:0f:
                    8b:7d:c2:6b:d3:7d:d7:73:91:fd:93:3e:e3:05:9c:
                    30:d5:09:36:70:a7:07:c0:aa:46:bc:b7:6c:23:32:
                    d9:c4:9c:5d:f4:8f:db:3e:67:9c:70:4e:75:b4:aa:
                    ec:ae:37:d0:35:bd:a2:f6:ee:f9:33:32:0d:32:dc:
                    be:bc:4c:a4:8d:fc:f9:e8:5d:48:6c:b9:a7:c8:56:
                    9e:5c:51:42:3f:b2:c3:1e:6a:14:a6:78:e0:8c:01:
                    b4:29:89:11:6f:26:7b:81:5b:11:6e:5c:e8:92:1e:
                    77:66:27:54:58:3b:ea:c0:1a:af:41:91:4e:7b:25:
                    38:e9:1e:46:0b:eb:3a:3d:16:b3:b5:a1:0c:92:94:
                    f1:bb:58:b7:5b:19:bb:17:47:cd:dc:43:4e:19:8d:
                    89:73:a8:f0:4a:e0:4f:0e:93:21:b4:8f:8f:29:b4:
                    d6:b3:b7:71:2d:a0:3f:04:0f:a2:40:49:53:8c:78:
                    c8:3f:9c:50:b4:af:74:e0:ae:3b:b0:60:63:60:bc:
                    4f:d1:5c:50:9f:35:6f:04:62:30:31:cc:3d:4d:60:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DC:F5:67:52:CA:2A:95:A6:C4:D4:51:07:B5:87:ED:12:D2:66:20
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:21:84:f8:4a:71:b1:69:92:b4:1b:17:19:f5:d4:7b:c8:c2:
         fa:c7:95:33:71:e6:e6:f9:6b:19:75:84:e7:25:3a:17:bb:ca:
         ba:72:dc:12:73:d0:54:de:91:41:85:68:ba:6d:92:ff:ab:30:
         d7:4a:c8:56:07:8b:df:f9:97:c7:72:aa:b1:a7:e8:fe:b8:1d:
         c5:0c:2f:30:7c:ce:3a:e4:3f:42:3d:a0:5d:9d:57:88:9b:84:
         f4:72:21:2b:f6:85:96:e2:63:41:7c:ef:59:fd:83:c7:ce:29:
         93:50:0c:18:7e:a6:5e:48:97:58:b1:11:2a:71:af:8f:bd:be:
         d1:d5:ea:db:b8:40:f4:ab:96:9e:2c:31:2e:1c:7e:0a:dc:df:
         6b:47:3f:c4:18:4d:1c:f8:de:91:97:12:dc:39:d6:3e:ee:ae:
         17:eb:2a:8a:88:22:69:76:dd:9b:c4:9d:8f:2d:f9:e4:0f:9e:
         b5:ee:76:3a:f5:d4:88:03:ad:dc:3a:ae:4c:ed:08:3d:62:cf:
         08:a2:5f:73:30:cf:aa:d9:12:16:82:81:57:b9:b3:6d:ca:90:
         7e:f3:1c:e5:82:3e:ca:ce:ca:ba:0c:6e:59:74:34:f8:33:0d:
         e3:1a:59:06:b0:58:b9:54:22:92:6a:e7:ad:ff:cb:f1:bf:cb:
         28:5e:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:30:52 2026 by rpki-client