Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File:                     BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier:          fcLBiglUu0qG3sz7hfFMhfQ7kDUmpFKAuZsvffrB4cM=
Subject key identifier:   50:42:B1:FC:5A:8C:90:05:69:AE:79:8B:E2:C3:DB:C6:4F:5F:88:20
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       0222
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number:          0219
Signing time:             Sat 03 Oct 2026 03:38:32 +0000
Manifest this update:     Sat 03 Oct 2026 03:38:32 +0000
Manifest next update:     Sat 10 Oct 2026 03:38:32 +0000
Files and hashes:         1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: vdxFvP0iS2e8knSo1qqHT894XEmXCQdBPy/JhI4+10A=)
                          2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5Gtf7oujjTH1/9TpM6Po8VolgFiUghsVEkgZJ7GcJcc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Oct  3 03:38:32 2026 GMT
            Not After : Oct 10 03:38:32 2026 GMT
        Subject: CN=6ac078b8-0541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:eb:98:b2:00:84:e9:2f:71:dc:19:d7:30:40:
                    dd:ff:05:43:8a:74:2d:2f:e9:df:45:98:8b:e2:e8:
                    cd:63:e3:42:e9:08:d7:9e:6f:8b:03:8d:fb:f8:63:
                    0b:09:1c:89:8a:df:58:6b:42:8c:8f:4f:f6:05:64:
                    76:38:6e:87:90:cb:6d:96:df:7c:05:2e:89:46:3d:
                    40:ce:32:4f:ac:3b:72:48:58:e6:b5:b8:42:36:66:
                    aa:ce:19:12:68:81:b7:48:63:86:66:63:0a:66:39:
                    fd:02:3a:e9:76:4f:ed:20:1f:b7:62:bd:b3:19:a4:
                    a8:77:40:cf:02:9a:4c:ed:b9:45:78:51:c4:8a:36:
                    7c:c2:31:65:15:16:9f:4a:7c:27:f2:2d:b6:34:86:
                    68:a3:68:cb:24:45:a8:36:8b:c4:30:f2:17:63:6a:
                    84:68:50:00:b6:54:7c:11:bf:cc:32:6c:4c:fc:88:
                    06:c2:b4:f6:1b:5c:eb:3f:bf:1b:07:98:e4:b8:6a:
                    94:f4:05:16:68:99:35:3b:d7:41:9b:c9:87:f5:ff:
                    38:c9:dc:80:de:d3:dd:2a:90:02:a6:d6:38:fd:81:
                    a4:c7:b2:7b:58:e8:03:0a:d5:c1:61:5e:d2:1e:de:
                    83:18:7e:06:e3:a4:27:0e:ac:d7:89:cd:d3:b3:a2:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:42:B1:FC:5A:8C:90:05:69:AE:79:8B:E2:C3:DB:C6:4F:5F:88:20
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:55:44:c3:b2:94:4d:14:82:1c:e1:da:4b:83:0b:4b:a4:dc:
         ad:07:7b:1c:64:5d:4d:80:46:62:70:c7:7b:12:65:73:98:de:
         de:80:0c:f3:31:78:86:d7:d3:ac:05:01:e1:2a:a5:7a:d4:c9:
         6a:4e:95:96:51:25:6e:d5:05:78:48:29:dd:c9:84:64:7b:3a:
         79:f0:88:42:f2:71:54:78:2c:03:a4:91:11:3e:74:00:d4:28:
         b3:8e:8a:1a:61:a3:20:00:f7:78:d5:c2:91:a3:06:8c:cf:20:
         55:4a:0c:73:36:42:c3:f7:69:1a:70:39:30:0e:d7:68:92:28:
         24:a7:29:78:0e:54:b4:08:b8:8e:e4:0e:36:d5:f3:7e:41:ff:
         cd:57:09:5c:c8:d3:3b:b7:25:d3:06:d5:6d:3c:d5:83:c0:23:
         da:cc:1f:9c:f2:fb:52:cd:1b:75:6b:b8:02:36:ae:55:49:82:
         b8:5c:82:db:17:04:22:c4:27:61:85:fa:23:88:63:8e:05:de:
         f9:b2:4a:5d:7e:d9:c3:f0:6d:b4:25:93:4a:1e:23:aa:0b:b3:
         48:37:b5:af:a4:94:9d:2f:7d:2b:18:a2:9b:b8:0e:55:4c:9c:
         48:37:89:93:19:f1:11:bd:d0:40:f0:93:8b:35:fe:8a:b5:e5:
         8c:cd:9f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:26 2026 by rpki-client