Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          +xf41CiC4/FuI851VcD9XMiATANJ3hoPJVRmCOZw6Fw=
Subject key identifier:   45:EE:30:10:D7:D5:CA:C8:C4:57:C7:CE:A9:6C:68:2D:18:DD:FE:03
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          BA
Signing time:             Sat 19 Sep 2026 07:01:24 +0000
Manifest this update:     Sat 19 Sep 2026 07:01:23 +0000
Manifest next update:     Sat 26 Sep 2026 07:01:23 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: 9BnyYKb2jHBmtBai+SRQHpvhzNh3wZMnjGosPdTHRd8=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Sep 19 07:01:23 2026 GMT
            Not After : Sep 26 07:01:23 2026 GMT
        Subject: CN=6aae3343-e550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b6:7e:9f:da:92:2d:30:3b:fd:4b:18:82:67:
                    56:af:db:e8:af:81:6b:ef:c5:99:f0:86:4d:fd:71:
                    2f:11:b4:9c:8b:19:98:3d:bc:e7:aa:3f:68:dd:a8:
                    53:a3:0d:88:1b:67:c3:47:ba:bf:4e:e8:aa:03:49:
                    4f:2d:a3:8c:35:6d:f8:ba:92:d8:f7:7b:76:a2:0f:
                    14:33:a0:b0:80:73:a1:ae:b8:66:d6:0b:6c:78:9d:
                    9b:77:bb:3f:37:0b:a1:43:d8:67:b4:12:42:a4:81:
                    83:dd:a1:d7:c1:a1:11:c1:95:1d:d4:00:fb:b6:7b:
                    88:33:5d:c2:fb:6b:d7:17:6e:d5:25:d6:c6:8a:87:
                    43:b1:38:42:29:38:3d:bc:da:53:8f:ef:12:2a:8e:
                    e2:da:fd:91:6d:60:3e:1a:38:02:7d:66:95:3f:76:
                    7f:00:03:b1:e9:de:a1:2b:60:91:f5:5c:eb:13:e5:
                    87:3f:8e:72:ea:3b:bf:9a:76:81:bf:c4:81:80:7c:
                    cb:6a:cf:4d:9e:d3:c3:de:a8:39:e0:38:47:ec:40:
                    8a:92:31:e9:69:25:24:8d:88:23:37:0c:8e:14:d4:
                    f2:fa:09:89:4d:4d:fa:40:34:0a:be:99:75:c3:e0:
                    04:a8:06:d5:84:3a:7e:02:60:75:14:f7:6f:0f:fe:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EE:30:10:D7:D5:CA:C8:C4:57:C7:CE:A9:6C:68:2D:18:DD:FE:03
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6b:73:73:29:09:d0:c2:11:59:6d:d7:68:c1:aa:58:55:95:
         f5:9d:58:92:0d:1a:18:53:00:7b:32:8b:1d:a7:41:d4:36:d1:
         80:d9:ce:ea:23:a4:9d:97:2b:ad:d8:ba:8c:3d:cc:31:4b:c2:
         d2:77:50:26:85:de:51:2b:61:4b:90:b7:ac:9e:4f:89:60:bb:
         fd:da:c0:86:a4:36:65:d0:51:b9:46:03:a0:82:f2:7e:68:ff:
         46:3d:48:fe:ef:23:1c:52:56:71:1c:b3:68:7f:d8:bb:34:c0:
         b7:50:8d:a2:52:2b:fe:df:6c:cf:31:96:18:60:e2:f3:df:a9:
         57:ef:a2:d9:d8:71:06:9f:65:44:a5:6a:c0:05:9b:16:4d:b4:
         68:83:f5:31:c6:6f:b2:e8:56:98:3e:46:6b:b2:52:8e:3d:2c:
         40:19:ca:21:32:ad:6d:3e:75:d6:46:9e:6e:1f:b6:32:a7:15:
         e6:ae:c3:e5:94:14:7c:6e:49:f8:b9:44:b0:e1:51:c1:11:2f:
         2a:cb:16:14:cc:35:3f:6b:5b:4c:07:be:50:e7:36:2b:e2:b7:
         42:2a:09:4f:05:4e:5b:52:72:ce:f3:79:36:cb:9e:e7:27:cb:
         52:a3:d7:87:f7:5a:49:2b:31:d6:a8:83:9d:b9:c7:f0:bc:6e:
         41:82:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:13:36 2026 by rpki-client