Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier:          r2tsIaojt2ubv1YmMTHnYcOfxBXYEpBqEl5qA8+fmHM=
Subject key identifier:   32:99:D1:91:E8:00:9C:D6:30:BB:7A:D0:85:58:A0:17:CF:A1:DA:86
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer:       /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number:          01D9
Signing time:             Mon 05 Oct 2026 03:57:55 +0000
Manifest this update:     Mon 05 Oct 2026 03:57:55 +0000
Manifest next update:     Mon 12 Oct 2026 03:57:55 +0000
Files and hashes:         1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: DNdhYSCM3haOMzbkLGVSIbdudyM+DOYQFd8BIBQ8okE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 03:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Validity
            Not Before: Oct  5 03:57:55 2026 GMT
            Not After : Oct 12 03:57:55 2026 GMT
        Subject: CN=6ac32043-68e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:46:ee:72:c5:57:ea:c3:bc:99:b4:4c:ca:
                    7e:4c:56:64:ee:f8:03:8c:b6:fa:ad:65:fd:07:f0:
                    12:97:78:40:67:3c:c1:54:24:10:64:ca:6f:e5:c4:
                    4e:6b:c0:6e:2c:ab:60:0b:8d:13:6e:bf:06:aa:b0:
                    41:15:23:20:51:4d:f2:e1:5b:6a:da:f2:94:2e:e2:
                    6a:67:b7:84:9a:41:f1:08:88:3b:8a:34:f7:ea:9c:
                    ef:91:ea:ed:95:94:75:52:3b:b6:b5:35:2c:48:8d:
                    35:e8:31:92:2e:8c:40:fa:53:66:a1:fd:30:f0:be:
                    44:6e:c1:3f:3b:99:7b:31:f6:ad:58:30:43:ec:f1:
                    f9:e4:76:5c:35:31:29:1f:0c:13:fd:27:63:ff:9a:
                    cc:52:bd:fd:1b:0f:21:e3:6f:63:d9:dd:9c:29:e3:
                    29:e7:c7:f2:e1:dc:fb:65:ac:0a:8a:97:3f:06:33:
                    8e:5b:a7:8d:23:ca:ba:dd:91:80:19:d7:31:fd:81:
                    03:73:aa:fe:3c:68:cc:52:09:f9:4b:99:f4:19:bd:
                    e0:e4:94:31:e6:b2:60:d6:c5:13:ad:4c:2a:f8:6b:
                    5b:57:89:23:ae:4c:df:c3:a9:f7:6e:57:42:8c:9d:
                    ab:c8:19:d7:4e:ef:64:5f:ba:e8:18:3b:23:1b:8e:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:D1:91:E8:00:9C:D6:30:BB:7A:D0:85:58:A0:17:CF:A1:DA:86
            X509v3 Authority Key Identifier:
                keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:98:d3:78:63:6b:c7:84:90:88:5b:6b:9d:d5:8f:1d:69:2c:
         bb:c5:00:be:f1:71:51:d4:8d:fe:6c:33:d7:d9:6c:fb:7d:0e:
         13:91:e7:09:f0:35:af:84:b0:b1:dd:4a:10:12:51:f7:07:9b:
         68:21:93:ef:1c:3a:57:39:32:32:28:fb:01:7b:26:a0:80:c2:
         45:b6:6e:cb:7d:b1:18:e6:08:06:ba:d8:5c:fc:5c:ba:2f:04:
         80:90:91:eb:eb:1f:b7:b4:84:91:1c:74:51:30:21:dd:03:b7:
         37:90:e8:ec:d2:22:b3:a7:e4:32:28:c3:a3:ce:48:02:68:b4:
         98:50:fe:79:13:95:4e:01:71:5c:cb:1e:4f:8e:e6:7e:1a:f5:
         52:02:12:dd:67:a3:00:6f:b3:5c:5a:1a:b1:6d:5f:29:32:24:
         6a:86:7b:79:42:05:c4:63:83:2d:60:67:cb:ad:77:2e:42:61:
         fe:7b:21:f4:16:5d:fa:fa:5a:3a:62:c1:68:ee:e8:23:44:62:
         4a:17:cb:2a:4f:09:c3:bd:c6:79:d1:5d:b3:f9:c5:36:31:eb:
         4d:8b:03:c3:d5:a8:c0:c7:06:55:62:e0:e2:f2:fe:8a:63:b4:
         7c:62:72:f5:13:ca:a5:cf:6d:3f:9a:83:77:70:5a:43:d5:19:
         54:7b:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:56:36 2026 by rpki-client