Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File:                     BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier:          +NDcBxDBDsHcbQROHHmX/ZcVTN/ZVCPAg/yayJcVF6k=
Subject key identifier:   FD:8A:00:9D:06:38:4E:23:1D:61:FB:99:A6:FB:03:6E:85:94:CF:8C
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number:          0676
Signing time:             Thu 22 Oct 2026 19:15:18 +0000
Manifest this update:     Thu 22 Oct 2026 19:15:17 +0000
Manifest next update:     Thu 29 Oct 2026 19:15:17 +0000
Files and hashes:         1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: EswDqS0PqRKmR8Y5NxG2JamyeBnR3N0oR4wYI7eQRds=)
                          2: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
                          3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
                          4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
                          5: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: Oct 22 19:15:17 2026 GMT
            Not After : Oct 29 19:15:17 2026 GMT
        Subject: CN=6ada60c5-7af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:2d:d0:6f:e2:5d:e2:c4:3f:a3:d7:f3:76:
                    c7:11:dd:cf:b8:2e:a6:39:90:6f:6c:fa:23:7b:1f:
                    b9:ca:5b:e1:6a:f4:e6:ad:38:5f:e3:09:26:2e:18:
                    f4:95:e2:4f:e0:ae:33:cf:8d:15:1b:b4:04:05:f3:
                    dc:c5:4a:10:b4:b7:26:fe:6a:5a:9d:72:85:d2:1f:
                    ac:0e:3a:d5:83:b6:bd:0f:f9:d0:25:de:45:12:4f:
                    39:6c:ba:38:5f:e7:74:0d:f0:83:4c:2e:00:3c:7a:
                    84:ed:a6:18:5c:19:41:10:94:2d:ee:b9:d3:5a:9e:
                    1f:f9:82:c0:2e:94:9a:a9:5c:7c:52:f8:7e:5a:85:
                    ca:c8:61:b8:17:26:88:da:ba:49:9a:1d:c1:1f:ce:
                    91:04:f4:d8:a6:94:c8:d6:53:55:08:c9:17:d1:5a:
                    a9:70:e9:80:b6:12:ac:04:0c:c8:54:e7:f3:ec:96:
                    fd:b4:9e:e4:9c:42:d2:20:39:05:70:52:ad:1d:d3:
                    a7:8a:c6:36:ca:25:9e:d4:6c:5b:33:87:9e:a1:ff:
                    59:ee:7b:86:9e:66:fd:a2:59:55:54:39:42:17:9c:
                    3b:68:95:19:44:fa:c5:9a:91:09:47:58:8d:a8:7a:
                    d6:f8:d8:d7:ae:76:fd:ca:72:e8:a8:b1:81:99:8e:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8A:00:9D:06:38:4E:23:1D:61:FB:99:A6:FB:03:6E:85:94:CF:8C
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:69:25:c8:f3:f2:26:3e:89:61:ad:61:74:7d:23:67:11:
         2f:63:c2:44:e6:bf:08:58:a7:77:ed:47:01:08:86:6c:e8:99:
         37:df:a4:2b:f3:56:26:f8:84:6c:db:bd:65:8c:10:96:f5:ec:
         df:1b:27:23:21:15:38:46:ce:16:ec:f4:bc:73:d0:6c:c7:95:
         d0:10:f1:cb:60:84:67:c7:df:52:e6:07:bb:79:45:22:6b:19:
         55:da:90:6d:fb:f3:c6:7a:f4:e8:29:f7:f9:27:d9:e7:11:bb:
         42:fd:1c:a9:45:fd:d5:97:54:54:98:49:14:a8:a0:11:fd:99:
         6d:cf:05:fd:b4:75:b6:47:3e:e2:3a:ff:53:1a:34:d5:f9:4a:
         2b:a1:b2:70:c2:a0:55:39:d0:62:f8:03:1b:d8:e1:d6:9b:02:
         01:57:56:30:a3:9a:95:22:f4:ca:89:d9:d0:5b:fc:8e:b5:fe:
         23:f2:b4:2d:93:23:76:c3:63:2e:31:21:93:84:7a:88:43:f4:
         1b:70:82:ec:e9:82:34:4e:02:91:9d:03:c9:d3:91:d1:94:d8:
         38:b2:1b:77:26:8a:4a:ee:41:b6:77:d1:fd:20:55:05:d3:8e:
         27:48:9d:7e:71:04:f8:19:ea:5c:62:8e:32:61:43:d7:56:8d:
         ad:e7:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 05:29:14 2026 by rpki-client