Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File:                     BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier:          AmGDYF39jlD2auGWb1MACimrqUe+vvhlepgiT7TOMpM=
Subject key identifier:   EC:49:70:52:84:A1:65:4B:67:86:57:F2:51:56:6D:5A:0F:D8:73:40
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       0679
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number:          065E
Signing time:             Fri 04 Sep 2026 19:07:16 +0000
Manifest this update:     Fri 04 Sep 2026 19:07:16 +0000
Manifest next update:     Fri 11 Sep 2026 19:07:16 +0000
Files and hashes:         1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: aRjrQvQtYSWSX1r5owNZMotuNbzU4nQEsyt8N0eAhIQ=)
                          2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
                          3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
                          4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
                          5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657 (0x679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: Sep  4 19:07:16 2026 GMT
            Not After : Sep 11 19:07:16 2026 GMT
        Subject: CN=6a9b16e4-3e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:d9:5b:91:fc:43:31:a4:de:5d:19:6e:d9:
                    59:71:f5:25:9c:bd:17:9c:0c:4d:4a:26:14:36:4f:
                    f5:bd:65:76:68:fd:8f:91:04:92:4c:87:bf:6c:c7:
                    c6:21:87:5e:7f:f4:20:bf:5d:e6:9e:9e:2f:fd:ba:
                    6e:b4:db:8d:f0:29:ca:5b:c9:25:e2:eb:d3:1f:55:
                    ad:59:b3:b6:28:c5:67:7f:eb:97:01:c2:f4:5d:68:
                    1e:b5:2e:5c:a5:25:89:0f:ab:18:2d:81:b9:5c:f5:
                    2a:88:2c:1e:e5:0d:8f:d9:75:56:f6:4e:aa:03:50:
                    c0:a1:a6:29:0c:a3:6c:5f:83:35:61:90:47:6c:d7:
                    cc:c9:2e:e5:40:f2:f5:8b:d3:6a:76:e7:12:c5:d2:
                    be:a6:b9:a0:19:c9:85:f2:33:d7:6b:26:0e:34:dc:
                    9d:e5:e0:ae:34:ae:71:1c:f7:b6:93:23:9f:34:71:
                    c4:83:05:2f:20:18:67:f8:98:63:56:72:12:cb:16:
                    79:90:0e:9b:d7:12:d0:13:d6:b8:c7:43:a8:fb:5c:
                    13:55:a0:00:cc:92:a6:1f:e0:f1:c1:8d:9a:67:4e:
                    88:3b:33:df:71:97:40:ea:f4:a9:d2:87:10:e3:2b:
                    84:9f:68:80:ec:6b:5d:29:7e:ec:93:bf:2c:ab:20:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:70:52:84:A1:65:4B:67:86:57:F2:51:56:6D:5A:0F:D8:73:40
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:41:1e:fd:44:29:24:c1:92:86:ce:f5:5c:fb:e8:86:5c:b8:
         0a:fe:55:e3:52:2f:be:1c:09:4f:97:d9:59:82:bf:da:f6:6f:
         12:64:9c:2c:04:f3:00:89:e4:df:1e:e4:ba:9b:4f:19:95:d8:
         ba:e1:d5:f9:af:bf:af:32:9d:57:01:58:df:e2:10:43:a8:98:
         74:21:cf:24:24:31:7a:21:a9:03:b2:14:91:e2:b4:fb:e3:db:
         e7:e7:c5:2c:18:05:6d:dc:6c:a1:68:aa:4c:07:85:3f:89:24:
         6c:65:44:a9:40:8c:0f:98:90:2e:bd:40:55:b6:ec:8f:ae:f0:
         49:82:14:cf:62:82:fd:a3:d2:ef:b1:ce:e8:c1:e6:72:72:8e:
         ed:77:0b:02:07:a5:1d:79:9e:f8:c6:89:c4:96:ad:d0:fc:46:
         39:7a:c0:12:76:6a:51:ac:3c:98:4b:98:81:ca:96:a1:f2:27:
         45:58:1d:49:c4:62:99:07:25:cb:47:07:9e:79:78:2e:d1:e0:
         83:84:b7:94:58:46:5b:b7:b3:c2:01:bb:a2:e2:44:8a:29:3a:
         8b:fb:d2:00:6e:a0:95:31:ef:68:d4:30:3c:63:05:82:b0:b1:
         ef:6c:55:02:b8:f5:b6:ab:a3:1a:7e:98:02:c3:fd:90:65:e7:
         80:e6:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:45:01 2026 by rpki-client