Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
File:                     Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json)
Hash identifier:          ogFdbwCBob706psHM/4k66HDz6RNkezKLSTs5WmR0D0=
Subject key identifier:   94:ED:E4:D5:7D:C2:15:B7:53:98:26:20:C0:50:C4:D4:21:53:37:3D
Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC
Certificate issuer:       /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
Certificate serial:       08FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
Manifest number:          08CA
Signing time:             Mon 12 Oct 2026 20:48:51 +0000
Manifest this update:     Mon 12 Oct 2026 20:48:50 +0000
Manifest next update:     Mon 19 Oct 2026 20:48:50 +0000
Files and hashes:         1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: aLoZuyEQNOJ3rlttwUnRXRoX9dLhslLDN7KoTujmNAo=)
                          2: 6228B5D67C3311F1A4365A405EA30FBC.roa (hash: lm6a6sSlcGo7UiIokAJc0to+ipQDBzDwod6EvR7ZUXs=)
                          3: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: GhfbbBIsZM+E4EuVHL/xJ2Fu2eRbGFvM+U1LBFCjiS0=)
                          4: A576C5087C3311F1890EBC415EA30FBC.roa (hash: OOm/rpCNOVEzbs5MbTS+KE9MkYUOeHrbZ+HUs/7R0Ao=)
                          5: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: MCGnucdcznK4z6pNnNE6+XPxuPG/TfxwroCFCdKryF0=)
                          6: 9D0A5048B0B711F1A935775B6511F970.roa (hash: TqqLO6ohhVV1eoFj1YiCKqeJJ+gDVg7wIfsfChMSkuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl
                          rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 20:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2301 (0x8fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC
        Validity
            Not Before: Oct 12 20:48:50 2026 GMT
            Not After : Oct 19 20:48:50 2026 GMT
        Subject: CN=6acd47b3-1bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:08:8d:64:90:c6:3d:52:fa:28:02:63:6e:
                    99:13:33:3a:de:b5:99:15:d2:11:32:07:e1:51:23:
                    1c:30:40:b3:56:96:0b:13:7e:5e:d1:7c:e8:5a:81:
                    56:e9:e7:43:95:1b:46:0d:35:9b:2c:3c:52:e8:55:
                    6b:50:b4:1b:bd:0a:26:5f:9e:b2:cc:98:74:ae:75:
                    b8:91:ef:d5:32:e4:32:cc:66:ad:0b:97:ba:2e:4c:
                    21:21:13:2d:f1:19:06:87:41:8f:2d:05:75:15:9e:
                    9f:f1:22:60:9a:9d:18:14:6c:3e:23:75:90:84:52:
                    70:f6:c7:ed:5d:20:ec:e1:d9:d3:ad:c2:19:ef:55:
                    87:c7:84:3e:ad:cd:bc:07:03:f0:a5:5d:94:9d:13:
                    74:f3:38:ff:b4:45:44:94:5c:ae:74:32:c3:b3:60:
                    35:77:17:77:46:49:36:8a:3d:0f:6b:7c:8d:54:9c:
                    87:2e:91:05:8b:24:9f:90:f8:a9:94:9b:53:8e:32:
                    ed:fb:9d:18:df:36:84:66:ef:7d:7a:56:ce:04:75:
                    9f:72:34:74:b5:62:1f:a7:f4:bf:7c:e1:df:6a:95:
                    4b:66:c1:56:a2:b1:e7:1e:1b:e9:8d:a8:9f:eb:71:
                    b7:39:a0:9d:17:15:1b:9f:fc:b7:b1:19:77:f2:96:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:E4:D5:7D:C2:15:B7:53:98:26:20:C0:50:C4:D4:21:53:37:3D
            X509v3 Authority Key Identifier:
                keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:43:87:98:46:0f:9a:0f:cf:8b:a9:ac:ab:8c:61:64:1f:16:
         77:2d:ae:bb:90:9d:bc:b0:9c:72:a6:11:87:df:7d:43:39:fa:
         b2:3a:a2:90:fd:5b:8b:79:d1:1d:e5:82:1f:04:9e:64:f5:47:
         f7:19:8f:3b:48:da:9d:74:66:0a:8f:73:0a:dc:53:e7:40:9e:
         6a:e4:e3:a3:a0:b3:2d:0f:2a:26:d9:91:dd:05:52:ba:6a:f5:
         d9:61:fc:bb:18:40:4c:8f:cd:4e:e9:11:43:c0:c6:74:ff:17:
         ca:74:c0:ac:be:cc:19:b0:cf:31:86:0e:09:34:e8:de:9d:b5:
         22:05:b6:cd:23:28:25:6b:7d:96:0e:60:0b:3c:f0:a5:9b:c8:
         6a:9f:91:1d:27:4e:e6:7e:3d:56:69:b2:5c:d6:7e:aa:51:f4:
         9c:5d:98:22:26:e0:f7:ab:2c:e7:6a:37:9b:0e:ca:09:02:33:
         85:71:dc:68:30:92:24:59:c5:cd:00:3b:4d:30:32:c9:cf:68:
         bd:49:cd:71:cd:08:47:bb:3d:8e:9e:83:15:2b:75:0f:9b:98:
         35:08:46:87:7b:02:b7:42:93:9c:b8:90:c6:57:84:8b:46:9f:
         09:15:fc:7d:32:1b:49:6e:7d:63:a6:ec:3a:88:af:e8:90:e8:
         d5:0c:bb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:11:19 2026 by rpki-client