Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
File:                     9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json)
Hash identifier:          twVF8obSILUnZvVE8/f3kqozNuHArMEgOCZEltV1dps=
Subject key identifier:   EB:57:32:BF:27:56:8A:52:7E:C0:1D:B9:19:BE:AD:7A:99:D8:33:F6
Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Certificate issuer:       /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Certificate serial:       01A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
Manifest number:          01A0
Signing time:             Wed 19 Aug 2026 04:48:46 +0000
Manifest this update:     Wed 19 Aug 2026 04:48:45 +0000
Manifest next update:     Wed 26 Aug 2026 04:48:45 +0000
Files and hashes:         1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: /oQWnk/N87qHBcwtFXfklUkv1QkNHj8tSnFuYq8R4cU=)
                          2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: SnIg7jkVKoNtfhOzS+GGzcDFetRrORpxHiWrxQCh8as=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 422 (0x1a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
        Validity
            Not Before: Aug 19 04:48:45 2026 GMT
            Not After : Aug 26 04:48:45 2026 GMT
        Subject: CN=6a8535ae-1c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:78:83:97:60:d9:77:21:4d:ba:c7:34:1e:
                    10:07:ab:b5:4c:12:af:5c:f6:0c:0f:86:38:85:a3:
                    5a:f8:3b:34:18:43:9a:63:9c:ba:24:7d:85:4a:d1:
                    86:ea:80:4f:8b:ca:1d:a0:3c:c8:14:96:aa:5f:39:
                    db:b6:e5:c0:99:33:9f:72:74:7c:dc:05:ec:92:77:
                    6c:08:fd:51:d6:92:79:35:f9:19:ac:5b:4b:bb:72:
                    d0:c3:fc:7c:b3:7c:a8:01:fc:65:2b:91:12:a4:09:
                    a6:8c:48:e1:0e:33:ee:89:8a:f9:3e:17:d2:22:a9:
                    f0:9d:f7:cc:2c:28:28:c6:69:6c:70:de:f3:c8:63:
                    8f:9e:93:4f:12:ab:fe:e2:94:a5:a7:0b:86:82:2b:
                    ca:76:4d:8f:02:0b:a4:ae:57:78:d8:e5:d6:6f:94:
                    a2:79:3c:c4:a2:6f:98:c0:8d:38:01:5f:1f:22:22:
                    60:03:6e:d9:dc:1e:60:f9:e3:58:30:bb:cb:d3:06:
                    d9:53:25:4b:ee:ac:d8:eb:de:66:0b:9b:1c:4f:81:
                    0c:f3:00:36:ac:02:53:9e:cd:3a:6d:0c:00:e9:9e:
                    48:ff:e7:4e:30:4d:0a:84:9e:1d:b7:84:86:7b:26:
                    71:e3:c6:6c:9c:04:08:30:06:c5:87:1e:8d:7a:4f:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:32:BF:27:56:8A:52:7E:C0:1D:B9:19:BE:AD:7A:99:D8:33:F6
            X509v3 Authority Key Identifier:
                keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:4e:ee:d8:0c:39:12:55:d5:a5:a0:18:4a:78:c4:a2:ab:
         1e:2e:2d:5e:8c:80:cf:31:45:b2:09:91:22:2f:c2:45:5a:dc:
         fc:f5:c9:3b:ec:bb:24:9c:90:cb:9c:a5:4b:ef:0d:51:13:31:
         80:ef:5a:6d:19:55:54:77:82:58:44:84:03:21:e0:14:cc:11:
         d9:5f:a8:ae:10:06:8d:30:cc:b9:2e:fd:57:a2:cf:e8:0e:c3:
         9e:ac:c3:13:93:8a:20:6a:f8:52:9d:fb:22:4c:00:8f:7d:5e:
         41:39:e8:17:f7:f7:80:fb:ea:07:1a:19:ca:8c:a0:1d:6a:1c:
         54:01:a8:cd:89:37:23:5d:16:56:66:c8:19:a5:c3:12:81:1b:
         dd:41:13:1c:b6:82:f4:02:1d:df:ed:f4:a6:58:df:83:9e:e8:
         45:98:51:e5:87:01:fe:29:97:17:7a:de:1b:8c:33:5f:b0:83:
         75:78:de:a7:cf:13:8b:01:24:b5:44:e6:49:28:ea:ac:d2:1e:
         4d:69:4c:08:41:bb:90:8c:9b:49:df:4c:a1:4b:85:59:f1:71:
         06:22:b8:df:a8:a8:0c:12:88:45:35:07:66:42:a9:8f:e7:46:
         19:2d:5d:aa:4c:21:7f:ef:47:60:f1:c1:d2:b5:5c:a8:5b:c9:
         b8:35:e3:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx
QTU4MUNDNjMwHhcNMjYwODE5MDQ0ODQ1WhcNMjYwODI2MDQ0ODQ1WjAYMRYwFAYD
VQQDEw02YTg1MzVhZS0xYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp6h4g5dg2XchTbrHNB4QB6u1TBKvXPYMD4Y4haNa+Ds0GEOaY5y6JH2FStGG
6oBPi8odoDzIFJaqXznbtuXAmTOfcnR83AXskndsCP1R1pJ5NfkZrFtLu3LQw/x8
s3yoAfxlK5ESpAmmjEjhDjPuiYr5PhfSIqnwnffMLCgoxmlscN7zyGOPnpNPEqv+
4pSlpwuGgivKdk2PAgukrld42OXWb5SieTzEom+YwI04AV8fIiJgA27Z3B5g+eNY
MLvL0wbZUyVL7qzY695mC5scT4EM8wA2rAJTns06bQwA6Z5I/+dOME0KhJ4dt4SG
eyZx48ZsnAQIMAbFhx6Nek/NJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtXMr8n
VopSfsAduRm+rXqZ2DP2MB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG
RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U
WDEtMW45V0ZjVlFhV0J6R00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALvVO7tgMORJV1aWgGEp4xKKrHi4tXoyAzzFFsgmRIi/CRVrc/PXJO+y7JJyQ
y5ylS+8NURMxgO9abRlVVHeCWESEAyHgFMwR2V+orhAGjTDMuS79V6LP6A7DnqzD
E5OKIGr4Up37IkwAj31eQTnoF/f3gPvqBxoZyoygHWocVAGozYk3I10WVmbIGaXD
EoEb3UETHLaC9AId3+30pljfg57oRZhR5YcB/imXF3reG4wzX7CDdXjep88TiwEk
tUTmSSjqrNIeTWlMCEG7kIybSd9MoUuFWfFxBiK436ioDBKIRTUHZkKpj+dGGS1d
qkwhf+9HYPHB0rVcqFvJuDXjjQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:50 2026 by rpki-client