Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
File:                     bgopAGEwM5uDbSj3ABgC9xpaTkI.mft (raw, json)
Hash identifier:          H2iGNs/SgXEwNUrCvJG0FtRus/9PnZZOXuNoPmB8X/w=
Subject key identifier:   89:3D:2A:F2:64:FC:50:75:1D:83:62:A7:CB:26:97:6B:51:25:F6:5B
Authority key identifier: 6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42
Certificate issuer:       /CN=A91166D1/serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
Certificate serial:       0392
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
Manifest number:          038D
Signing time:             Mon 11 May 2026 00:50:46 +0000
Manifest this update:     Mon 11 May 2026 00:50:46 +0000
Manifest next update:     Mon 18 May 2026 00:50:46 +0000
Files and hashes:         1: bgopAGEwM5uDbSj3ABgC9xpaTkI.crl (hash: nATCi0+QPBx0Biw/1RHA2kTSBELBGHj80kqZtzMof34=)
                          2: 3C3A98A4E71C11EC9128DF0BC4F9AE02.roa (hash: ssvUGeobJIBhGuwZAZC5KCcDFtOiMzobKGRXBbPMwvk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl
                          rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166D1, serialNumber=6E0A29006130339B836D28F7001802F71A5A4E42
        Validity
            Not Before: May 11 00:50:46 2026 GMT
            Not After : May 18 00:50:46 2026 GMT
        Subject: CN=6a0127e6-4cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:80:4c:87:8c:fe:10:9b:ae:eb:e8:bb:0f:
                    8c:cf:a8:47:e8:d5:e6:33:90:2c:51:89:11:e8:84:
                    f7:2a:7c:96:ca:74:75:d9:6c:1f:80:22:cb:e2:4d:
                    b1:05:86:17:af:c4:69:4c:30:76:2d:9d:59:25:66:
                    92:fd:49:1a:0c:95:6f:17:13:e4:e4:1e:84:09:a8:
                    fd:22:ab:c9:d5:7e:d9:e9:00:23:eb:1e:72:bd:f6:
                    86:1a:3b:93:0d:f4:98:dd:98:70:08:53:33:40:e9:
                    28:5d:2c:35:8b:0a:6f:0a:8b:b7:db:1f:c5:c3:6c:
                    aa:ae:d8:69:35:d2:83:d3:bf:b2:66:92:06:6d:e4:
                    da:56:0a:90:64:63:d8:f3:7c:d0:1e:c0:e1:4b:8c:
                    2c:bc:4b:f9:ab:23:05:41:d3:9b:b3:74:53:60:6b:
                    7d:8b:45:34:e3:3d:10:41:c7:14:d1:80:de:a6:5f:
                    50:1b:58:3a:78:a5:14:17:72:d9:c7:4b:fa:4d:c2:
                    7b:d8:ba:86:08:99:84:24:84:09:d7:96:ed:18:98:
                    82:1e:16:54:23:c3:9c:11:2a:b6:c0:66:06:be:e2:
                    9f:4d:31:2f:9c:38:34:22:c0:23:4c:a1:bc:c1:66:
                    49:2a:08:40:36:ae:b8:0a:19:20:f2:76:9f:80:ad:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:2A:F2:64:FC:50:75:1D:83:62:A7:CB:26:97:6B:51:25:F6:5B
            X509v3 Authority Key Identifier:
                keyid:6E:0A:29:00:61:30:33:9B:83:6D:28:F7:00:18:02:F7:1A:5A:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bgopAGEwM5uDbSj3ABgC9xpaTkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166D1/ABDA5142E71511ECB82CB06EC4F9AE02/bgopAGEwM5uDbSj3ABgC9xpaTkI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0d:1f:c7:ab:9c:33:19:05:b8:10:9e:6b:db:6a:4f:04:27:
         89:82:3f:cb:08:52:c7:c1:27:f2:6e:59:b7:e4:67:8c:bc:95:
         da:e6:bb:25:a4:b7:c7:ca:1a:ba:68:f0:e9:9d:07:27:be:4b:
         b9:cc:83:47:1b:98:7f:ba:d2:59:4a:b6:63:42:2c:28:33:b8:
         57:84:20:97:5a:02:9d:ed:e9:6e:cf:5a:d9:09:5a:22:e1:b0:
         67:8f:c6:ef:59:5f:3a:ee:0c:2f:ff:f0:b6:63:08:2b:34:87:
         40:a7:eb:bd:8e:cf:bf:ca:aa:48:1e:01:51:1d:fc:d6:d4:13:
         18:16:db:9b:da:64:07:e8:a9:e4:7e:47:82:ce:bb:e0:a7:24:
         ea:3b:64:fa:b9:7f:4d:67:da:7b:88:d9:57:fd:02:a0:5f:b4:
         a9:9b:af:cb:0b:e1:9a:09:f7:c4:69:18:ce:8a:57:1b:18:0c:
         8b:37:c4:fc:b8:8d:2d:6d:f9:e2:1d:d5:1b:35:a8:96:7f:ac:
         50:9f:3d:2e:b2:1e:68:c3:92:8a:3f:38:82:a1:73:6e:dd:85:
         09:5c:e1:9b:f4:2c:52:26:f2:83:b9:dd:b5:09:d3:cd:cc:1e:
         a6:b9:0e:59:58:ac:26:89:b9:ee:82:a5:20:59:4e:74:3a:58:
         c3:7f:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:08 2026 by rpki-client