Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File:                     BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier:          dL3YLCFJPvpPBt0IDige02OcjUT7KFG1m/r1Blc7Czo=
Subject key identifier:   F6:59:73:A1:41:51:50:23:F3:F9:2F:B0:49:55:2B:A8:FC:D0:47:F1
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer:       /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial:       02D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number:          02CB
Signing time:             Wed 13 May 2026 01:29:42 +0000
Manifest this update:     Wed 13 May 2026 01:29:42 +0000
Manifest next update:     Wed 20 May 2026 01:29:42 +0000
Files and hashes:         1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: 3nt/qOm1YQqHyyZIzjf6EkyPzGaT4px1AgV26TH4gm8=)
                          2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: gaiP1us9ZVKBdlJoHfbtQhGqWeKxEzvnmSCb9KMbw0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
                          rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721 (0x2d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
        Validity
            Not Before: May 13 01:29:42 2026 GMT
            Not After : May 20 01:29:42 2026 GMT
        Subject: CN=6a03d406-ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:c9:6a:e4:66:f8:0b:fb:3f:95:ba:07:c9:
                    57:97:15:05:d0:9c:c0:52:1b:ab:1c:b9:a9:cd:50:
                    77:b5:fd:50:2e:dd:b7:6e:5b:1b:3e:8c:4d:70:82:
                    02:92:89:77:aa:75:d7:fe:c7:c8:fb:36:c1:13:68:
                    a0:56:3c:0f:cb:2b:f3:d2:0d:4b:02:3b:7c:aa:d8:
                    a2:e0:8b:13:32:d1:b4:c1:b5:bf:0b:57:28:3b:6d:
                    90:dc:a1:f5:ef:4c:4d:91:b0:39:03:52:ad:76:14:
                    37:26:12:94:8e:08:55:78:91:c1:50:fd:91:df:4d:
                    60:35:57:f3:7e:9f:ec:eb:d9:f7:b1:6a:4f:08:40:
                    5d:69:54:77:d1:f7:0d:3f:24:a4:00:07:5d:e1:39:
                    0a:15:db:f0:5a:2d:0c:dd:d2:eb:e0:26:f4:7d:74:
                    39:ba:23:a3:e0:15:4d:bd:da:6b:b3:fd:00:4f:88:
                    12:8f:7e:d6:3a:5e:61:52:8a:cf:8a:a2:bf:13:d7:
                    aa:9d:f3:02:3d:e3:63:ec:de:17:e9:62:74:c8:f9:
                    06:4f:45:5d:d7:56:51:b0:d4:fe:19:2f:b7:32:2d:
                    66:9e:97:ee:f8:f2:17:e8:3a:77:12:a6:48:f7:54:
                    0f:68:37:1a:f4:cd:c3:23:8d:92:53:ac:82:e0:be:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:73:A1:41:51:50:23:F3:F9:2F:B0:49:55:2B:A8:FC:D0:47:F1
            X509v3 Authority Key Identifier:
                keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:79:e8:48:07:25:98:8f:41:a8:55:75:cc:08:58:7a:fa:
         f2:16:fb:0c:0d:cc:b5:85:e3:d8:de:33:17:a0:35:65:1e:41:
         0f:9e:11:8b:03:dd:d4:77:aa:76:9b:18:74:64:5a:4a:b0:c7:
         2a:f0:2c:81:1b:4f:46:72:cd:91:16:b8:d1:ae:7b:3a:a7:2f:
         8a:c8:6a:e6:3e:c9:85:39:44:be:95:17:27:26:7d:a3:c6:9d:
         4e:d4:16:4b:84:63:32:81:84:cc:51:ef:ad:4f:93:00:a3:13:
         88:e4:fc:c2:43:46:ae:62:e8:e2:77:70:63:49:bb:27:d0:a0:
         18:a5:e8:08:7c:f2:0e:26:2c:9b:a8:99:c7:a4:00:8e:f0:f3:
         ea:e6:8c:50:42:aa:bc:69:2f:3a:ae:4c:2b:74:50:cf:e5:a8:
         af:8f:b3:b8:71:f1:50:fc:78:1d:4c:fc:ae:bd:e9:36:9c:7d:
         85:ed:c5:83:61:11:37:16:0b:53:fe:4d:f5:4d:51:f4:3c:e2:
         0b:97:19:1a:fe:5f:56:15:e0:cb:e6:32:3a:03:99:58:eb:d1:
         49:a0:0b:d1:e9:3e:96:c0:17:61:0b:54:06:4e:18:a1:57:7e:
         e2:64:18:2d:81:6b:b3:58:0d:0b:85:63:33:7a:0b:2c:b5:ea:
         32:37:7c:bf
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1
MjgzNDYzMjQwHhcNMjYwNTEzMDEyOTQyWhcNMjYwNTIwMDEyOTQyWjAYMRYwFAYD
VQQDEw02YTAzZDQwNi1hYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlHJauRm+Av7P5W6B8lXlxUF0JzAUhurHLmpzVB3tf1QLt23blsbPoxNcIIC
kol3qnXX/sfI+zbBE2igVjwPyyvz0g1LAjt8qtii4IsTMtG0wbW/C1coO22Q3KH1
70xNkbA5A1KtdhQ3JhKUjghVeJHBUP2R301gNVfzfp/s69n3sWpPCEBdaVR30fcN
PySkAAdd4TkKFdvwWi0M3dLr4Cb0fXQ5uiOj4BVNvdprs/0AT4gSj37WOl5hUorP
iqK/E9eqnfMCPeNj7N4X6WJ0yPkGT0Vd11ZRsNT+GS+3Mi1mnpfu+PIX6Dp3EqZI
91QPaDca9M3DI42SU6yC4L7h4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPZZc6FB
UVAj8/kvsElVK6j80EfxMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz
NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV
MzBvUDk0WjRUODlTZzBZeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdK556EgHJZiPQahVdcwIWHr68hb7DA3MtYXj2N4zF6A1ZR5BD54RiwPd1Heq
dpsYdGRaSrDHKvAsgRtPRnLNkRa40a57Oqcvishq5j7JhTlEvpUXJyZ9o8adTtQW
S4RjMoGEzFHvrU+TAKMTiOT8wkNGrmLo4ndwY0m7J9CgGKXoCHzyDiYsm6iZx6QA
jvDz6uaMUEKqvGkvOq5MK3RQz+Wor4+zuHHxUPx4HUz8rr3pNpx9he3Fg2ERNxYL
U/5N9U1R9DziC5cZGv5fVhXgy+YyOgOZWOvRSaAL0ek+lsAXYQtUBk4YoVd+4mQY
LYFrs1gNC4VjM3oLLLXqMjd8vw==
-----END CERTIFICATE-----
Generated at Wed May 13 13:37:50 2026 by rpki-client