Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
File:                     bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json)
Hash identifier:          rcsFsPtsLozxBVPY6f0Ua0NjriWFocUZqKgtS5XKYuo=
Subject key identifier:   12:B8:C1:C0:C2:59:43:F7:C0:54:05:F4:63:93:96:80:80:B9:FA:17
Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65
Certificate issuer:       /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
Certificate serial:       26FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
Manifest number:          26DE
Signing time:             Fri 24 Jul 2026 01:23:46 +0000
Manifest this update:     Fri 24 Jul 2026 01:23:46 +0000
Manifest next update:     Fri 31 Jul 2026 01:23:46 +0000
Files and hashes:         1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: YSM7JfOaCdUGVnToRpgUAQqAxt6dSTAw9LuHh9+P7p4=)
                          2: 4DF2AB2886FE11F194514C90ABEE528E.roa (hash: jckdVaLgGySOmC+dxDdM+IECQKrysVqHPHa0XPV4yDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl
                          rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9980 (0x26fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65
        Validity
            Not Before: Jul 24 01:23:46 2026 GMT
            Not After : Jul 31 01:23:46 2026 GMT
        Subject: CN=6a62bea2-953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:1c:5f:5d:50:60:1a:e2:0a:37:80:7f:b4:
                    87:c6:60:32:1a:1a:d2:9e:21:dc:bc:8f:e7:93:9d:
                    77:e1:0b:09:55:40:4a:73:29:33:6f:c1:1d:3a:b7:
                    46:26:75:69:d6:4d:e0:49:0c:3f:82:72:3b:a8:90:
                    07:7b:ef:f2:10:e0:32:19:14:ef:e5:0b:1c:60:4d:
                    ab:ec:47:82:cf:bf:d7:7d:ad:4b:80:ba:d1:24:2e:
                    e4:84:91:ed:ba:f5:11:65:a2:b2:38:7c:0a:0a:bb:
                    02:bf:bf:71:fa:d5:7c:90:20:a4:6f:68:6c:98:31:
                    4b:5e:a9:c4:d1:48:34:6e:08:fc:ad:d1:45:c1:e4:
                    36:3b:b9:d8:26:d7:f0:ca:38:64:b3:14:fc:7f:cb:
                    05:97:b6:f1:57:c0:68:0a:4a:29:1f:a3:ea:64:cc:
                    d8:e5:84:d7:d3:22:13:9c:41:e9:88:c4:10:8c:74:
                    13:ba:2b:6e:0c:59:71:0e:6c:7b:68:91:2c:d9:4d:
                    ca:00:29:b7:dd:a1:b5:2e:d8:e3:54:0b:61:45:2f:
                    03:9e:fe:c6:e3:88:25:44:46:64:3d:eb:ce:24:6e:
                    16:e9:7f:96:ba:78:89:66:86:a2:39:e8:9f:b4:c6:
                    4b:69:4c:23:f5:ff:02:7b:2d:e3:d0:b8:e7:36:d8:
                    33:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:C1:C0:C2:59:43:F7:C0:54:05:F4:63:93:96:80:80:B9:FA:17
            X509v3 Authority Key Identifier:
                keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:41:95:62:35:c7:7c:4c:e3:18:09:8c:2b:de:ce:bb:6e:fa:
         f1:0a:82:92:70:a9:19:33:ba:9b:08:e4:4a:01:23:f9:f7:dd:
         f3:a9:5a:79:e7:82:11:e5:f9:86:56:62:04:56:23:b4:8e:ab:
         70:ae:06:2f:ea:a3:81:d6:88:07:f1:7c:90:59:7a:9c:b6:b7:
         24:0b:b2:f8:d9:e2:21:98:a9:85:ef:a8:26:2b:d9:e5:dd:c8:
         64:08:e8:d9:63:c0:96:3d:21:75:aa:26:3c:35:cf:b9:6b:28:
         43:ed:f4:c1:b7:00:32:05:68:90:c7:bd:0d:52:cb:26:5c:98:
         72:dd:95:24:6e:ba:5f:46:3b:09:44:06:5e:6d:68:f4:1e:5d:
         1d:87:ec:27:ee:fe:b7:db:db:65:27:4b:95:a0:91:26:b7:5f:
         75:de:88:29:b1:a0:83:ea:49:99:52:7f:e6:14:2b:10:cc:4c:
         48:7f:54:27:54:09:90:56:dd:14:34:c8:dc:e9:e7:f3:58:75:
         71:2f:28:39:00:01:94:82:fa:49:7a:e3:dc:22:08:c3:ca:ce:
         ee:da:76:11:66:d6:d1:e2:e7:6e:8f:5f:45:92:d0:02:4d:56:
         cf:ea:8f:af:83:f7:30:2e:b5:f2:98:60:ef:4c:29:1e:38:99:
         94:56:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:00 2026 by rpki-client