Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
File:                     BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json)
Hash identifier:          0ebU54aF5/rmD9g0R6qmzTcFnb4U4gLs0YsnuRZcxLE=
Subject key identifier:   85:D6:A9:E6:EC:A1:FB:48:A0:12:F4:A0:BD:ED:7C:D3:D1:28:C2:C2
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Certificate issuer:       /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial:       024B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
Manifest number:          023F
Signing time:             Wed 13 May 2026 02:34:09 +0000
Manifest this update:     Wed 13 May 2026 02:34:09 +0000
Manifest next update:     Wed 20 May 2026 02:34:09 +0000
Files and hashes:         1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: +7tA6Q2gzm6blot6YnyEfrF7FHWezKMZk/mQHy46Pnk=)
                          2: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: /jnNf6yhC1u/KapU+QnPIqPvCzJZYcUOSV+8kDzVszA=)
                          3: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
                          rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
        Validity
            Not Before: May 13 02:34:09 2026 GMT
            Not After : May 20 02:34:09 2026 GMT
        Subject: CN=6a03e321-3a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:6b:e7:3c:e0:04:4a:64:a9:bf:9a:61:5a:
                    24:da:e6:6b:0e:c7:68:78:f0:cd:5b:f3:5f:99:86:
                    88:05:df:8a:20:b4:a9:9b:74:70:d1:12:a2:bd:62:
                    0d:4e:2b:1a:98:73:37:ed:85:51:4d:d1:7e:90:0e:
                    89:d4:23:82:08:49:60:3f:f2:9e:52:78:7c:dd:07:
                    d8:8f:02:ea:e6:07:cf:d2:07:37:7d:84:55:09:54:
                    58:f4:a8:4a:8f:23:6b:e1:46:74:e8:1d:58:fc:23:
                    4d:59:58:b9:33:be:0e:46:2c:66:d7:7c:05:43:a2:
                    ba:42:8a:6a:6f:29:25:ee:1f:73:26:79:c6:e8:84:
                    82:c6:b0:69:df:08:ec:72:f0:33:2e:bc:6c:50:55:
                    f8:46:b4:6d:7c:02:a9:e1:bb:04:ad:21:f7:2d:20:
                    27:b0:90:95:42:9a:06:39:bd:e3:ce:63:81:7f:0b:
                    3e:da:2e:d9:18:c1:2b:ad:7d:53:f6:34:77:fe:af:
                    22:68:e7:7f:9b:6d:a9:d0:c7:5d:db:8f:79:63:8b:
                    03:d6:69:1f:3f:1a:fd:14:72:dd:f3:ef:bd:64:2d:
                    8f:29:67:94:ae:8e:82:e2:12:fb:17:24:aa:37:62:
                    ec:0b:e8:c5:89:7b:75:bf:b4:86:ad:29:5d:8d:10:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:A9:E6:EC:A1:FB:48:A0:12:F4:A0:BD:ED:7C:D3:D1:28:C2:C2
            X509v3 Authority Key Identifier:
                keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:5e:46:24:96:c7:77:b1:51:8b:34:ce:15:67:a2:3e:fb:
         f8:d8:40:08:5a:5d:ac:4c:29:bd:12:18:2b:04:25:21:ce:ad:
         a0:49:91:2d:52:e7:80:e6:fa:e0:c5:7d:38:b4:c1:cf:47:12:
         89:c7:aa:4f:a2:9a:18:35:e3:91:39:3a:b3:64:d7:8a:a6:a3:
         7a:bb:d3:4b:54:f8:0b:5a:94:85:45:db:47:80:13:d6:81:76:
         59:66:12:8d:0c:55:44:5f:9b:9f:40:79:a8:07:fa:6d:ac:5a:
         80:08:15:ec:db:33:8d:32:c9:d0:3c:f4:cc:a8:9c:5e:35:43:
         0d:8b:ab:1e:64:85:69:f1:14:86:02:6b:28:60:00:c4:64:5f:
         52:ab:38:1e:88:f4:ec:45:4d:be:1d:1f:01:22:4b:00:b7:d5:
         77:93:ce:6e:e7:a1:2c:e1:ca:4a:6a:57:e9:d4:2a:39:cc:f6:
         1e:0b:27:2c:95:18:79:50:61:73:bb:8c:d2:b3:4a:fe:1e:85:
         71:76:96:c7:0c:87:16:4d:7c:c1:95:c7:1e:e2:22:71:ab:e8:
         bb:c0:4b:e5:9c:7e:b9:6c:94:f0:72:b0:f6:74:e1:a6:11:24:
         bb:f3:45:34:10:89:4f:6d:a7:b1:c7:19:17:38:dc:4e:13:83:
         08:0e:58:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:12 2026 by rpki-client