Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          xsUuxTEpqJlukLWAdgZApcIoXwYNI61ysNubvNOvY3Y=
Subject key identifier:   4F:B7:93:54:BD:BA:CD:3B:A0:73:2D:61:AC:40:95:1E:FB:05:C4:FF
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          B5
Signing time:             Wed 13 May 2026 07:13:37 +0000
Manifest this update:     Wed 13 May 2026 07:13:36 +0000
Manifest next update:     Wed 20 May 2026 07:13:36 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: mIPM2EyLgu9x+2+AZ8bl4PehcVDyhdpePFSlV9x5W6g=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: Vx9bjwI4dHIiRJ2+GamwQlhazgaJYjGaTfAlSelDl0M=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: uhQqMpiNXl9wZzktHIlfZ4N3ckT6gZ7yXsNLkz5TVAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: May 13 07:13:36 2026 GMT
            Not After : May 20 07:13:36 2026 GMT
        Subject: CN=6a0424a0-53a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:e9:c4:9c:ae:cb:d5:a3:8e:81:56:cf:2b:
                    e3:39:9b:7c:04:87:c3:7f:a1:ee:c4:14:27:c4:11:
                    c8:69:8a:c6:93:48:45:7f:d6:b5:7f:7f:ce:92:9d:
                    44:92:9e:8e:51:0c:27:31:cf:46:1d:56:e2:bd:0f:
                    45:db:72:68:ee:38:75:4a:84:6a:7c:f9:e6:b3:55:
                    a7:a8:09:c9:68:ec:06:24:46:b6:9a:0f:3c:ab:3d:
                    7c:33:82:91:18:41:c0:8a:88:46:b4:d7:d7:6a:58:
                    54:4a:6d:9f:73:ab:ce:76:80:48:6b:04:8b:13:95:
                    fc:87:a4:20:b6:2f:dd:16:94:f7:2d:f6:ae:2b:74:
                    ab:10:88:d7:d9:4b:5c:a4:4e:e9:ff:e8:8d:68:25:
                    6e:8f:02:00:f9:66:87:7b:59:68:0f:30:07:36:4d:
                    75:b0:49:58:ca:41:86:07:de:55:29:48:a2:a2:bf:
                    2d:bd:22:31:ca:71:17:bf:dd:93:9e:43:80:17:e8:
                    c1:46:70:03:76:98:53:db:a6:7d:53:f8:c3:c3:fb:
                    74:d6:3e:df:d5:79:e3:ad:80:af:21:e6:32:74:7e:
                    e6:a9:a8:8d:37:3b:d6:6e:59:5d:f1:64:41:9d:2e:
                    a1:34:0d:52:62:d0:76:13:2a:24:7c:9d:0a:78:10:
                    4a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B7:93:54:BD:BA:CD:3B:A0:73:2D:61:AC:40:95:1E:FB:05:C4:FF
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:6e:b6:58:b0:9b:3b:bc:60:f7:8a:25:f0:c6:35:79:5b:
         44:9a:a0:0b:4c:b2:91:10:fe:29:e4:4b:e7:af:a3:02:97:eb:
         70:b9:46:19:11:6f:59:fa:62:65:16:34:2a:b9:2e:38:c6:42:
         bb:d1:9e:a3:a5:a3:00:cd:a9:b4:27:8d:1a:b9:0c:23:a0:81:
         32:3c:65:64:b8:cd:08:9c:f1:f0:9e:dc:58:45:51:96:28:1e:
         55:e4:28:22:89:c4:3a:75:53:b8:26:da:23:bc:3c:3b:f6:07:
         0f:b7:66:61:64:e2:92:ba:c2:6c:1c:55:79:19:5d:65:ef:99:
         df:b1:a1:57:bd:1b:0f:d3:54:5e:ed:a4:44:98:77:c7:ef:6d:
         c2:9b:86:38:03:20:69:cf:ea:73:51:7e:6b:72:17:75:8b:2c:
         95:c7:a9:85:c8:25:5a:ad:db:57:11:24:bd:66:8c:8c:bd:9c:
         68:2e:18:e6:2e:60:55:76:73:c5:a8:52:be:ef:d7:51:4b:13:
         d8:8e:bd:6d:76:93:65:73:6a:b2:62:54:62:72:5c:65:5b:0d:
         48:a4:98:c4:1a:34:50:68:e9:65:d6:25:d3:2f:ca:69:c4:ea:
         85:d6:d4:95:b4:05:eb:5c:ac:e3:70:c1:2b:76:39:d0:d0:2a:
         d3:63:70:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:16 2026 by rpki-client