Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File:                     bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier:          ExwiwW9du9jMq/CgNUyn5m392W9RLosihCnF8IOCHvM=
Subject key identifier:   62:70:A0:F7:DE:D4:CC:4A:96:3F:C3:A4:81:BA:8E:20:12:76:70:0A
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer:       /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number:          8D
Signing time:             Wed 25 Mar 2026 06:44:53 +0000
Manifest this update:     Wed 25 Mar 2026 06:44:52 +0000
Manifest next update:     Wed 01 Apr 2026 06:44:52 +0000
Files and hashes:         1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: jiB20EFlx6kAam6MUHnvVFhexCJ+viyDSa6QuHhwqGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
        Validity
            Not Before: Mar 25 06:44:52 2026 GMT
            Not After : Apr  1 06:44:52 2026 GMT
        Subject: CN=69c38465-15d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:af:8f:b5:5e:a5:c7:fd:c5:b8:ba:e6:d2:
                    77:29:c6:64:7d:69:2a:d0:82:ba:28:30:20:d2:3d:
                    00:ca:7b:aa:d9:f6:2b:72:aa:d3:c8:9e:1f:bb:89:
                    5e:d1:7c:4e:e8:66:8a:e3:b1:6a:26:28:a7:be:41:
                    88:c7:94:d1:8d:9d:df:1d:e4:7d:cd:0a:84:06:fb:
                    6e:e4:6c:e5:fe:69:90:cd:38:fb:1d:5e:9c:ed:0d:
                    59:26:70:8b:d5:12:88:fe:58:ec:d3:12:69:37:3f:
                    d8:90:2b:75:ab:68:21:65:49:b9:3f:95:f7:61:86:
                    2c:ea:81:8b:8c:3b:0a:e7:f3:f0:4e:e9:3a:db:87:
                    dd:87:70:23:79:3a:0d:ab:a0:fb:f6:ff:58:47:3a:
                    97:a5:b5:14:20:98:5f:5e:1e:be:21:c7:8f:70:9d:
                    94:1d:bd:fc:d8:48:df:04:0a:9a:76:42:38:45:c7:
                    19:e7:a8:00:f6:bb:90:c5:7f:75:0e:4a:26:e8:30:
                    80:2b:41:75:2b:7a:71:2a:cb:72:f3:24:b0:0f:a6:
                    dd:c7:c2:39:9e:15:8e:82:8e:f1:86:7f:91:92:61:
                    a9:37:86:2c:95:0b:49:48:da:64:ac:31:01:43:34:
                    00:ea:eb:f2:b9:68:72:c7:b8:d1:52:44:56:27:6d:
                    aa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:A0:F7:DE:D4:CC:4A:96:3F:C3:A4:81:BA:8E:20:12:76:70:0A
            X509v3 Authority Key Identifier:
                keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:85:65:95:a7:82:9a:8d:73:44:16:42:a0:b9:01:42:1e:f7:
         73:89:35:57:22:9f:c2:59:e9:17:a8:18:95:91:d6:2f:8f:f9:
         ea:5f:83:8b:64:d1:2f:96:65:be:69:56:08:6e:13:6f:11:4e:
         1f:24:0d:ba:36:5a:6a:32:f9:96:91:a8:27:d9:c8:10:e6:51:
         63:22:97:52:1d:85:57:50:49:e5:02:cc:84:f2:fd:bd:19:48:
         dc:7c:22:71:75:4a:58:7c:9c:2e:3d:01:93:c4:0d:e6:46:ab:
         12:e0:4f:d4:09:ae:72:61:b1:27:0b:5c:44:57:03:d4:a8:eb:
         ac:96:97:74:d5:47:09:c1:0c:8c:a0:7d:ba:ce:13:f6:85:05:
         c6:50:3c:37:66:03:ec:31:f0:f1:55:23:89:85:f9:d6:9a:e2:
         a6:5c:af:dd:a6:26:7a:c9:71:2c:a2:3e:42:e3:65:c8:71:c3:
         99:f4:1a:f2:e4:8c:a3:25:f6:f3:04:b9:8a:96:dd:e8:b4:94:
         af:8e:c0:47:9b:69:16:90:17:96:de:68:07:91:83:50:12:7a:
         55:ac:1c:64:6e:70:51:48:92:9e:bb:b6:03:0b:da:73:31:13:
         71:d2:f4:9b:cc:d1:03:56:fa:c7:50:86:c7:58:3e:24:2e:1b:
         c9:5b:47:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:17:10 2026 by rpki-client