Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File:                     Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier:          nkxhY+Y69BV3X3CoK5QYKZiLuL8Fgen1hdjgAnmmCDo=
Subject key identifier:   B2:DD:F7:0C:7F:18:63:76:86:13:CC:26:35:C0:D5:DD:A0:31:36:43
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       01E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number:          01D9
Signing time:             Wed 13 May 2026 03:43:48 +0000
Manifest this update:     Wed 13 May 2026 03:43:48 +0000
Manifest next update:     Wed 20 May 2026 03:43:48 +0000
Files and hashes:         1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: UcN5auDJe70KyEzI50/hAj/Sw+KtAo92iSGW6r2mKUE=)
                          2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: zAWlrytMBb7aOvLXuHLVnYaYJEpV8eVWaLPA029dJCU=)
                          3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 489 (0x1e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: May 13 03:43:48 2026 GMT
            Not After : May 20 03:43:48 2026 GMT
        Subject: CN=6a03f374-ec2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:30:c0:7d:e0:62:56:7f:fa:7b:4a:a4:e9:
                    5f:f6:01:24:bd:53:88:65:9d:cd:92:c3:5e:a7:b4:
                    04:e7:82:a5:50:fd:f1:64:6b:10:b4:85:6f:92:08:
                    5e:37:f0:65:25:1c:8a:bb:d1:79:eb:e0:05:31:ba:
                    26:e9:a7:ab:4a:d8:e0:52:b4:a4:55:a5:69:8c:82:
                    5e:13:ed:6c:0f:66:dd:9b:71:02:58:6b:4d:1d:2b:
                    9b:4f:77:26:6f:53:a0:2e:eb:60:58:a0:9d:16:24:
                    86:de:03:1d:7e:f0:30:93:65:5f:45:44:3d:f0:29:
                    49:84:28:f0:07:76:be:6e:d2:0c:3f:f9:93:8d:b7:
                    ba:71:b6:a7:9a:e9:cb:0d:69:1b:ef:28:45:16:f5:
                    bf:ae:59:6b:6c:c7:8d:41:a1:44:76:f4:e2:30:ea:
                    c4:11:bd:b5:9d:bf:bf:7e:50:98:2b:1a:b5:d0:ea:
                    cf:07:b4:8d:01:6d:b8:ae:68:24:27:4f:7b:8f:e8:
                    ff:97:f8:a9:b4:e8:d6:6a:1c:3c:1a:aa:a0:20:c5:
                    e6:15:1b:06:49:cd:cf:4e:03:9e:38:21:2e:1e:5a:
                    6f:e1:1f:24:86:0d:88:4a:09:b9:fa:3f:76:aa:eb:
                    b0:22:c0:f3:ba:18:6c:f5:d1:eb:81:03:24:43:a8:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DD:F7:0C:7F:18:63:76:86:13:CC:26:35:C0:D5:DD:A0:31:36:43
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:92:0e:51:ea:15:42:4f:97:61:b8:e6:a9:87:df:15:dc:
         88:63:13:96:46:13:f8:7c:0d:21:0f:a6:f1:aa:7d:2b:83:76:
         a6:51:5f:4b:98:fa:c0:2a:83:78:e9:ce:40:1b:50:8c:28:0c:
         81:0a:36:89:f7:a1:d5:38:10:94:a8:e0:d6:64:5b:cc:93:04:
         e4:3e:0a:4b:8e:21:c9:4a:84:5e:58:8d:2f:b9:53:8a:f5:a6:
         a6:d2:a5:fa:91:c9:1b:7d:b3:c5:81:20:a8:dc:ca:73:0c:0d:
         83:81:99:b3:06:64:b2:07:24:c6:2a:59:72:67:6c:96:15:14:
         65:11:ad:49:00:8e:18:49:df:f0:83:62:e7:4f:26:99:fc:9f:
         c7:16:b7:0c:18:3f:cf:cb:85:81:39:3e:f0:13:c7:b3:0c:71:
         e6:85:2c:35:3e:a7:9d:a7:f7:92:6a:c4:0f:07:86:34:4b:45:
         34:05:b3:0c:0d:94:08:e3:f0:20:9c:04:2a:06:13:e7:46:6d:
         f5:6c:80:f0:6d:96:5a:d6:db:d4:49:f3:d5:99:13:c2:a7:9c:
         71:56:d3:86:db:6e:a5:68:50:19:0c:0c:45:c8:0a:69:a0:c3:
         22:2c:8e:c5:b7:e6:57:52:cb:1b:83:3a:ae:87:43:d8:05:1f:
         2d:66:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:21 2026 by rpki-client