Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          1BRf/6JgzEuwOmTuc4wk+iHBV9luy/0uc9sIFK4/gcc=
Subject key identifier:   D7:0A:6E:AF:42:28:4C:00:55:43:12:B6:3B:B9:E7:80:0D:21:8F:03
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       073D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          0734
Signing time:             Tue 12 May 2026 21:56:00 +0000
Manifest this update:     Tue 12 May 2026 21:55:59 +0000
Manifest next update:     Tue 19 May 2026 21:55:59 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: zUW8S+VBmfWKN6y0BkzZpcuJUZkJyBiOzdVwigwKgh0=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: May 12 21:55:59 2026 GMT
            Not After : May 19 21:55:59 2026 GMT
        Subject: CN=6a03a1f0-e9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:89:61:3d:04:2c:c6:35:66:2b:56:55:98:
                    da:1a:d4:65:8b:4c:59:cf:74:87:cd:17:ac:a8:c0:
                    bd:d9:b2:21:35:0a:ba:2f:5b:1f:c9:1b:30:28:90:
                    56:77:91:13:68:98:d2:e8:4a:70:04:22:9b:75:40:
                    2f:aa:9b:25:77:18:8f:21:5c:41:fa:8d:8e:63:fa:
                    55:e7:d7:6a:2c:18:ac:77:73:20:2c:20:d5:f0:46:
                    b4:17:8d:7f:12:ad:d6:d4:4e:4a:e0:65:63:4f:61:
                    25:80:2c:d8:41:69:31:6f:e7:d0:20:b9:a8:05:ca:
                    97:f4:73:3a:ef:c6:63:e1:50:53:02:df:f3:5b:6e:
                    5e:22:3e:92:50:41:e9:e4:91:e4:16:57:cf:19:f6:
                    5e:57:a4:37:81:d4:37:b7:51:3b:77:db:c6:e1:19:
                    f9:8d:02:ba:29:90:8c:7e:d8:01:5a:34:69:be:99:
                    cf:86:52:65:60:b3:66:67:d0:7b:5a:fa:0b:68:38:
                    a9:73:97:d5:c8:a2:74:79:51:9b:8a:39:3e:3a:64:
                    19:3a:40:a7:c7:ec:89:23:62:bd:2a:29:0a:e7:61:
                    5e:c6:cb:11:66:3b:02:ed:70:48:f8:48:2f:07:ae:
                    ad:cc:72:9e:d1:f4:a1:ca:c9:8c:1b:4a:a9:57:56:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0A:6E:AF:42:28:4C:00:55:43:12:B6:3B:B9:E7:80:0D:21:8F:03
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:fd:74:eb:05:b4:01:0a:94:e9:33:5f:76:cd:3b:2d:8f:
         7f:06:8e:a3:8a:50:be:00:9b:6f:58:b6:a7:cd:14:4a:d6:2b:
         a8:fc:67:9e:e0:2e:ad:e0:db:1b:cc:3a:e1:fa:2f:fa:61:59:
         15:f8:b9:55:9f:a4:da:d6:a2:c4:9a:ac:4b:f9:21:6c:f4:2f:
         8e:9b:d2:89:15:50:0a:dc:e9:5e:c5:bb:44:96:9e:39:c9:d9:
         58:e2:53:48:52:68:19:f1:c3:a9:d8:52:be:ba:30:9a:d3:21:
         53:ad:fc:62:06:29:4d:74:69:8b:5b:1b:f6:b6:15:c1:46:e7:
         1b:29:4a:28:ed:99:09:16:66:f8:49:af:46:1a:ff:9f:c5:8e:
         4f:97:1c:bd:68:76:11:09:a6:30:c8:93:fc:3f:ee:3a:41:77:
         2b:fd:f9:f9:5b:6b:9c:eb:07:19:0d:93:c8:98:05:b1:a5:3c:
         8f:3b:7f:e2:c0:a9:61:a8:bd:70:be:cc:a6:ee:0d:53:dd:4e:
         fa:15:31:55:2f:5a:74:2d:47:76:11:02:12:06:d2:48:21:75:
         89:ef:f6:db:1d:f6:88:ca:ac:69:e7:2e:06:54:7e:2c:76:7d:
         6a:a5:a0:fc:81:47:cb:bf:74:2b:b3:2b:4f:3a:96:7d:93:0c:
         f7:46:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:40 2026 by rpki-client