Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          /RuvZGR2/J+8a58PS9z9QWMGV9wdvdoySginPCrpIuw=
Subject key identifier:   4A:94:7B:BD:6E:0A:D2:80:F9:94:AA:0F:4B:AE:CB:C8:F5:67:24:20
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       053E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0534
Signing time:             Tue 12 May 2026 23:39:19 +0000
Manifest this update:     Tue 12 May 2026 23:39:18 +0000
Manifest next update:     Tue 19 May 2026 23:39:18 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: T0H427XXMGoZJEd/jFUVCQXF4QUpe9oJx9c+ZD3pfLU=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: 6tY3MA89EpAe/lRiSjB8kjlvtBFDcIlws9T/uGuzWKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: May 12 23:39:18 2026 GMT
            Not After : May 19 23:39:18 2026 GMT
        Subject: CN=6a03ba26-6c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:df:1c:c1:43:4f:ac:38:f4:6f:ee:92:0c:
                    09:b4:48:9b:2d:bc:0c:80:e0:30:06:79:cd:b4:2c:
                    11:06:20:78:bb:f7:3f:8f:ee:8b:70:a0:13:6c:4f:
                    8e:88:92:68:68:d5:f3:16:93:ad:e2:68:39:9a:0d:
                    62:9b:1d:f0:8b:05:d5:f3:d1:f4:e7:9e:f7:50:79:
                    ca:20:c4:a4:29:52:68:a4:60:d1:e2:78:0f:a7:a6:
                    ea:d5:92:8c:61:2c:37:90:c2:d3:e8:c5:b6:b5:3a:
                    6a:46:11:e5:07:5b:7f:70:85:f7:c1:f9:6f:5d:49:
                    cb:21:fe:8a:dd:35:65:b9:cf:29:1e:3e:bb:cd:5a:
                    7b:91:71:88:fd:2e:c3:cb:ff:20:00:e9:ba:5f:7e:
                    57:7a:d0:b7:36:ff:44:a4:7a:4e:37:1a:f7:e4:43:
                    fa:ce:78:38:e4:ec:99:79:e1:4f:58:f6:18:06:4d:
                    6d:95:9e:2a:da:05:61:1b:ea:8a:83:b8:be:5b:de:
                    b8:87:69:2e:6d:26:58:30:fa:b1:cb:25:1c:9b:40:
                    f6:d7:42:28:05:21:5b:c5:e8:a7:c6:74:4b:ec:05:
                    74:3d:96:b6:f6:55:a7:5a:9a:f6:8b:f9:6e:90:fa:
                    cf:d0:f6:b5:a6:b0:b1:5b:40:26:11:18:28:be:08:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:7B:BD:6E:0A:D2:80:F9:94:AA:0F:4B:AE:CB:C8:F5:67:24:20
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:0b:e0:5b:02:a2:18:f9:90:91:e6:b9:01:29:27:8c:9e:
         be:63:c8:0d:4a:a6:99:d1:3b:73:98:87:ab:55:f3:2d:47:4c:
         97:58:5d:7f:6b:ed:f3:c8:a7:72:3d:b6:38:b0:b5:46:be:f2:
         a4:a8:05:6b:48:9c:19:f2:d6:73:c0:e1:01:58:85:62:94:a0:
         0f:e7:10:41:69:1f:87:a3:7a:1b:e1:a8:53:26:32:27:2d:e4:
         5f:21:67:d1:4b:75:6a:9d:fe:6f:a6:6c:6d:fb:a3:86:e5:9e:
         de:48:6d:a2:8e:59:f1:c6:d4:98:32:e8:ec:36:81:a5:5e:5a:
         de:06:1a:8e:c3:0d:3d:b9:08:81:1a:2f:25:9e:7b:45:f2:ac:
         1a:a5:dc:9e:be:2d:77:00:6b:cc:73:88:c4:37:45:d3:ac:ac:
         39:3b:6c:16:51:1c:44:64:4e:24:8b:4b:12:d3:12:ce:8d:64:
         cc:1c:7e:64:29:af:11:ef:8c:5d:4b:3c:85:d9:23:82:c1:4c:
         1c:61:19:c8:05:cd:0f:4e:f2:7e:98:9a:71:cf:7d:ca:fe:18:
         eb:88:36:27:1f:0f:44:ce:24:14:7a:a5:ff:f2:95:c1:30:33:
         a7:a0:b6:60:2d:a9:c5:5e:cd:be:8d:92:ba:0b:c4:4d:54:f9:
         4e:2e:bd:64
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG
OUExNDJFRjkwHhcNMjYwNTEyMjMzOTE4WhcNMjYwNTE5MjMzOTE4WjAYMRYwFAYD
VQQDEw02YTAzYmEyNi02Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuO7fHMFDT6w49G/ukgwJtEibLbwMgOAwBnnNtCwRBiB4u/c/j+6LcKATbE+O
iJJoaNXzFpOt4mg5mg1imx3wiwXV89H05573UHnKIMSkKVJopGDR4ngPp6bq1ZKM
YSw3kMLT6MW2tTpqRhHlB1t/cIX3wflvXUnLIf6K3TVluc8pHj67zVp7kXGI/S7D
y/8gAOm6X35XetC3Nv9EpHpONxr35EP6zng45OyZeeFPWPYYBk1tlZ4q2gVhG+qK
g7i+W964h2kubSZYMPqxyyUcm0D210IoBSFbxeinxnRL7AV0PZa29lWnWpr2i/lu
kPrP0Pa1prCxW0AmERgovgg+kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqUe71u
CtKA+ZSqD0uuy8j1ZyQgMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2
OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM
dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2
Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALI4L4FsCohj5kJHmuQEpJ4yevmPIDUqmmdE7c5iHq1XzLUdMl1hdf2vt88in
cj22OLC1Rr7ypKgFa0icGfLWc8DhAViFYpSgD+cQQWkfh6N6G+GoUyYyJy3kXyFn
0Ut1ap3+b6ZsbfujhuWe3khtoo5Z8cbUmDLo7DaBpV5a3gYajsMNPbkIgRovJZ57
RfKsGqXcnr4tdwBrzHOIxDdF06ysOTtsFlEcRGROJItLEtMSzo1kzBx+ZCmvEe+M
XUs8hdkjgsFMHGEZyAXND07yfpiacc99yv4Y64g2Jx8PRM4kFHql//KVwTAzp6C2
YC2pxV7Nvo2SugvETVT5Ti69ZA==
-----END CERTIFICATE-----
Generated at Wed May 13 07:04:54 2026 by rpki-client