Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File:                     BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier:          tvyhZj98Nm6jv4zRb5W3V9l9GhFdXbbMsioERdEszIA=
Subject key identifier:   53:10:69:F9:FB:76:63:6E:E2:87:0F:19:71:BA:89:54:6A:63:BA:CC
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number:          01B6
Signing time:             Wed 25 Mar 2026 03:19:35 +0000
Manifest this update:     Wed 25 Mar 2026 03:19:34 +0000
Manifest next update:     Wed 01 Apr 2026 03:19:34 +0000
Files and hashes:         1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: dnaDKcPWzQJiMfbwZRefuWRkBWIAZFNwY4jpAntjWh8=)
                          2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Mar 25 03:19:34 2026 GMT
            Not After : Apr  1 03:19:34 2026 GMT
        Subject: CN=69c35447-f72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d7:51:58:59:71:32:c7:3f:70:8f:e0:2e:55:
                    fd:54:10:f1:fd:88:84:f4:02:e5:eb:ed:5b:43:66:
                    e3:c4:c9:70:e7:57:ab:b0:fc:92:aa:ab:48:c3:e0:
                    a5:d7:54:a9:e2:81:14:68:60:56:71:1a:6a:c8:b0:
                    e0:78:8f:7a:e6:1d:cc:1f:3f:36:4f:7a:ae:ac:9d:
                    d4:28:1f:b8:7b:d9:84:24:6e:d1:36:a2:9a:30:7a:
                    1e:a0:7f:9c:06:d0:89:f4:c0:c1:1a:fc:13:4b:84:
                    f9:8f:ae:90:7d:cb:a6:df:a4:52:99:44:53:3c:12:
                    40:1d:4b:f5:05:8d:d6:93:ac:55:f0:10:18:14:a0:
                    22:ee:ff:9b:71:63:c4:a1:4e:e1:92:2a:4a:1d:63:
                    7c:91:84:22:c7:79:d3:4d:35:4f:13:59:fe:49:25:
                    1a:dd:96:43:7a:05:88:73:53:9a:d5:eb:5a:ca:1b:
                    80:c0:d0:d9:54:1f:3e:b7:ee:47:b1:a0:14:df:82:
                    82:fb:c9:41:47:7c:cf:72:88:32:25:2e:cb:1a:09:
                    bb:76:1e:5f:45:5b:a9:0a:58:3e:25:b3:d3:d0:e3:
                    d5:23:63:d1:9b:9b:1c:10:33:38:f5:e7:f6:3c:4d:
                    30:4f:28:30:47:4f:76:f7:7c:95:f8:8e:2c:76:3c:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:69:F9:FB:76:63:6E:E2:87:0F:19:71:BA:89:54:6A:63:BA:CC
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:65:30:a1:53:9d:b1:5b:32:00:b8:b6:c0:72:41:10:1b:7e:
         a4:d4:e7:b8:2a:d8:13:b4:8a:b3:9c:8d:7a:48:9c:fc:9d:eb:
         2d:f2:5a:dd:89:25:66:d6:0e:47:64:a5:8b:24:67:3c:36:1c:
         33:bd:ef:7b:80:88:05:8c:4e:2f:e4:1d:b6:e6:d2:56:1b:90:
         d8:d9:c6:79:9c:3c:a9:c1:10:09:ee:41:d4:90:d5:07:51:a8:
         c2:cd:3a:d0:53:63:81:c1:1b:ea:09:83:1d:2a:9a:44:a6:57:
         98:7b:36:8f:84:e0:99:43:cd:bb:bb:cc:d4:8c:1a:0d:56:24:
         49:96:a3:c7:bb:32:cc:6b:82:19:9d:93:96:d6:1a:c2:00:d8:
         2e:a4:38:2d:de:09:f9:08:e0:c5:ad:4e:9b:f9:85:46:b5:bb:
         d5:88:0b:5e:5f:d2:73:c5:98:ad:d7:ff:90:5b:dd:54:e3:86:
         21:34:7d:88:9b:ae:67:89:c5:ba:49:50:ec:37:07:e8:58:13:
         cb:96:e2:ee:d0:67:c5:6e:09:8f:56:5d:8b:a2:29:1f:5a:e5:
         9e:59:0b:2c:23:47:0d:c5:54:54:36:db:52:a2:2c:26:9f:a0:
         ca:8c:7e:a0:92:aa:1f:65:41:22:4b:1d:d5:d1:c4:68:12:8b:
         7d:57:e7:30
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw
NUVFODY4Q0EwHhcNMjYwMzI1MDMxOTM0WhcNMjYwNDAxMDMxOTM0WjAYMRYwFAYD
VQQDEw02OWMzNTQ0Ny1mNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA79dRWFlxMsc/cI/gLlX9VBDx/YiE9ALl6+1bQ2bjxMlw51ersPySqqtIw+Cl
11Sp4oEUaGBWcRpqyLDgeI965h3MHz82T3qurJ3UKB+4e9mEJG7RNqKaMHoeoH+c
BtCJ9MDBGvwTS4T5j66Qfcum36RSmURTPBJAHUv1BY3Wk6xV8BAYFKAi7v+bcWPE
oU7hkipKHWN8kYQix3nTTTVPE1n+SSUa3ZZDegWIc1Oa1etayhuAwNDZVB8+t+5H
saAU34KC+8lBR3zPcogyJS7LGgm7dh5fRVupClg+JbPT0OPVI2PRm5scEDM49ef2
PE0wTygwR09293yV+I4sdjx/RwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMQafn7
dmNu4ocPGXG6iVRqY7rMMB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1
ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h
TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3
Yi02UzNOSmRWTDhGN29hTW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASWUwoVOdsVsyALi2wHJBEBt+pNTnuCrYE7SKs5yNekic/J3rLfJa3YklZtYO
R2SliyRnPDYcM73ve4CIBYxOL+QdtubSVhuQ2NnGeZw8qcEQCe5B1JDVB1Gows06
0FNjgcEb6gmDHSqaRKZXmHs2j4TgmUPNu7vM1IwaDVYkSZajx7syzGuCGZ2TltYa
wgDYLqQ4Ld4J+Qjgxa1Om/mFRrW71YgLXl/Sc8WYrdf/kFvdVOOGITR9iJuuZ4nF
uklQ7DcH6FgTy5bi7tBnxW4Jj1Zdi6IpH1rlnlkLLCNHDcVUVDbbUqIsJp+gyox+
oJKqH2VBIksd1dHEaBKLfVfnMA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:12 2026 by rpki-client