Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          EfOvyJ1i/o8/Agjo1B0ZuvCjVrc7mIOu3MNVHPDR96w=
Subject key identifier:   3D:D3:29:FD:2E:20:E9:0A:4C:66:80:0A:C9:E8:32:1B:EC:A3:24:E5
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          60
Signing time:             Wed 25 Mar 2026 07:15:14 +0000
Manifest this update:     Wed 25 Mar 2026 07:15:14 +0000
Manifest next update:     Wed 01 Apr 2026 07:15:14 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: /CLk6D4oBybC6rkIWQTL6Gw5PYAAXI1D6gUOFpXNNIo=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Mar 25 07:15:14 2026 GMT
            Not After : Apr  1 07:15:14 2026 GMT
        Subject: CN=69c38b82-2217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:2b:9b:f2:62:ab:86:1e:27:37:47:2e:b9:
                    91:b7:ef:04:b5:1a:ee:e2:43:8b:d7:09:44:47:bd:
                    71:34:90:dd:1d:7e:fc:78:f5:2c:2a:5f:10:e2:10:
                    4a:02:13:54:f4:6c:56:fe:b9:3a:16:02:de:fb:63:
                    13:74:a8:5a:86:fd:f2:ec:cb:da:28:65:94:2e:a7:
                    a3:3f:10:00:85:d1:82:70:91:fb:03:ff:bc:60:86:
                    dc:fe:ac:10:20:1d:5c:52:7f:47:2a:dc:70:03:c7:
                    07:42:b8:75:8e:08:44:75:be:ea:17:b3:dd:48:86:
                    fc:a2:5f:c9:63:b9:e4:8a:08:66:c3:5f:49:35:96:
                    be:2f:3e:18:0b:99:06:46:fc:32:7e:1d:84:47:d2:
                    88:6e:b0:aa:13:38:54:2b:14:05:d4:aa:05:1d:54:
                    20:ad:d1:64:d1:e5:db:65:b9:df:a1:3a:76:06:90:
                    a9:64:70:d4:bb:bc:19:90:43:62:70:fb:87:f4:f1:
                    6f:71:dc:51:0e:0c:92:02:72:da:be:c8:36:b9:2a:
                    89:ee:fd:40:c8:f8:a1:f7:b3:90:09:83:55:14:56:
                    55:25:d0:4f:a8:6f:93:3a:c3:1a:67:ac:f0:ac:75:
                    54:b2:65:64:05:55:a2:e8:07:ba:f6:18:1b:a0:b6:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:29:FD:2E:20:E9:0A:4C:66:80:0A:C9:E8:32:1B:EC:A3:24:E5
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:1e:51:04:c5:58:8e:54:22:3d:67:55:63:3d:70:62:c6:
         0d:fc:23:00:f5:f9:a7:db:37:9d:0a:97:c6:9b:e6:f7:0f:ab:
         d2:20:33:a3:9e:7c:62:35:15:47:8f:98:8e:ca:a2:27:92:4f:
         32:4d:36:fa:f4:9b:7e:f7:b7:76:13:b8:86:b3:13:95:a7:09:
         d4:34:11:7d:ea:45:e4:24:94:e2:77:5f:05:94:c1:80:e2:93:
         77:a7:f4:c4:45:5c:f9:40:ec:4c:56:bd:46:54:ae:18:84:0e:
         26:bc:8e:73:55:ba:2d:3a:80:90:61:3e:be:46:af:10:b6:93:
         d3:e6:6e:f2:68:0e:0a:4f:a5:81:83:4f:80:79:0c:3b:ff:a9:
         26:4b:01:18:01:b5:af:03:f7:ed:d7:94:ec:e9:30:32:ca:96:
         67:de:16:68:71:ae:b3:7d:f3:00:d5:9c:1d:46:3d:fd:8c:d5:
         26:2b:66:4e:d4:21:b3:ed:f5:82:16:55:c5:66:cb:9e:b8:e6:
         33:a0:45:0b:b4:cb:30:78:04:82:5e:d9:75:70:84:45:7a:b2:
         ff:d6:23:5f:ad:be:f4:48:b9:f2:eb:13:1b:91:0c:1e:16:1b:
         a6:2f:80:d9:f7:b6:c9:d2:ae:e8:e1:23:d2:e2:23:b6:9a:9f:
         53:c7:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:43 2026 by rpki-client