Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
File:                     bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft (raw, json)
Hash identifier:          FQixKpRmU00OJauXvpK/jnPtpbd2XfFOt3+x2YE41/E=
Subject key identifier:   25:38:55:2A:A1:4E:BB:D7:1C:2B:B0:9D:42:29:EB:56:AA:ED:37:B6
Authority key identifier: 6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C
Certificate issuer:       /CN=A917877E/serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
Manifest number:          A0
Signing time:             Wed 13 May 2026 07:26:16 +0000
Manifest this update:     Wed 13 May 2026 07:26:15 +0000
Manifest next update:     Wed 20 May 2026 07:26:15 +0000
Files and hashes:         1: bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl (hash: pm2y8HvdglF8vvjwR3j4WqquB/gIhmAbYisyLLtOs8c=)
                          2: 9EA96DF25D5D11F08A574048C4F9AE02.roa (hash: j5dVLv6OLKywzj6nsoTlfZRGOA0pKSPRrtwDldvzxCc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl
                          rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917877E, serialNumber=6D8AB6FDE521DC106F948292B502FD5A0734837C
        Validity
            Not Before: May 13 07:26:15 2026 GMT
            Not After : May 20 07:26:15 2026 GMT
        Subject: CN=6a042797-e679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:b4:4b:a3:5b:74:64:ca:1f:31:81:12:12:
                    99:3f:0a:ea:0f:d2:e3:de:75:2b:3e:c5:fb:4d:dd:
                    82:ef:25:ca:99:65:2c:64:91:54:b6:c5:ba:48:91:
                    8f:57:ad:75:0a:0f:8a:da:7d:e5:66:47:fb:d4:75:
                    51:33:9a:1e:38:67:3f:9f:a9:a3:00:a9:e3:ef:c2:
                    9e:09:c3:5c:64:83:83:79:af:43:71:f6:32:e3:a8:
                    20:87:d8:43:6f:ef:f8:a5:40:ff:a6:20:04:38:84:
                    4d:45:b7:31:76:38:f1:d8:96:38:66:74:b0:99:91:
                    3b:35:80:c3:29:f6:51:ba:75:d0:a9:72:5d:35:36:
                    43:c9:6a:a3:7f:ca:4a:d4:e6:81:3b:dc:57:17:4d:
                    9d:5e:7c:03:04:d7:c4:cd:fd:ff:cf:da:d9:a2:15:
                    1c:38:68:a0:9a:60:f0:8f:de:6d:59:bd:7b:b0:b1:
                    96:4f:8f:36:19:10:02:58:d9:46:ee:8c:86:b4:ee:
                    f5:32:29:55:74:6a:77:04:65:44:15:d0:c4:c9:1d:
                    d6:a4:ba:eb:01:a7:b2:2a:01:2b:4d:02:8b:79:52:
                    d9:6d:5f:14:69:75:17:34:eb:1a:01:87:de:7f:14:
                    0a:e5:da:8b:76:e7:70:86:35:2b:93:e2:5e:5c:3d:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:55:2A:A1:4E:BB:D7:1C:2B:B0:9D:42:29:EB:56:AA:ED:37:B6
            X509v3 Authority Key Identifier:
                keyid:6D:8A:B6:FD:E5:21:DC:10:6F:94:82:92:B5:02:FD:5A:07:34:83:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bYq2_eUh3BBvlIKStQL9Wgc0g3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/389A62D25D5D11F0B49A7847C4F9AE02/bYq2_eUh3BBvlIKStQL9Wgc0g3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:57:bd:15:7f:b9:5b:b5:7c:15:d6:30:88:96:6b:49:41:cc:
         79:28:06:2f:f8:ce:f5:b3:da:f5:97:c2:e1:02:7a:b5:c1:24:
         39:44:33:de:83:e9:95:a4:e7:d8:12:47:31:96:c9:1c:b7:8d:
         2b:92:8b:ba:f3:7a:fd:da:5c:84:4d:14:8f:e9:a7:76:87:06:
         58:18:58:cb:30:a7:96:e9:2f:bb:2c:7b:73:1b:4c:13:1e:82:
         62:ec:69:2a:9f:46:0c:4f:a0:22:d2:db:2c:ac:05:d5:49:9b:
         b1:95:3e:22:fd:99:3a:ed:53:c1:a4:2d:93:1b:fe:fe:ec:74:
         f4:71:b8:87:a8:3b:b8:5d:1d:ff:98:3f:ad:17:4d:bf:29:a2:
         1c:8a:de:31:a7:66:40:4e:68:da:ab:17:18:5e:5f:d4:cf:da:
         c0:5d:db:0d:02:34:8e:60:d9:15:42:e2:60:cb:b5:5c:c7:92:
         40:86:63:fe:72:d2:1f:4b:45:3c:94:06:f7:9d:87:1a:fc:6d:
         19:1d:21:f4:a4:2c:16:5f:f0:bb:c4:e9:71:85:16:22:8a:1f:
         98:57:81:8b:f6:7f:10:0c:65:0f:ca:7e:99:fc:5b:6e:92:f1:
         e1:d7:66:18:88:48:76:84:1e:b4:65:26:e1:3a:3d:2b:9f:28:
         35:91:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:54:19 2026 by rpki-client