Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
File:                     BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json)
Hash identifier:          FgjvDl+apSsLTdCF1rVco2hoqpGajdXbryZliLq9P10=
Subject key identifier:   BA:7C:42:F7:19:EC:28:1F:2E:12:4C:A0:D5:87:09:4E:CF:87:08:7A
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Certificate issuer:       /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
Manifest number:          0623
Signing time:             Tue 12 May 2026 19:21:56 +0000
Manifest this update:     Tue 12 May 2026 19:21:55 +0000
Manifest next update:     Tue 19 May 2026 19:21:55 +0000
Files and hashes:         1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: Fp8p79n1Z4T7wMGwVY7nC2ASsIPqXvjQkDxF+oaGFOw=)
                          2: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: c+sCCqRUQAx6yxh8SIPPxDShhiygkKxbfVZ+DjCG9jY=)
                          3: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=)
                          4: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: 564pRRYDE6A0/S8HSNvbRK5mhXRQJ0+W91tnj2kKQFM=)
                          5: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: gjMHw3LW4TBes7Fu2OjLIgHVqcq9tlyu9BTmAuglOqU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
                          rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
        Validity
            Not Before: May 12 19:21:55 2026 GMT
            Not After : May 19 19:21:55 2026 GMT
        Subject: CN=6a037dd4-ce86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:e9:5b:b2:9b:bd:94:36:c6:ed:3f:7f:1a:
                    d2:ec:01:31:8b:e6:32:b9:2c:e5:38:c7:02:38:19:
                    f5:bb:5c:fb:c0:02:6c:45:d5:ca:5b:b4:fb:1d:07:
                    d6:be:c6:7f:3c:86:2f:f4:1a:c1:0a:dc:4e:a2:c0:
                    de:df:8d:82:94:96:da:ef:33:4a:e9:09:4c:0e:54:
                    02:ec:d6:a5:0f:00:d7:c1:a2:dc:67:64:fe:5e:2b:
                    84:0b:6f:e3:fc:87:b5:09:6c:2a:11:56:03:0a:e9:
                    41:0b:b1:74:63:26:c6:10:0f:0a:48:bc:aa:21:a7:
                    25:bb:40:7c:48:2d:09:56:05:9d:b8:50:20:1e:1a:
                    4f:c9:bf:96:bf:9e:96:e7:fc:6b:db:48:a8:cd:58:
                    e2:fe:02:b0:ab:81:45:05:57:6c:3d:d9:43:5f:ea:
                    95:32:c2:93:d6:d9:ca:dc:09:17:43:56:d4:27:b9:
                    0f:7a:5c:1d:cd:23:e7:b4:fc:f0:8d:70:c6:f7:2e:
                    28:78:2f:df:20:a0:6a:ce:a1:5b:f1:b1:5a:23:f3:
                    11:a7:ba:52:77:72:a1:31:2b:0c:25:4e:11:64:66:
                    f6:69:ed:73:cc:3f:a7:28:d6:73:6a:2f:5e:97:55:
                    9d:5b:cc:2b:14:da:e1:5d:30:35:81:5f:23:2b:f7:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:42:F7:19:EC:28:1F:2E:12:4C:A0:D5:87:09:4E:CF:87:08:7A
            X509v3 Authority Key Identifier:
                keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fb:85:08:f2:d3:af:ab:e0:db:c9:67:68:75:83:09:5d:83:
         62:8f:66:c5:ed:60:f8:38:08:ce:ef:11:8a:60:a7:44:5f:28:
         7f:e6:04:66:09:81:66:2f:2a:41:2a:d0:26:cb:f7:9b:a0:ec:
         3d:d7:52:f4:e6:3c:9b:e4:b1:86:0d:8f:32:f4:de:af:ae:c3:
         da:cc:47:91:c8:53:9e:34:6a:57:8a:65:f5:dd:91:de:5f:3e:
         a8:f0:c6:7c:d2:58:90:f1:ab:7b:ae:83:29:27:c1:06:05:ba:
         98:3a:ac:87:5a:38:59:87:fc:ff:85:93:b8:ab:58:c6:4a:e1:
         46:4c:31:d4:ab:1c:11:14:28:ab:1e:90:97:ae:65:ab:bc:cc:
         a1:d4:67:c9:9b:03:93:90:87:03:d7:95:81:65:dd:cf:3f:71:
         80:cf:94:a4:e5:f2:32:68:d3:a5:bd:71:f2:69:4b:24:80:b2:
         ed:24:ff:ad:95:d7:cc:b6:8e:35:14:85:13:25:de:c0:51:78:
         5f:60:ae:1b:8b:a4:10:5e:69:a5:b4:7e:9c:72:c9:90:de:26:
         e4:dd:c9:1f:1a:c0:fe:b2:c7:0c:b2:30:4f:79:6b:e5:4e:a8:
         ed:c7:f9:71:ba:34:d0:68:64:ab:df:53:c3:2c:3d:d6:6f:7a:
         a0:04:9d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:36 2026 by rpki-client