Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
File:                     Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json)
Hash identifier:          4uvE5UN4bsY2kUovq2Asnwj2Ia72l9bbeZIyp240sMU=
Subject key identifier:   99:5F:2D:8D:05:28:0E:34:6D:83:89:89:13:FC:F4:4A:91:58:7C:80
Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D
Certificate issuer:       /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
Manifest number:          06D0
Signing time:             Tue 12 May 2026 22:22:50 +0000
Manifest this update:     Tue 12 May 2026 22:22:50 +0000
Manifest next update:     Tue 19 May 2026 22:22:50 +0000
Files and hashes:         1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: wIpnXWxIsctINxMWLox4U42mMPi/3hnGroarnwwFpQk=)
                          2: A80223709F4411EB92132051C4F9AE02.roa (hash: WKP11mDXvcNeb04K1HpMsimnGByRtnzL78yP76ibT+4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl
                          rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
        Validity
            Not Before: May 12 22:22:50 2026 GMT
            Not After : May 19 22:22:50 2026 GMT
        Subject: CN=6a03a83a-dbc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:49:b4:18:6f:a5:f2:2c:29:10:b4:fe:47:
                    ca:c1:90:ca:e7:34:66:fa:dc:e3:90:c7:0a:a2:03:
                    3e:53:a1:e0:5f:d5:40:5e:3d:d7:f9:28:36:9b:94:
                    09:24:7d:30:c5:d4:bd:f5:e0:e8:53:5b:63:bb:1e:
                    fc:5a:7a:52:f8:07:68:13:52:a4:36:18:3a:be:df:
                    62:7b:1d:34:1e:a6:c8:36:57:ef:ad:27:da:4c:cc:
                    8c:3f:21:bb:88:e4:7a:41:0e:f9:a8:c7:53:2b:0a:
                    36:db:16:b3:a7:04:1d:e9:de:cb:57:1c:a0:32:a6:
                    c6:14:9d:8c:3b:81:4b:b2:6d:d2:3f:04:b2:7a:b2:
                    21:79:79:a2:f5:09:36:20:c4:25:5c:9b:1c:d2:5f:
                    5f:ab:75:3b:1c:f6:44:ac:95:0e:a5:89:a0:e2:df:
                    8a:f2:be:48:5a:14:ba:76:6a:ee:5a:f5:57:38:21:
                    8c:75:f0:69:38:77:b3:04:a6:bb:81:7f:4f:ea:1b:
                    b1:44:3d:73:7c:0d:f9:45:15:fb:49:7d:32:22:87:
                    db:37:1c:0d:53:82:9b:9d:44:0b:b2:9c:20:83:69:
                    37:40:07:11:cf:d7:9e:04:25:63:f2:a0:7a:36:89:
                    9e:69:c5:97:1b:21:83:52:88:2f:5c:0c:53:e3:9a:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5F:2D:8D:05:28:0E:34:6D:83:89:89:13:FC:F4:4A:91:58:7C:80
            X509v3 Authority Key Identifier:
                keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:53:b9:bf:6a:d3:69:90:fb:13:87:88:46:54:36:de:4b:aa:
         06:99:5a:80:7d:d5:a5:19:30:dd:60:e7:5c:94:35:f2:f8:ac:
         1d:73:1b:ab:38:74:63:53:1f:2e:34:50:13:f6:40:26:06:02:
         3b:d7:c4:b3:e9:5a:ca:dd:43:33:02:03:90:2f:3d:af:4c:33:
         6f:aa:f3:19:61:04:00:ba:53:fb:b0:8b:42:63:e6:a5:b4:10:
         59:bd:81:98:5d:c3:fc:3e:a0:4c:d5:89:64:65:87:b9:70:75:
         fe:44:1f:74:c0:d8:a8:cf:5e:87:f8:2b:e8:29:b9:0e:f0:4d:
         14:88:38:1f:87:66:75:60:0b:eb:9f:94:d6:ae:2c:5f:dc:92:
         b5:0c:69:0a:25:37:a1:e1:c3:dd:2f:6f:c6:74:23:91:5e:63:
         c5:94:a1:c8:31:cc:86:8d:67:1b:7a:0e:f4:95:f4:e4:27:af:
         37:d3:24:31:52:b1:01:42:f2:95:0d:38:ae:5f:95:37:3d:42:
         11:3d:14:66:95:8c:01:60:0f:96:8f:b8:25:e6:dd:ab:3f:45:
         22:76:da:56:51:20:dd:2b:48:e1:51:32:78:bb:c2:db:8d:43:
         ab:63:31:a0:44:7b:48:7c:25:1f:d8:64:a8:5a:ee:43:43:c7:
         5f:01:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:42 2026 by rpki-client