Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
File:                     bpbq_I_Ooaf_MezeClBm17HDxHo.mft (raw, json)
Hash identifier:          jgXA5fdHWgRHDDR9ogvbndiqMVYalD3iwYkI7IJ20uo=
Subject key identifier:   98:D3:67:49:58:6F:60:FA:A6:98:EC:81:CE:FB:8B:7A:9E:59:67:DE
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
Manifest number:          46
Signing time:             Mon 11 May 2026 08:34:59 +0000
Manifest this update:     Mon 11 May 2026 08:34:59 +0000
Manifest next update:     Mon 18 May 2026 08:34:59 +0000
Files and hashes:         1: bpbq_I_Ooaf_MezeClBm17HDxHo.crl (hash: e+oHGahZyUl86C76JnnAQwE/zYVFFsTz/p28k0ZP5LQ=)
                          2: EEE9D096FB5911F0B335DD54496F56BC.roa (hash: 6OTjANbCsH7alVj8xUPBjTt3S0ForgUt8vNg7J7WznU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: May 11 08:34:59 2026 GMT
            Not After : May 18 08:34:59 2026 GMT
        Subject: CN=6a0194b3-4b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:03:a1:93:cf:70:f6:6e:e9:f6:a0:58:e0:
                    55:09:9a:2d:15:82:d3:86:22:9e:9a:11:d4:18:3b:
                    e0:c2:52:17:cc:4c:e1:74:cd:6b:f3:46:1a:2f:06:
                    3a:d5:fe:fc:f4:32:0b:40:c1:51:3b:d9:19:3f:7f:
                    dd:31:e8:76:84:71:3b:07:38:33:4d:73:32:d4:0a:
                    55:86:1a:88:bb:96:63:00:ec:32:80:74:e9:56:5c:
                    db:a4:c1:64:49:41:88:99:db:df:47:29:4d:12:19:
                    04:60:b2:5d:94:3e:e7:c6:e9:61:c9:b8:0e:7d:c5:
                    50:b4:d2:3b:f2:1f:ca:f1:07:ab:d3:37:1f:8c:27:
                    d5:12:6a:ca:cb:de:e4:3e:bb:3c:1a:db:13:df:25:
                    fb:ec:f1:43:c2:78:ce:dd:f1:a9:cf:8b:cb:46:fa:
                    d5:fd:c2:58:71:49:39:c7:e3:66:5d:30:7a:28:f6:
                    1b:76:41:e5:ef:56:e3:2f:1b:d3:41:6c:3e:8c:6d:
                    e3:6d:54:28:42:99:d4:ea:cd:e6:a5:28:6e:4e:d6:
                    6b:8f:93:e6:b9:6c:63:e2:3b:31:6b:21:e1:1d:dd:
                    cf:ac:63:3f:72:32:19:3d:ca:a2:39:5e:85:28:ea:
                    48:d2:5e:b8:2e:b4:6c:e9:91:ff:e4:bd:9e:b8:cb:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:67:49:58:6F:60:FA:A6:98:EC:81:CE:FB:8B:7A:9E:59:67:DE
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:94:05:08:6a:2f:bb:0a:e6:ad:04:93:49:79:8a:56:7e:
         7f:97:ef:f9:43:74:25:66:03:4e:47:66:d0:60:9b:e3:a9:9b:
         ce:f6:85:b7:1e:5b:5c:18:2d:f1:15:df:31:d3:82:54:86:1f:
         27:eb:70:e3:91:89:1f:18:33:82:16:f3:90:d5:4b:56:f0:59:
         8c:1a:5a:74:15:10:04:1d:cb:10:d8:35:9e:29:85:4e:8b:cf:
         ba:b0:bd:dc:fc:68:c0:fe:5d:9d:df:9c:72:4b:72:8c:f7:0d:
         28:44:68:9c:ad:c9:83:c0:06:ee:83:8d:ba:6a:ce:51:f4:6a:
         99:dc:7a:5e:d5:60:cd:27:fc:e9:20:d9:46:01:c3:dc:7d:c0:
         14:a3:a3:25:f3:fc:7e:ce:54:4b:2e:eb:f4:b2:73:26:01:51:
         33:00:a6:b4:c3:38:61:24:06:b2:e4:69:9f:72:55:56:18:d2:
         1b:7b:b6:e8:ad:10:fa:b6:b7:27:a1:80:e4:45:1f:64:30:72:
         e6:ad:52:bf:4f:cc:f8:f2:51:f7:53:8c:b4:d0:8a:a7:53:09:
         c2:fb:3f:05:64:a8:71:29:af:b1:f4:3e:58:ed:d3:13:a8:4b:
         9e:1a:4b:89:c1:c8:b2:73:3a:24:2e:92:e3:51:b4:22:e7:2a:
         5c:2a:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:28 2026 by rpki-client