Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
File:                     bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json)
Hash identifier:          1wW/fQdgTGmaqlXVOL0YHHL7uZVwasiy8Ut+E6j22VI=
Subject key identifier:   95:97:07:97:A9:1D:C6:07:EC:C9:37:98:A0:96:21:A7:AF:DB:38:98
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Certificate issuer:       /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial:       063E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
Manifest number:          0638
Signing time:             Tue 12 May 2026 22:48:52 +0000
Manifest this update:     Tue 12 May 2026 22:48:51 +0000
Manifest next update:     Tue 19 May 2026 22:48:51 +0000
Files and hashes:         1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: w7nqkMkWRu8S3nGI4dRRWuq7xlI8fN+twllq4ow4dYE=)
                          2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: 9EBALdwwijjeO4khfYPIpOopAS9O0iSalAHNRXIRSj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1598 (0x63e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
        Validity
            Not Before: May 12 22:48:51 2026 GMT
            Not After : May 19 22:48:51 2026 GMT
        Subject: CN=6a03ae54-651d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:ee:83:51:e9:b1:c4:88:3f:c1:c1:ce:c5:
                    f2:0d:ff:cb:ae:ba:ff:9a:cb:69:c0:92:ed:98:65:
                    2d:e8:73:42:75:ef:18:3f:63:65:c0:29:84:dd:95:
                    18:10:3a:2c:6a:d6:a6:6e:c7:4b:03:6c:0c:5a:8d:
                    43:39:fb:a8:92:35:56:4b:c0:d4:e8:62:2a:f4:e2:
                    32:af:df:ca:75:5d:73:37:fb:49:a9:7c:aa:bb:fa:
                    e4:bd:24:89:27:41:0c:6f:e5:72:5a:93:84:49:db:
                    29:7b:28:e7:7c:cd:88:78:fb:ea:34:26:8a:1e:b9:
                    ce:06:2c:5e:f1:32:46:74:89:a4:2d:83:99:8b:fd:
                    57:a0:30:94:10:9f:f6:c0:52:eb:d7:2f:56:6f:40:
                    a7:86:62:a8:6e:a1:6a:c8:e5:bf:e3:15:2a:8a:e3:
                    f3:3a:28:e6:ef:b5:66:70:47:1a:dc:9d:ca:af:66:
                    41:5b:ec:6f:f6:cb:9e:06:dc:68:1b:9b:00:d1:13:
                    ab:1e:d8:4a:b4:9f:ce:34:15:de:9c:d9:af:66:e1:
                    64:91:37:b4:72:23:4c:cb:36:47:34:2e:19:74:4d:
                    f1:67:2b:ce:b0:58:90:d2:3d:7f:4b:a1:27:7b:d3:
                    c3:d7:4c:d1:41:40:e8:ec:26:41:a7:c7:0e:44:9a:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:97:07:97:A9:1D:C6:07:EC:C9:37:98:A0:96:21:A7:AF:DB:38:98
            X509v3 Authority Key Identifier:
                keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:e4:4d:65:99:3c:ff:c9:60:06:ca:39:a0:ad:b6:8c:70:
         6c:b9:63:d4:df:64:bf:74:a1:f4:9b:a7:47:87:5f:0a:d1:e7:
         9e:c8:7e:ee:9b:de:11:c2:4f:73:fb:b9:d4:03:93:ea:41:78:
         1b:96:92:db:19:cd:c9:f8:9c:e3:6a:98:b0:4d:b6:e9:08:52:
         77:fb:6a:be:91:45:ac:21:91:bd:af:83:24:2a:b0:f6:96:74:
         71:45:fe:a7:f1:9b:35:01:1e:a4:82:5b:05:25:e7:e5:6e:b8:
         43:bc:9b:f5:c4:d3:44:2e:47:30:8d:18:24:f7:4d:f4:9f:68:
         cb:57:02:af:ed:7b:1a:80:ee:e9:cb:68:a4:66:67:b3:31:27:
         4e:df:5c:69:44:ca:cc:8c:13:3f:ed:91:af:e8:8c:ba:ee:76:
         a2:f1:b2:15:13:9b:a9:9c:30:d2:6b:5e:bb:e9:ee:bf:fe:43:
         99:38:b0:c2:d7:a5:2f:97:47:56:1f:34:5f:0c:21:97:ff:15:
         f8:a2:4c:b4:06:35:d8:2e:9f:42:33:ec:9b:e9:ac:8d:fa:ad:
         a5:ae:63:91:be:10:7a:01:63:13:1b:a7:79:51:3d:98:4a:f9:
         d5:3f:4d:ba:c6:3c:4b:23:75:7e:b7:a7:22:f5:cd:f2:e6:54:
         57:ee:29:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:41:25 2026 by rpki-client