Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
File:                     bjPVE5klw9tNCFk3zmms03vqeU0.mft (raw, json)
Hash identifier:          ZsXdi9Zmbv2RmLSWUnkMlpVHaE758OOzfJ/jaS690RQ=
Subject key identifier:   AA:05:DE:96:D8:24:8A:F1:38:E8:6E:AF:75:4F:30:02:6E:3B:04:B8
Authority key identifier: 6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D
Certificate issuer:       /CN=A91A8CD2/serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
Certificate serial:       0625
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
Manifest number:          061F
Signing time:             Tue 24 Mar 2026 22:29:35 +0000
Manifest this update:     Tue 24 Mar 2026 22:29:34 +0000
Manifest next update:     Tue 31 Mar 2026 22:29:34 +0000
Files and hashes:         1: bjPVE5klw9tNCFk3zmms03vqeU0.crl (hash: yLSeg/8PeVk0Ly2yI5szP2hC6+tOmeVrPlIqvdGoNwI=)
                          2: 5D10DEF0D8E811EB8ACD3C66C4F9AE02.roa (hash: 9EBALdwwijjeO4khfYPIpOopAS9O0iSalAHNRXIRSj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8CD2, serialNumber=6E33D5139925C3DB4D085937CE69ACD37BEA794D
        Validity
            Not Before: Mar 24 22:29:34 2026 GMT
            Not After : Mar 31 22:29:34 2026 GMT
        Subject: CN=69c3104e-a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:86:eb:74:4e:be:02:51:58:2e:a1:5a:e3:1c:
                    da:ea:7f:dd:f4:37:0a:2e:f1:6f:50:79:da:e8:a8:
                    49:c0:91:00:93:f8:32:eb:80:33:cb:2f:f9:e1:8f:
                    64:35:7f:b0:d2:67:ee:f8:33:d1:49:66:cf:2c:5b:
                    b5:54:70:96:f8:b0:2b:7d:95:d2:2c:fc:d5:89:0b:
                    4c:7b:8a:40:e7:b7:3b:03:01:2f:8d:50:24:60:b4:
                    86:9f:cc:b0:f3:21:04:84:7c:ed:73:09:63:9c:c7:
                    84:94:4f:90:18:c5:4a:59:36:6f:6b:0b:e3:97:29:
                    b9:ba:b2:48:e1:ae:56:a0:63:3e:0c:91:46:ca:50:
                    33:75:83:30:06:7f:ae:0b:f6:62:73:a0:5c:cc:2e:
                    e7:15:37:d4:95:25:68:a0:39:e8:43:e0:ce:db:6d:
                    e2:a1:92:ee:bd:1d:0a:89:8c:d4:b5:fe:9c:38:89:
                    24:d8:f6:3c:e6:5b:d0:3d:69:9f:57:31:10:53:ba:
                    49:24:b6:96:d1:81:a3:98:f7:5b:d1:f8:3d:08:d5:
                    75:9b:9f:15:23:62:56:d4:3e:30:0d:69:95:ba:fc:
                    11:e5:09:4e:24:5e:37:ad:32:ef:d2:fc:38:13:b1:
                    47:c3:9e:e3:76:bc:94:47:31:12:f3:fc:99:ec:de:
                    6d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:05:DE:96:D8:24:8A:F1:38:E8:6E:AF:75:4F:30:02:6E:3B:04:B8
            X509v3 Authority Key Identifier:
                keyid:6E:33:D5:13:99:25:C3:DB:4D:08:59:37:CE:69:AC:D3:7B:EA:79:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjPVE5klw9tNCFk3zmms03vqeU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CD2/043C6AF4D8E511EB80685D5FC4F9AE02/bjPVE5klw9tNCFk3zmms03vqeU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:72:a0:2f:02:e0:fa:14:a9:e2:db:d6:a6:a5:55:db:1a:5f:
         0d:28:c9:46:0b:53:c4:d1:bf:13:c6:79:ba:67:80:2a:aa:9c:
         07:47:44:48:bf:f5:70:3a:4b:cd:99:29:4a:d9:ae:a4:56:5c:
         62:e7:ba:5b:52:96:85:15:dc:7d:2e:a5:81:32:5a:a8:88:9e:
         11:3c:e2:2c:fc:2b:d6:16:6d:73:09:91:2b:3d:f1:41:7c:1e:
         4e:b0:5b:ca:3a:f4:be:f8:65:e0:b1:c1:d5:59:b2:f1:39:8e:
         ed:98:78:dc:70:1b:f8:96:5d:5d:8b:37:4b:35:f0:93:11:5e:
         89:44:bb:46:79:17:9e:6d:8a:db:e6:0a:7a:d0:b7:39:8d:08:
         27:79:81:76:14:a5:28:18:4e:e7:65:55:54:89:2a:78:b7:e8:
         2f:a1:9d:af:92:8b:ba:53:8e:a3:a2:3b:e0:9f:97:ed:bc:1e:
         57:49:00:f5:2a:dc:a8:83:ec:c8:88:3d:e6:71:db:9d:18:9c:
         8e:c4:b7:54:45:1f:17:d8:01:35:99:67:4c:46:b4:ea:1e:7f:
         9a:49:86:de:f6:9d:22:8c:b5:1d:bf:80:b1:ec:67:9b:d7:c2:
         7b:ff:6c:b3:80:ba:8c:4e:b4:bd:fc:79:25:08:3d:fe:99:96:
         c7:27:3d:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThDRDIxMTAvBgNVBAUTKDZFMzNENTEzOTkyNUMzREI0RDA4NTkzN0NFNjlBQ0Qz
N0JFQTc5NEQwHhcNMjYwMzI0MjIyOTM0WhcNMjYwMzMxMjIyOTM0WjAYMRYwFAYD
VQQDEw02OWMzMTA0ZS1hODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtIbrdE6+AlFYLqFa4xza6n/d9DcKLvFvUHna6KhJwJEAk/gy64Azyy/54Y9k
NX+w0mfu+DPRSWbPLFu1VHCW+LArfZXSLPzViQtMe4pA57c7AwEvjVAkYLSGn8yw
8yEEhHztcwljnMeElE+QGMVKWTZvawvjlym5urJI4a5WoGM+DJFGylAzdYMwBn+u
C/Zic6BczC7nFTfUlSVooDnoQ+DO223ioZLuvR0KiYzUtf6cOIkk2PY85lvQPWmf
VzEQU7pJJLaW0YGjmPdb0fg9CNV1m58VI2JW1D4wDWmVuvwR5QlOJF43rTLv0vw4
E7FHw57jdryURzES8/yZ7N5tFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKoF3pbY
JIrxOOhur3VPMAJuOwS4MB8GA1UdIwQYMBaAFG4z1ROZJcPbTQhZN85prNN76nlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENEMi8wNDNDNkFGNEQ4
RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5dE5DRmszem1tczAzdnFl
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JqUFZFNWtsdzl0TkNGazN6bW1zMDN2cWVVMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OENEMi8wNDNDNkFGNEQ4RTUxMUVCODA2ODVENUZDNEY5QUUwMi9ialBWRTVrbHc5
dE5DRmszem1tczAzdnFlVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAj3KgLwLg+hSp4tvWpqVV2xpfDSjJRgtTxNG/E8Z5umeAKqqcB0dESL/1cDpL
zZkpStmupFZcYue6W1KWhRXcfS6lgTJaqIieETziLPwr1hZtcwmRKz3xQXweTrBb
yjr0vvhl4LHB1Vmy8TmO7Zh43HAb+JZdXYs3SzXwkxFeiUS7RnkXnm2K2+YKetC3
OY0IJ3mBdhSlKBhO52VVVIkqeLfoL6Gdr5KLulOOo6I74J+X7bweV0kA9SrcqIPs
yIg95nHbnRicjsS3VEUfF9gBNZlnTEa06h5/mkmG3vadIoy1Hb+Asexnm9fCe/9s
s4C6jE60vfx5JQg9/pmWxyc92w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:10:18 2026 by rpki-client