Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
File:                     BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json)
Hash identifier:          +hQZx2aad9knOPaBlensOYTLLiDB82LY7Fd02WIKV7Q=
Subject key identifier:   AB:2A:2E:F6:C5:67:0B:2E:19:72:D1:CB:DA:15:49:61:69:0F:4F:8C
Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51
Certificate issuer:       /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
Certificate serial:       0C7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
Manifest number:          0C7B
Signing time:             Tue 12 May 2026 18:39:57 +0000
Manifest this update:     Tue 12 May 2026 18:39:57 +0000
Manifest next update:     Tue 19 May 2026 18:39:57 +0000
Files and hashes:         1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: G8lgBRU2P3JrV+JUZazw/C2aMugGNt94hINZW/koiqI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl
                          rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:39:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3195 (0xc7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51
        Validity
            Not Before: May 12 18:39:57 2026 GMT
            Not After : May 19 18:39:57 2026 GMT
        Subject: CN=6a0373fd-22a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:5c:c6:da:81:99:5b:20:ad:36:dd:89:26:
                    9f:4d:01:33:f4:07:ad:e1:82:24:0d:f0:2f:18:fb:
                    39:2e:03:56:37:98:75:13:ec:2a:29:91:27:ab:76:
                    ba:70:6e:d0:12:27:0d:20:42:c2:5b:2a:89:b5:e1:
                    4e:68:55:e8:74:01:db:e1:31:8b:fd:6e:4d:12:d2:
                    13:78:ba:42:67:d1:43:04:f8:15:50:4c:f7:64:8a:
                    cf:5d:1e:24:cb:80:02:8a:c5:d6:32:5a:72:79:cc:
                    54:6d:ff:d5:4a:eb:7f:06:5f:59:7d:6a:35:2c:94:
                    f4:52:b0:53:76:bc:29:26:8b:da:50:7f:84:5c:a1:
                    66:3c:ff:cc:b8:7b:91:7e:4c:c3:3c:83:1d:e3:7f:
                    1a:62:8c:39:54:58:f8:8c:dd:ec:0a:17:d4:bc:5c:
                    80:db:39:de:80:36:96:7b:73:0d:4b:2b:c9:cd:1b:
                    3a:f9:7b:90:5c:7a:82:fa:f9:e5:26:7a:b0:d2:42:
                    ea:3f:b8:b8:95:3f:78:17:4e:dd:fd:9b:ab:5c:b0:
                    ed:35:56:51:69:ff:da:92:85:31:e2:0f:53:34:ab:
                    be:08:fc:1f:c2:b1:fb:96:69:35:28:67:25:dd:c6:
                    ef:ef:a5:d1:89:34:0b:66:1b:96:8f:9d:08:a7:f5:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2A:2E:F6:C5:67:0B:2E:19:72:D1:CB:DA:15:49:61:69:0F:4F:8C
            X509v3 Authority Key Identifier:
                keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:88:43:79:ad:19:0f:2b:e5:bc:31:48:4f:c4:4e:8a:4e:24:
         b2:3d:2a:3a:60:7c:ae:d4:3b:6e:a4:4d:8f:e8:e4:50:f3:2d:
         9c:7e:ef:e5:1b:cf:49:cb:55:5b:be:bd:04:88:2a:07:dc:d6:
         b6:0c:16:64:e4:3d:40:d9:21:d3:01:6a:4e:3d:51:7b:0e:3f:
         49:5c:5b:cb:3b:01:0f:cd:84:fb:b6:22:9c:e5:44:d4:45:28:
         02:30:f4:07:13:63:df:75:b5:13:6e:0a:1e:79:94:c5:10:f1:
         fb:f3:0e:5d:01:c6:f4:af:ee:be:3b:9d:27:ec:fd:2f:c7:85:
         11:ae:d3:25:ce:46:76:1a:bb:11:69:2d:a4:7a:21:1f:30:f6:
         e2:68:fc:c1:d9:08:bf:5e:c8:9b:19:61:36:88:bb:ee:b0:c0:
         02:3e:04:20:f2:a9:90:76:19:52:c2:09:fc:ba:90:c3:9b:04:
         88:be:fa:41:e5:88:fa:3e:a3:61:2e:bc:5c:12:13:9b:38:c8:
         6f:c1:d7:10:c1:4f:a0:26:f9:2d:fb:08:20:61:d0:60:80:ec:
         87:58:31:97:2f:d3:a0:3c:02:e6:a8:f7:5f:02:8d:c2:24:bc:
         42:64:6f:12:1d:7e:a7:82:95:62:3e:da:48:8b:d1:58:cf:a2:
         2a:b2:98:9a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1
RUEyRDRENTEwHhcNMjYwNTEyMTgzOTU3WhcNMjYwNTE5MTgzOTU3WjAYMRYwFAYD
VQQDEw02YTAzNzNmZC0yMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0HJcxtqBmVsgrTbdiSafTQEz9Aet4YIkDfAvGPs5LgNWN5h1E+wqKZEnq3a6
cG7QEicNIELCWyqJteFOaFXodAHb4TGL/W5NEtITeLpCZ9FDBPgVUEz3ZIrPXR4k
y4ACisXWMlpyecxUbf/VSut/Bl9ZfWo1LJT0UrBTdrwpJovaUH+EXKFmPP/MuHuR
fkzDPIMd438aYow5VFj4jN3sChfUvFyA2znegDaWe3MNSyvJzRs6+XuQXHqC+vnl
Jnqw0kLqP7i4lT94F07d/ZurXLDtNVZRaf/akoUx4g9TNKu+CPwfwrH7lmk1KGcl
3cbv76XRiTQLZhuWj50Ip/VDHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsqLvbF
ZwsuGXLRy9oVSWFpD0+MMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD
OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM
YXpobHNyNUdpRmRlb3RUVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArYhDea0ZDyvlvDFIT8ROik4ksj0qOmB8rtQ7bqRNj+jkUPMtnH7v5RvPSctV
W769BIgqB9zWtgwWZOQ9QNkh0wFqTj1Rew4/SVxbyzsBD82E+7YinOVE1EUoAjD0
BxNj33W1E24KHnmUxRDx+/MOXQHG9K/uvjudJ+z9L8eFEa7TJc5Gdhq7EWktpHoh
HzD24mj8wdkIv17ImxlhNoi77rDAAj4EIPKpkHYZUsIJ/LqQw5sEiL76QeWI+j6j
YS68XBITmzjIb8HXEMFPoCb5LfsIIGHQYIDsh1gxly/ToDwC5qj3XwKNwiS8QmRv
Eh1+p4KVYj7aSIvRWM+iKrKYmg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:33:45 2026 by rpki-client