Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File:                     bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier:          BxmdTAQZhk5cDx2UWJqelHhdVLRCibQ09M4KVn3d89g=
Subject key identifier:   BF:C3:F3:0F:0F:08:D4:FB:7F:5C:07:B9:F9:0A:A9:5E:4D:3B:0F:5B
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer:       /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number:          5A
Signing time:             Thu 23 Jul 2026 10:09:39 +0000
Manifest this update:     Thu 23 Jul 2026 10:09:39 +0000
Manifest next update:     Thu 30 Jul 2026 10:09:39 +0000
Files and hashes:         1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: v5PIVlMO4I9o1cpmyXjXHCTokhnXFf7lBmdCe34bUqc=)
                          2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
        Validity
            Not Before: Jul 23 10:09:39 2026 GMT
            Not After : Jul 30 10:09:39 2026 GMT
        Subject: CN=6a61e863-b9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:cc:dc:40:36:13:9b:bc:6b:cd:14:d8:59:
                    c3:ae:6f:6c:91:cc:75:32:5b:ed:45:d1:1d:b0:0f:
                    f8:0a:a1:64:6e:e9:37:f0:03:14:38:a5:04:c5:bc:
                    6f:8d:15:51:4f:1c:bb:51:7b:21:bf:b0:0d:85:93:
                    08:b1:a7:b9:c7:94:e6:1b:62:f8:2b:cd:63:a9:9e:
                    6f:13:67:e1:24:40:9e:59:82:69:1d:72:84:4a:9d:
                    c6:a9:f1:08:68:73:22:9c:62:96:95:6a:2e:81:2f:
                    b9:ad:80:b1:41:7e:d2:59:53:ea:b5:cc:c0:70:3c:
                    db:13:fd:85:41:d4:f0:23:9b:70:10:cc:e0:d3:86:
                    20:f3:87:21:73:49:11:94:82:53:99:1b:10:16:da:
                    d4:ed:cb:64:e7:71:42:c6:a3:9b:ed:ac:3a:36:d7:
                    89:04:03:6b:46:56:14:db:0b:00:3e:e5:d4:a0:6b:
                    2d:19:dc:37:11:a3:f9:2d:50:ef:c0:86:14:ad:78:
                    fb:78:14:b7:ca:80:4b:7c:b8:87:e7:c6:c2:71:fd:
                    fa:a6:ce:0f:be:e8:df:8b:58:38:22:d7:bf:f5:97:
                    9c:5c:a1:d5:9e:c4:1b:85:53:53:db:5d:c0:ff:f8:
                    d2:8e:1a:92:a7:f6:a7:60:47:a5:ec:c2:9e:d7:26:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C3:F3:0F:0F:08:D4:FB:7F:5C:07:B9:F9:0A:A9:5E:4D:3B:0F:5B
            X509v3 Authority Key Identifier:
                keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:62:94:f8:d6:72:ec:8d:b2:0e:cd:fc:56:bb:ce:34:00:a2:
         4e:68:3c:3e:09:d1:32:d9:b3:ff:22:02:4e:c0:0b:1a:18:d5:
         9f:b0:8a:8f:e5:6a:a3:bc:53:a5:02:7e:ad:3c:a9:73:f7:43:
         39:92:38:49:c4:05:f0:cd:4f:31:8b:de:57:b8:a5:bc:51:df:
         92:23:5c:8f:4b:72:e8:66:a3:56:c3:e5:79:7b:d2:7c:c9:20:
         63:17:53:8e:3b:ee:c0:28:26:b6:32:2d:22:03:da:4b:ab:df:
         14:26:d5:6d:9a:10:36:8e:78:21:59:85:f0:54:eb:2b:b1:5b:
         7d:80:5b:3d:d2:88:19:eb:16:4c:b8:21:63:6b:48:2b:2f:1d:
         b3:70:71:73:ac:79:15:f1:02:8e:c3:fd:fa:08:bf:e0:86:a5:
         62:ac:44:a9:ea:55:3d:56:7b:a2:16:de:8c:50:85:d8:ed:60:
         d4:b0:cd:7b:e1:c3:dc:e2:c7:c7:db:12:41:57:2e:76:2e:5f:
         04:0a:c5:fd:22:6b:07:0d:05:8a:ec:78:8b:b9:bf:9b:2c:2c:
         f9:ec:f1:e7:10:7d:8b:a4:64:97:04:ef:72:1f:28:d6:8e:59:
         df:4c:2a:ae:22:ec:06:f9:2f:c5:56:d2:06:05:78:e6:f2:d0:
         5f:16:70:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:37 2026 by rpki-client