Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File:                     bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier:          OI4v4bu4NPSDe0PersUwG9SppQbr4FfuVZgaCvwNKjM=
Subject key identifier:   CC:76:92:62:47:D6:8B:45:81:96:88:91:0C:A3:11:DC:4E:59:D2:29
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer:       /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number:          36
Signing time:             Mon 11 May 2026 08:48:24 +0000
Manifest this update:     Mon 11 May 2026 08:48:24 +0000
Manifest next update:     Mon 18 May 2026 08:48:24 +0000
Files and hashes:         1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: uciDshKg1g2hD4K0wteVoGZ8MSPb1jrwYghjcuNp5TM=)
                          2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
        Validity
            Not Before: May 11 08:48:24 2026 GMT
            Not After : May 18 08:48:24 2026 GMT
        Subject: CN=6a0197d8-38d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:c0:9e:15:11:aa:f4:81:a0:e4:6b:8a:af:
                    f1:56:da:3d:30:4f:f1:59:96:4a:36:e5:50:40:81:
                    e3:ab:9e:29:d0:91:78:58:09:b0:2b:27:bd:b0:c2:
                    d4:33:53:24:1e:6e:18:c4:20:02:77:4f:f9:a0:65:
                    66:e1:b5:eb:80:06:af:66:1c:15:bf:da:35:21:c6:
                    1d:8a:a2:57:30:34:8a:df:0d:9d:e0:37:94:e1:bc:
                    38:ae:e4:19:d7:2f:f0:1c:26:3f:ab:c2:0a:dd:6e:
                    39:f9:24:3f:57:9a:89:9a:6b:95:80:2d:6b:f1:b4:
                    75:85:8d:bd:97:a7:95:84:f0:be:f9:3f:23:79:c0:
                    73:ea:b1:1e:50:e5:5b:b8:e7:86:cb:35:d3:47:8c:
                    09:e2:18:e9:fc:b0:49:ac:6a:3a:0a:77:db:22:d4:
                    e5:3a:ec:60:fa:32:bd:5e:85:1d:42:ae:e5:13:07:
                    3f:3a:d8:91:4c:54:7d:a7:09:ce:94:3c:f5:35:2e:
                    9d:10:9e:50:0a:3d:ff:46:1e:a9:e6:c9:8d:77:68:
                    f6:b4:63:db:ef:71:57:a5:43:82:46:f6:c3:54:6a:
                    80:72:30:a0:6f:72:95:06:ca:5b:69:af:cf:ae:03:
                    33:b1:1b:54:c6:d6:45:d2:3f:8f:e4:db:6b:ec:3d:
                    e9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:76:92:62:47:D6:8B:45:81:96:88:91:0C:A3:11:DC:4E:59:D2:29
            X509v3 Authority Key Identifier:
                keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3e:42:31:95:5a:3c:f1:85:c8:5d:5d:98:d3:48:77:ca:5e:
         a6:6d:47:f0:c4:d0:2b:09:bc:bb:a7:bf:15:c5:33:5a:18:92:
         de:a0:92:3a:54:c9:5a:09:69:e5:b4:78:99:f4:c0:b7:11:b0:
         89:a7:d6:ce:46:52:9a:3b:8a:7a:77:1b:78:c3:76:2b:58:be:
         a3:81:1c:1d:76:cd:e6:5c:68:9d:0b:38:31:20:41:66:e5:02:
         62:6f:cf:fd:01:b1:55:8d:29:88:cf:13:da:95:6e:92:5d:c7:
         1c:8c:d0:bc:a0:bd:59:a4:de:4b:f1:68:2f:79:3c:6d:e3:49:
         18:c1:7c:fb:75:ce:cf:a9:a4:b4:45:3a:55:f9:33:9b:db:c6:
         54:09:d1:eb:56:5f:db:96:a4:ca:59:3a:3e:49:b1:73:5d:d9:
         9d:a4:a3:1e:ba:5e:02:7d:d9:0b:b0:95:87:51:c4:ed:8c:8d:
         67:93:2c:06:66:eb:db:22:46:47:d8:a6:21:b1:03:84:48:11:
         92:e9:77:06:9c:b2:c2:f3:65:c1:be:45:d5:74:de:87:c4:33:
         27:b6:ec:b2:42:e5:2a:04:82:19:bb:1c:9b:52:27:c1:ac:18:
         51:8a:3b:d3:a5:db:56:fc:12:fe:09:4d:d0:95:a1:46:6e:14:
         14:06:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:09 2026 by rpki-client