Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File:                     Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier:          d1msgrcz++0QlJXdWEivlw4OD9mcEc/cdyxJwr3ORSE=
Subject key identifier:   A1:B4:37:3B:BA:EB:CF:96:49:AD:ED:03:80:E8:73:38:07:A0:E6:F8
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer:       /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial:       0A77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number:          0A6D
Signing time:             Tue 12 May 2026 19:39:46 +0000
Manifest this update:     Tue 12 May 2026 19:39:46 +0000
Manifest next update:     Tue 19 May 2026 19:39:46 +0000
Files and hashes:         1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: 1YlteACYdCO/dGCphNTRQuifq5wVbGGDlrR/LNuCANA=)
                          2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: 3UdrZqdhdDJ0HDKYCaHDQZmp3LAxyKD7mCp5FO7bhxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
                          rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:39:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
        Validity
            Not Before: May 12 19:39:46 2026 GMT
            Not After : May 19 19:39:46 2026 GMT
        Subject: CN=6a038202-282c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:6b:11:5d:c2:25:ee:97:28:47:c5:dc:62:
                    e0:d9:66:b2:0e:e2:d3:74:36:e7:b6:4a:9d:35:79:
                    96:56:c8:91:bf:95:c6:8c:b4:2f:b9:c1:fa:b3:ca:
                    ca:2b:71:49:e9:b4:10:cf:fc:20:d0:a8:39:23:56:
                    8f:10:f0:27:a4:90:35:27:d4:15:2e:9b:c1:5f:dd:
                    2f:4f:23:78:14:f3:c5:b8:6e:a8:9a:de:c6:6d:6d:
                    fb:12:57:c8:f2:0d:1c:4e:b5:e1:2d:ae:cd:12:de:
                    81:a5:0b:87:cc:b3:7b:cc:72:04:60:ff:f7:fe:3a:
                    8f:31:cc:2a:af:79:6d:bd:3b:46:84:6f:6f:76:04:
                    28:49:81:c5:90:e5:ec:e1:ac:f2:11:6e:a0:d2:ca:
                    ee:6e:b5:4f:6c:b0:32:4f:9b:82:55:ee:c1:89:54:
                    fb:88:19:05:1b:3a:27:55:5a:96:6b:9b:49:3f:da:
                    e0:2a:fc:eb:4c:7b:dd:e5:bd:69:dc:96:33:33:86:
                    47:7c:2f:01:50:de:1b:e3:a9:37:d4:1d:59:49:df:
                    b1:a2:e0:9a:e5:d1:0b:88:53:dd:20:39:02:20:9e:
                    1c:77:9e:7c:c6:8b:4d:92:41:3f:4b:67:9c:a6:dd:
                    ee:0e:53:f1:77:25:b7:1d:17:22:82:f2:5a:0e:1f:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:37:3B:BA:EB:CF:96:49:AD:ED:03:80:E8:73:38:07:A0:E6:F8
            X509v3 Authority Key Identifier:
                keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:02:ca:e1:b6:5b:f1:e6:2a:29:65:38:a8:8e:d3:1b:8e:c7:
         7a:5e:e4:c0:77:45:ba:a5:38:80:af:8c:41:f8:69:f9:1c:43:
         78:5e:45:f3:c4:e0:44:7e:e8:7e:5f:38:51:fc:0f:a5:10:a8:
         e8:ee:03:24:70:59:fe:1d:ec:c3:b7:dc:45:44:3a:99:5f:e7:
         54:97:b7:38:e5:d4:a4:19:37:15:f0:65:11:77:af:d3:2e:79:
         cf:67:69:39:c7:02:13:d6:b4:e5:cd:89:7e:d4:a9:3e:d4:5a:
         02:c7:17:f4:dd:78:49:9d:61:44:79:fa:36:47:9f:0c:15:17:
         46:6f:30:2c:ca:81:65:6b:68:e0:6a:18:06:cd:0f:63:09:b4:
         30:f8:8d:97:7f:62:ce:f0:d6:a1:16:15:b5:c1:c8:f5:7e:ea:
         ae:91:96:e0:e8:c7:f4:73:7a:85:6a:cd:43:82:a3:cb:0b:9b:
         de:8c:03:6f:11:06:b4:61:f9:0d:c4:7a:3b:e7:14:2c:b0:a2:
         20:32:36:82:61:e8:f3:9f:17:95:31:7a:22:36:db:1f:ac:82:
         b8:84:96:40:2a:35:6a:6e:f9:df:b2:0b:93:7b:22:1d:3f:c0:
         1b:30:d0:b0:ce:30:f0:c0:3b:88:6b:26:0b:50:d8:44:57:de:
         d1:40:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:41 2026 by rpki-client