Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File:                     bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier:          XH4wYjMqFLScdgdNtPknV+zrTVj5i4ivraNuwMm41yI=
Subject key identifier:   59:FA:3C:18:0F:B6:67:7E:0E:45:1E:C7:03:E3:0D:11:0A:39:00:D0
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer:       /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number:          05A1
Signing time:             Fri 12 Jun 2026 23:12:46 +0000
Manifest this update:     Fri 12 Jun 2026 23:12:46 +0000
Manifest next update:     Fri 19 Jun 2026 23:12:46 +0000
Files and hashes:         1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: FUz9gms2zNMqAQMQ+XOxzpTHiULY8M8MoaxyWWlLRyk=)
                          2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
                          rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
        Validity
            Not Before: Jun 12 23:12:46 2026 GMT
            Not After : Jun 19 23:12:46 2026 GMT
        Subject: CN=6a2c926e-cf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:a5:ae:5f:74:64:47:11:e9:d3:45:06:c8:
                    27:76:07:10:23:4f:c3:aa:00:cc:da:b0:5b:1e:b6:
                    56:d0:fa:ca:11:b6:5e:3e:f4:c9:65:f7:8d:b5:5e:
                    d8:a0:2a:30:79:7e:8e:15:8b:58:c8:3b:46:2f:4c:
                    f7:49:c9:df:58:ad:34:a0:9e:33:25:6d:72:7e:67:
                    04:63:3b:76:7c:a3:6c:a7:ef:2f:41:07:aa:6e:e4:
                    f5:67:0c:d8:2c:8a:d7:6a:c1:30:65:3b:f3:f9:43:
                    94:9f:46:e8:9a:43:6d:6f:fe:aa:74:b3:52:d1:22:
                    c2:69:2f:c3:1d:2f:a4:9f:ca:76:88:f7:33:b9:d5:
                    35:1e:75:b2:63:db:db:91:ac:4d:9f:24:42:8b:75:
                    25:87:23:f7:67:f3:4a:01:d5:f3:a0:18:66:b8:a9:
                    2e:57:c3:90:7e:96:4d:e7:13:86:0a:44:10:64:29:
                    c7:fa:1b:e9:3f:89:60:96:d3:5f:b2:6f:ab:85:95:
                    78:b9:cb:ac:c8:0f:77:35:f9:54:fe:24:6b:26:3f:
                    a3:03:37:e8:7d:e4:61:7a:67:29:18:0d:2b:21:55:
                    07:08:f5:da:6a:19:33:87:5b:d5:5d:1c:1f:de:db:
                    cb:0b:3c:96:81:47:c6:1e:94:36:e6:e7:b7:c3:cb:
                    b9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FA:3C:18:0F:B6:67:7E:0E:45:1E:C7:03:E3:0D:11:0A:39:00:D0
            X509v3 Authority Key Identifier:
                keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:2f:fb:5b:95:04:91:ee:04:70:db:67:e6:4f:83:d4:27:
         0c:07:fa:cb:6e:04:54:90:c1:03:83:3e:83:e5:f6:79:4c:45:
         d2:cd:a4:70:6d:0b:85:16:9e:da:09:9e:a5:c4:e7:2a:72:8c:
         aa:22:9d:1c:42:fc:ef:d4:31:ce:f8:dd:d0:bc:ff:05:44:8f:
         68:2e:6c:f8:51:05:c8:88:17:a2:64:4b:70:6c:f5:9a:f8:a7:
         b6:0d:5c:9d:8c:28:69:c1:3c:9e:9f:72:81:da:e6:86:9a:c8:
         61:e0:13:a5:fc:01:49:d2:f2:7b:e9:82:50:63:f4:40:31:9e:
         c6:48:04:79:69:db:f0:06:99:d0:4d:3f:b4:59:05:b4:fb:1d:
         7b:86:2f:48:78:77:19:61:4a:7c:82:51:06:6a:f6:74:8f:58:
         0b:69:1d:a6:5a:db:e2:27:b2:88:e6:22:ab:92:42:99:94:3c:
         52:21:4d:5c:4c:e0:cb:39:10:b8:d6:fa:f4:d2:df:f5:21:67:
         dd:0c:04:a3:24:48:8c:b2:d8:6a:88:f5:70:6c:5c:72:e1:1a:
         75:8f:40:82:45:07:31:d4:ad:7f:31:9b:a4:2b:c1:85:da:30:
         77:4e:00:9e:a5:5d:c9:4e:27:0d:18:5d:ad:9b:bf:2c:27:80:
         a2:7f:a3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:34:53 2026 by rpki-client