Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File:                     bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier:          9q98WTUuur9KmQFWmYdIlTu0eG4XdqV3gZNY8TcN6iU=
Subject key identifier:   CC:78:F7:EB:42:92:99:73:B4:30:08:99:5A:61:9C:F5:BA:34:6D:6D
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer:       /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial:       058B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number:          0584
Signing time:             Thu 16 Apr 2026 23:10:18 +0000
Manifest this update:     Thu 16 Apr 2026 23:10:17 +0000
Manifest next update:     Thu 23 Apr 2026 23:10:17 +0000
Files and hashes:         1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: h4pUdakuOUYhNEFl6VSkIhEuCUzVOge7Z3Onuj26cLg=)
                          2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: v0rJzZLI+1O5nfOP2tDFakvguyT8MUXLjwiVOqN97W8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
                          rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1419 (0x58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
        Validity
            Not Before: Apr 16 23:10:17 2026 GMT
            Not After : Apr 23 23:10:17 2026 GMT
        Subject: CN=69e16c5a-3e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:e2:7d:e6:55:c4:db:50:25:ba:83:f9:b6:
                    aa:74:c3:93:1f:f6:f6:ed:ca:85:2a:00:dc:b6:56:
                    29:4c:33:15:29:76:35:57:47:ca:84:f6:3c:6a:ce:
                    c3:05:36:6c:38:2e:c7:92:f3:d9:e9:24:8b:d4:0e:
                    aa:f8:f2:2b:2a:34:cb:0b:47:31:c4:21:85:ed:9d:
                    b2:1a:4d:ff:99:30:41:68:0d:a2:58:d3:d8:77:fc:
                    d3:34:f6:72:a7:1a:ff:f3:2b:c2:d5:79:61:f5:52:
                    4f:47:55:e8:25:0c:33:4f:39:5d:27:02:c3:7a:4d:
                    11:d5:9e:1d:8b:de:98:f5:fc:4b:d9:30:a2:57:06:
                    7b:ef:99:bf:96:56:3b:69:a0:c6:2b:fd:85:52:27:
                    98:1c:be:31:42:82:23:66:6c:1a:54:91:4f:e2:70:
                    90:90:de:97:f7:c4:69:b3:b2:bf:9c:34:cc:9f:be:
                    95:8d:4b:7b:39:d1:83:c9:54:ba:17:87:1e:77:aa:
                    74:0c:17:d7:1a:aa:b9:20:94:49:c2:fd:26:9e:66:
                    5c:9e:80:a8:83:1e:65:6a:50:9d:9b:f4:34:73:ca:
                    09:7a:b2:2c:48:78:a5:97:8d:64:f2:19:ba:77:47:
                    74:f1:1c:85:35:fa:77:f8:fa:52:08:3a:45:75:0b:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:F7:EB:42:92:99:73:B4:30:08:99:5A:61:9C:F5:BA:34:6D:6D
            X509v3 Authority Key Identifier:
                keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:09:8c:80:e2:a8:a9:b1:cb:b1:ba:ad:fa:a6:a5:45:be:
         97:ab:b7:13:80:7a:51:30:a9:b7:7f:71:f5:ea:44:1b:e2:10:
         07:51:c9:ef:85:44:d6:dc:a4:e9:4f:80:4d:2a:b8:fd:26:ea:
         2b:33:98:bf:80:07:99:c9:ca:0c:f1:9a:df:1f:16:a6:40:a6:
         5e:f7:81:ed:37:da:d5:26:b7:a1:a5:cb:95:b8:e3:d9:1e:57:
         d3:a9:79:60:0f:d3:75:ad:22:0c:d1:0f:29:c7:ae:3d:f0:2c:
         a5:b7:0a:83:0f:50:87:c2:15:32:3f:2f:e8:01:5c:21:3a:ec:
         87:3c:41:f3:53:61:50:46:da:bd:96:ea:ae:8c:c5:b2:c3:9d:
         c5:fa:20:0c:8d:21:b1:80:81:4b:44:e1:c6:62:28:f3:2e:c3:
         cc:9b:39:ca:22:b8:d3:02:85:4b:c7:bd:6c:1d:dd:5f:ab:24:
         b4:1d:5b:4d:71:a9:69:00:69:91:82:17:7f:65:23:e3:4e:1a:
         76:53:b1:e3:b5:b8:7b:cd:9b:36:50:1a:41:61:76:18:d8:fd:
         25:aa:88:5f:47:64:c5:14:51:c8:c7:a4:77:b8:85:8e:4a:0f:
         15:b9:8a:74:40:06:a9:11:8b:6f:e4:34:36:e3:03:f8:ed:b1:
         97:a5:e6:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB
MkNGN0U4NDkwHhcNMjYwNDE2MjMxMDE3WhcNMjYwNDIzMjMxMDE3WjAYMRYwFAYD
VQQDEw02OWUxNmM1YS0zZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYbifeZVxNtQJbqD+baqdMOTH/b27cqFKgDctlYpTDMVKXY1V0fKhPY8as7D
BTZsOC7HkvPZ6SSL1A6q+PIrKjTLC0cxxCGF7Z2yGk3/mTBBaA2iWNPYd/zTNPZy
pxr/8yvC1Xlh9VJPR1XoJQwzTzldJwLDek0R1Z4di96Y9fxL2TCiVwZ775m/llY7
aaDGK/2FUieYHL4xQoIjZmwaVJFP4nCQkN6X98Rps7K/nDTMn76VjUt7OdGDyVS6
F4ced6p0DBfXGqq5IJRJwv0mnmZcnoCogx5lalCdm/Q0c8oJerIsSHill41k8hm6
d0d08RyFNfp3+PpSCDpFdQskBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMx49+tC
kplztDAImVphnPW6NG1tMB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC
RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2
RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw
amJPV0RFMkM5MEtpejM2RWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWP0JjIDiqKmxy7G6rfqmpUW+l6u3E4B6UTCpt39x9epEG+IQB1HJ74VE1tyk
6U+ATSq4/SbqKzOYv4AHmcnKDPGa3x8WpkCmXveB7Tfa1Sa3oaXLlbjj2R5X06l5
YA/Tda0iDNEPKceuPfAspbcKgw9Qh8IVMj8v6AFcITrshzxB81NhUEbavZbqrozF
ssOdxfogDI0hsYCBS0ThxmIo8y7DzJs5yiK40wKFS8e9bB3dX6sktB1bTXGpaQBp
kYIXf2Uj404adlOx47W4e82bNlAaQWF2GNj9JaqIX0dkxRRRyMekd7iFjkoPFbmK
dEAGqRGLb+Q0NuMD+O2xl6XmDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:26 2026 by rpki-client