Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
File:                     BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft (raw, json)
Hash identifier:          vVH22wYvBxfzrvMDlrOyusQqG+4yMw03jgxBp2lb4Xw=
Subject key identifier:   A0:AE:CA:2A:49:44:EE:52:53:64:5B:C7:CC:81:4E:5D:F9:72:81:40
Authority key identifier: 04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9
Certificate issuer:       /CN=A9120BC1/serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
Manifest number:          5E
Signing time:             Sun 01 Mar 2026 09:30:04 +0000
Manifest this update:     Sun 01 Mar 2026 09:30:03 +0000
Manifest next update:     Sun 08 Mar 2026 09:30:03 +0000
Files and hashes:         1: BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl (hash: FDpv2lig6IvvRgDtsdgw5OiwuucS7eqXIS05kFSvByo=)
                          2: 309260868C7311F0A82E0E57C4F9AE02.roa (hash: DfBJQ3k9mLnvtH5/59OE4Ql1Nm5pTBAatkbZQBsoojY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl
                          rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120BC1, serialNumber=04A8F28F527E189167ACC9030CBEDAD8A9C417B9
        Validity
            Not Before: Mar  1 09:30:03 2026 GMT
            Not After : Mar  8 09:30:03 2026 GMT
        Subject: CN=69a4071b-3a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:d9:50:58:69:13:f2:eb:1b:82:d7:b9:bc:
                    f2:f1:f7:17:46:97:51:ea:7c:da:a0:43:f4:f4:40:
                    1d:48:e0:be:a6:97:af:58:0c:37:de:c3:c0:4f:79:
                    5b:be:d2:d9:4c:34:eb:e9:1f:ea:02:57:7d:a9:34:
                    45:0d:e5:5f:eb:27:ef:28:e2:3f:a0:e7:ef:e9:fb:
                    10:63:c0:01:f6:c2:74:9a:8b:dc:d1:ac:c2:f1:03:
                    6c:4e:6a:7d:18:71:f6:9f:58:5c:a6:f1:81:4f:eb:
                    47:11:32:52:58:9a:c4:c6:b9:ec:ed:ba:13:ac:de:
                    da:7e:93:a2:87:6e:6c:ba:9b:b5:9a:70:70:d5:2c:
                    f0:23:29:8c:5a:3d:3c:dd:ab:5b:47:a0:20:ea:5c:
                    18:6f:4d:7f:cc:94:0d:e3:ae:db:67:b1:73:b2:19:
                    1d:bf:6a:44:57:3d:d6:c8:27:21:6a:05:ad:ea:af:
                    69:30:f3:ff:86:43:9d:f7:12:6c:68:32:de:f8:51:
                    d8:f1:4b:f5:3e:4a:90:17:ba:ea:09:bf:cc:61:63:
                    ee:7b:99:51:5c:70:5e:c2:68:f9:1a:13:df:1f:de:
                    a1:a4:37:73:26:d1:30:21:8b:45:4a:cf:74:a3:27:
                    4e:2c:0a:fe:d0:48:76:0a:dc:4c:75:e5:ed:aa:af:
                    90:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AE:CA:2A:49:44:EE:52:53:64:5B:C7:CC:81:4E:5D:F9:72:81:40
            X509v3 Authority Key Identifier:
                keyid:04:A8:F2:8F:52:7E:18:91:67:AC:C9:03:0C:BE:DA:D8:A9:C4:17:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKjyj1J-GJFnrMkDDL7a2KnEF7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120BC1/DAC603888C7211F0A2B0AE56C4F9AE02/BKjyj1J-GJFnrMkDDL7a2KnEF7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:43:b4:40:3a:d4:44:8c:09:59:13:43:94:07:c5:1a:ab:99:
         06:09:56:b3:70:9f:45:72:29:52:53:ea:8a:9f:73:10:5c:f9:
         20:b2:a8:1a:4a:af:7e:b9:b3:da:59:e1:e6:94:7c:91:0a:a6:
         56:cd:7c:aa:ca:54:f3:1f:a9:df:5f:86:d4:86:b1:a4:c0:bb:
         33:58:43:f1:a5:54:e7:d9:03:ed:be:99:8d:0b:a2:e9:a1:5e:
         4e:69:b0:d5:39:66:07:70:3a:5d:2e:91:de:9c:e1:3c:ed:5a:
         71:40:38:3e:92:9a:14:11:95:5c:3f:49:d9:5f:54:f2:85:9d:
         66:a6:87:2c:ec:d3:f1:4d:c0:c8:fb:92:49:68:25:16:09:fd:
         95:c2:b8:39:07:14:c7:b9:2a:4a:db:ce:73:f9:00:ac:60:ac:
         45:ae:0e:27:a1:9a:c3:ce:8e:2e:3a:4b:c2:91:27:ac:49:c7:
         63:ae:db:14:b1:09:f3:dc:cc:9f:05:9c:2c:49:56:e4:20:6f:
         e1:5a:52:c6:20:65:d0:8d:51:6e:5a:b1:d8:08:cc:57:1d:65:
         42:0c:78:a2:61:7e:90:af:fa:07:61:4b:54:96:73:01:cb:0c:
         1a:48:3f:df:1f:6b:94:bc:52:a0:24:4b:c6:ca:cc:ef:32:ac:
         ce:17:ab:48
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MEJDMTExMC8GA1UEBRMoMDRBOEYyOEY1MjdFMTg5MTY3QUNDOTAzMENCRURBRDhB
OUM0MTdCOTAeFw0yNjAzMDEwOTMwMDNaFw0yNjAzMDgwOTMwMDNaMBgxFjAUBgNV
BAMTDTY5YTQwNzFiLTNhNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnFNlQWGkT8usbgte5vPLx9xdGl1HqfNqgQ/T0QB1I4L6ml69YDDfew8BPeVu+
0tlMNOvpH+oCV32pNEUN5V/rJ+8o4j+g5+/p+xBjwAH2wnSai9zRrMLxA2xOan0Y
cfafWFym8YFP60cRMlJYmsTGueztuhOs3tp+k6KHbmy6m7WacHDVLPAjKYxaPTzd
q1tHoCDqXBhvTX/MlA3jrttnsXOyGR2/akRXPdbIJyFqBa3qr2kw8/+GQ533Emxo
Mt74UdjxS/U+SpAXuuoJv8xhY+57mVFccF7CaPkaE98f3qGkN3Mm0TAhi0VKz3Sj
J04sCv7QSHYK3Ex15e2qr5CrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoK7KKklE
7lJTZFvHzIFOXflygUAwHwYDVR0jBBgwFoAUBKjyj1J+GJFnrMkDDL7a2KnEF7kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwQkMxL0RBQzYwMzg4OEM3
MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pGbnJNa0RETDdhMktuRUY3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQktqeWoxSi1HSkZuck1rRERMN2EyS25FRjdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIw
QkMxL0RBQzYwMzg4OEM3MjExRjBBMkIwQUU1NkM0RjlBRTAyL0JLanlqMUotR0pG
bnJNa0RETDdhMktuRUY3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAwQ7RAOtREjAlZE0OUB8Uaq5kGCVazcJ9FcilSU+qKn3MQXPkgsqgaSq9+ubPa
WeHmlHyRCqZWzXyqylTzH6nfX4bUhrGkwLszWEPxpVTn2QPtvpmNC6LpoV5OabDV
OWYHcDpdLpHenOE87VpxQDg+kpoUEZVcP0nZX1TyhZ1mpocs7NPxTcDI+5JJaCUW
Cf2Vwrg5BxTHuSpK285z+QCsYKxFrg4noZrDzo4uOkvCkSesScdjrtsUsQnz3Myf
BZwsSVbkIG/hWlLGIGXQjVFuWrHYCMxXHWVCDHiiYX6Qr/oHYUtUlnMBywwaSD/f
H2uUvFKgJEvGyszvMqzOF6tI
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:07:49 2026 by rpki-client