Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File:                     bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier:          QZ0LpKJTblUUMsRsFwIOm7vfnm+8eVqkIMFPOw0Vdsw=
Subject key identifier:   3A:C4:D4:82:89:0D:14:A0:B0:04:FB:E2:97:C8:19:E3:D5:15:C0:04
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer:       /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial:       04E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number:          04D9
Signing time:             Mon 27 Jul 2026 00:47:07 +0000
Manifest this update:     Mon 27 Jul 2026 00:47:07 +0000
Manifest next update:     Mon 03 Aug 2026 00:47:07 +0000
Files and hashes:         1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: qDp3vGm1CH3QnuiLAhuqI4Xi/ICEyTv2sG5lMBtjtAA=)
                          2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: htZKbTCRw2kolIOs+1xX3ByAdUKRSkWwNNKR43qldvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
                          rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 00:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
        Validity
            Not Before: Jul 27 00:47:07 2026 GMT
            Not After : Aug  3 00:47:07 2026 GMT
        Subject: CN=6a66aa8b-8bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:d2:05:14:96:36:ea:be:ec:a6:a8:45:b7:
                    40:b4:81:92:02:80:5e:91:15:e1:ce:29:93:92:42:
                    b5:ea:b6:c6:db:6f:8d:2d:fc:bd:31:39:bd:82:bb:
                    f8:a5:52:ee:c6:2d:21:2a:00:53:ed:16:ce:e4:3b:
                    49:3d:0e:70:8b:dd:ec:81:8e:e2:4a:fb:f9:2f:4d:
                    c1:54:57:0d:ac:ac:bb:aa:88:43:55:08:1c:50:4f:
                    a2:45:af:02:44:e3:0f:48:a2:3f:4d:51:97:97:56:
                    35:a1:5d:c4:34:37:28:ff:30:fa:1f:e5:39:63:f6:
                    04:a6:ce:4f:ea:0e:17:39:2e:da:31:fc:c5:c1:36:
                    ba:6f:27:fe:80:b5:53:69:e1:b1:56:17:0c:e8:81:
                    98:fe:38:89:60:5a:69:9f:46:f2:79:5a:5e:61:4a:
                    14:60:9b:22:cf:23:72:08:36:a0:95:19:9a:ad:08:
                    9f:29:ea:36:0d:2e:b8:ab:dc:9c:ef:70:c7:84:a0:
                    b0:09:2b:58:bc:06:55:a0:4d:55:5b:b3:e3:ae:53:
                    c8:3b:a8:5a:34:b1:7e:0b:7e:0d:09:22:0d:fb:f3:
                    c8:7b:a6:e8:54:fb:05:b0:4e:7d:7d:e6:84:b5:8f:
                    e8:19:18:51:3f:aa:55:6a:58:ac:a7:ee:f4:23:c5:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C4:D4:82:89:0D:14:A0:B0:04:FB:E2:97:C8:19:E3:D5:15:C0:04
            X509v3 Authority Key Identifier:
                keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:6f:16:32:f0:89:27:bc:75:c6:d3:b2:af:8a:c6:12:2b:
         9a:00:15:ea:3e:dd:78:70:61:b5:2d:1d:2c:af:3e:07:bb:92:
         06:e3:25:c3:dc:7b:5c:e6:56:f3:d0:e8:77:e4:dd:04:46:08:
         8e:67:91:bc:a0:c5:b1:11:13:15:7c:27:ec:dc:0b:34:b5:6d:
         16:ef:01:a4:db:f9:56:b3:4d:8d:27:80:59:55:33:fd:db:8c:
         c8:43:62:0a:5c:57:8d:d4:97:e7:d5:36:4f:48:f7:87:3c:a3:
         75:97:f2:96:83:c7:1f:df:b5:6c:c8:82:6b:7f:d9:44:f0:cb:
         1f:68:97:e7:b6:f6:b5:62:82:eb:16:0a:e3:c8:bc:fd:84:05:
         64:e1:d3:ce:97:e6:8a:30:df:5b:b3:c9:dc:07:62:fd:61:26:
         9c:13:bf:cc:c5:53:b4:ea:51:9d:2b:f0:74:f4:e7:79:9f:17:
         b5:5a:58:d6:33:bc:94:43:45:f2:fd:98:ab:28:1a:b0:eb:36:
         84:ff:41:c5:54:a7:d5:c9:0c:2d:5e:08:95:a0:55:63:fe:9a:
         61:9d:94:da:4d:0d:63:37:b8:02:9a:e4:49:a5:8d:2c:d1:d3:
         e1:eb:18:8b:e9:44:09:37:3d:ad:e6:e6:a5:7a:1b:d3:a2:03:
         de:84:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:23 2026 by rpki-client