Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File:                     ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier:          SJdk7XfCJgQpFw+6Z7KgYczr7Xdk7eT4YS30D/XTEtw=
Subject key identifier:   45:D8:A8:5E:E2:88:F7:7F:7D:C5:4C:F5:03:1E:5E:D7:F5:A8:EB:CA
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       09A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number:          0974
Signing time:             Thu 16 Apr 2026 20:04:23 +0000
Manifest this update:     Thu 16 Apr 2026 20:04:22 +0000
Manifest next update:     Thu 23 Apr 2026 20:04:22 +0000
Files and hashes:         1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: LAv+Dow2aF+FBSwCTUm9c+FvxaUGoFMrgWsP3iEIVbY=)
                          2: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: fjWgAJnqDT9NesXOUtIXnUStrD3jUP0xK+W90KMvE+0=)
                          3: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: m59icjETbPEsJARtE8RwhDRHt46zarweYBmDC8Z0f0c=)
                          4: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: 8hJGe41GHn/nQb/Y3ash++TM6zmcpgNi96YBeazW6/I=)
                          5: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: Y0bI926X3CaUrT8/nR8ZBhkaoJ5AjGGl5LLomYvK2ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467 (0x9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Apr 16 20:04:22 2026 GMT
            Not After : Apr 23 20:04:22 2026 GMT
        Subject: CN=69e140c7-2a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:32:f8:96:22:0b:9c:ad:0d:dd:55:b5:41:
                    9e:92:3f:0b:38:f7:24:a9:b0:27:b3:38:04:28:50:
                    b9:07:cf:90:70:5d:c5:36:5e:7c:38:c7:1a:cd:a6:
                    68:19:a0:99:77:ff:2f:f3:cc:ec:81:93:19:36:f2:
                    f2:73:5d:a6:40:98:6e:48:e6:b5:de:5c:3c:75:bc:
                    68:a9:16:35:91:9e:f2:10:ed:1a:8f:e0:47:37:8e:
                    90:30:f8:22:90:db:97:15:39:d6:c9:74:c4:96:60:
                    f4:a7:e6:ef:70:99:a3:76:b5:8a:61:c1:12:1e:15:
                    4b:bc:a8:e4:b8:2c:99:de:c2:c5:87:a3:a5:2a:93:
                    ce:72:0e:02:e4:fe:01:2b:97:c5:2f:46:89:89:d1:
                    3b:d3:ad:1c:76:de:9c:b6:2d:bb:03:a7:41:8b:85:
                    33:fb:62:c2:22:8d:48:98:b3:ac:da:2f:a5:9e:8e:
                    87:11:70:8c:95:90:1f:ea:9f:43:8d:3b:bb:87:c3:
                    bf:d1:74:2f:96:2f:3d:91:76:21:e6:5d:8f:b8:4f:
                    dd:f4:41:61:d0:3c:c8:6b:ba:6c:f1:6b:87:b0:83:
                    1e:84:7b:4c:b1:03:c9:c4:f5:a4:be:a3:bb:da:9a:
                    55:b3:a8:12:41:8d:4e:fc:f4:05:ab:ca:b0:94:0d:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D8:A8:5E:E2:88:F7:7F:7D:C5:4C:F5:03:1E:5E:D7:F5:A8:EB:CA
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:a5:4a:8c:8e:d1:f2:65:5e:68:f7:a2:69:b3:68:11:ad:
         e7:7a:d3:8c:ad:87:e1:fb:f1:a6:4b:7c:d0:a3:a5:e6:a4:df:
         22:49:b5:f8:92:dc:75:04:90:a6:96:2e:b1:1c:74:fc:4e:15:
         0c:31:ea:e2:ba:f6:b4:96:2b:ce:aa:fd:31:7f:34:62:b0:8e:
         05:97:66:04:be:07:32:51:1d:c6:74:53:08:da:97:d9:df:ff:
         7e:6c:9d:0e:aa:12:96:41:ea:d6:93:a1:2b:72:aa:ba:14:9e:
         d4:2a:6f:36:e3:f3:65:db:ac:4d:e8:00:d3:b4:f7:bb:29:80:
         89:25:e3:18:48:a3:1f:7b:03:33:24:59:b8:49:b7:78:6c:88:
         6e:f1:3d:6b:19:05:1b:0e:d4:e8:fd:ca:8c:a9:cf:d2:cf:23:
         dd:11:85:c4:a9:4d:71:f0:b2:e7:dc:cb:71:eb:0d:12:4d:b6:
         82:3c:02:a6:3d:74:bc:ba:8d:c3:ef:83:96:4f:67:bc:b6:4a:
         98:fa:27:69:b1:bb:7e:a9:6d:ac:bd:fb:9d:48:7e:df:4b:5c:
         d0:26:78:7c:9c:eb:c2:12:af:e2:8d:99:47:f4:5d:67:36:40:
         44:c9:1f:0e:27:d1:74:26:03:9d:2d:16:94:c8:b0:32:41:68:
         4b:5b:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:12 2026 by rpki-client