Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
File:                     bsuJSMsSdC3GH2RUECvzGsaoT9U.mft (raw, json)
Hash identifier:          R+M9mNcsp254xLOJxp7N4EXyUTRPmf4y3Y7Zw9yOE60=
Subject key identifier:   BE:1D:6E:DE:C7:D8:0E:C1:A7:F8:5C:62:D8:54:B2:56:AB:6C:C0:30
Authority key identifier: 6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5
Certificate issuer:       /CN=A9161B14/serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
Certificate serial:       1BF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
Manifest number:          1BE7
Signing time:             Fri 12 Jun 2026 16:11:56 +0000
Manifest this update:     Fri 12 Jun 2026 16:11:56 +0000
Manifest next update:     Fri 19 Jun 2026 16:11:56 +0000
Files and hashes:         1: bsuJSMsSdC3GH2RUECvzGsaoT9U.crl (hash: /q/t6ECm7AB08mHxzLtWN+9rYbYO+MvAoTXUfi+scdE=)
                          2: DCDCF87AE17511E8886B1878C4F9AE02.roa (hash: Beu7VbTQzdwJMvqmpcL7L0qoIs02xDsFIrO4v53qnZU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl
                          rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7152 (0x1bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B14, serialNumber=6ECB8948CB12742DC61F6454102BF31AC6A84FD5
        Validity
            Not Before: Jun 12 16:11:56 2026 GMT
            Not After : Jun 19 16:11:56 2026 GMT
        Subject: CN=6a2c2fcc-119b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:b5:5d:e5:54:25:64:43:7c:4d:76:e7:c9:
                    72:fc:69:80:7e:cb:f0:86:97:71:fd:18:da:42:f4:
                    7a:29:32:60:81:c1:cb:7a:52:1f:d4:a3:55:d6:5e:
                    be:39:fa:3f:ff:8e:91:94:e4:49:6c:a5:f7:de:9b:
                    93:7e:eb:d4:22:8c:b4:f4:22:3d:9b:8b:46:b1:ac:
                    e9:8a:61:25:dd:a0:86:c7:7f:46:00:46:d1:f3:8d:
                    99:46:ba:76:ea:b1:ed:de:86:cd:e6:a0:f6:c6:79:
                    14:3a:1a:7d:64:92:3e:51:80:df:f1:ca:33:7a:13:
                    b1:98:6f:3e:8c:b7:96:8b:5e:08:be:58:ba:b6:63:
                    70:8f:b2:33:db:12:e8:c9:78:5a:78:64:cd:c8:36:
                    e4:36:a4:a1:8b:02:2c:53:38:bc:76:cf:9a:e3:9b:
                    b2:82:46:1e:60:93:b6:ca:8d:4c:db:92:39:c2:35:
                    da:1c:de:1a:39:30:8b:7f:fa:ad:a5:6c:c1:80:88:
                    f3:9e:4d:53:91:c0:90:1b:50:d5:d9:c6:37:30:a9:
                    06:5c:f9:fa:f9:9a:7a:84:16:62:5b:28:f2:c3:ef:
                    a6:42:80:3a:ad:7d:f2:4c:c5:41:5c:64:0b:a2:44:
                    2f:c2:5a:0f:58:6a:0e:9b:38:a0:e9:73:0a:05:f7:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:6E:DE:C7:D8:0E:C1:A7:F8:5C:62:D8:54:B2:56:AB:6C:C0:30
            X509v3 Authority Key Identifier:
                keyid:6E:CB:89:48:CB:12:74:2D:C6:1F:64:54:10:2B:F3:1A:C6:A8:4F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsuJSMsSdC3GH2RUECvzGsaoT9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B14/B41A583818D111E7970CEC17C4F9AE02/bsuJSMsSdC3GH2RUECvzGsaoT9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:e6:92:6e:6b:75:93:c9:68:46:e9:25:de:0d:dd:c5:34:
         0f:53:d4:90:ab:70:33:fb:97:21:c7:5d:03:6e:15:94:03:5e:
         90:7f:ba:ca:4d:85:af:6b:f0:cc:78:2e:2d:ad:a5:25:96:4e:
         d7:e1:b3:34:82:20:6b:5e:f4:ee:31:8b:03:4f:a2:d2:58:32:
         55:95:4e:27:01:4a:96:12:4c:f2:15:b2:45:80:98:12:e5:e3:
         5f:a1:f8:21:f7:73:1b:6a:4f:dc:5a:32:0b:a1:50:74:9c:9f:
         a8:b0:98:4b:16:95:6e:01:e6:fb:6f:65:a8:62:9c:cb:b6:bd:
         dd:66:fb:cd:9e:e5:09:c6:fe:1c:1e:57:c9:c2:b8:37:e4:ae:
         d8:e5:1b:f4:70:b9:96:2a:7c:c2:d3:2d:c3:e4:34:81:e5:24:
         b7:8c:cc:ed:84:e7:c0:29:83:e4:d4:99:5e:17:5d:f5:1a:fa:
         09:fb:fb:e4:a0:ba:3b:54:40:ec:76:80:de:ef:d3:87:41:15:
         ea:a3:9b:c6:00:30:07:f2:ef:41:7f:45:69:b1:86:67:cb:81:
         00:a8:40:65:b5:8b:22:0e:26:93:02:dd:a5:4f:cc:9a:42:a6:
         f4:81:88:d7:73:dd:64:59:5d:df:62:6b:bc:f3:73:2c:1c:fb:
         fc:74:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:00:46 2026 by rpki-client