Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
File:                     bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft (raw, json)
Hash identifier:          DTDKotJYAZeFvjjFwsFGXdcPbb2Fj0XtTi7kXRAGMYo=
Subject key identifier:   69:CD:CF:C6:30:D9:8F:DE:28:42:B8:EC:C4:AE:65:0A:BA:64:6A:54
Authority key identifier: 6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74
Certificate issuer:       /CN=A916B232/serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
Certificate serial:       07C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
Manifest number:          07BC
Signing time:             Sat 18 Apr 2026 21:20:03 +0000
Manifest this update:     Sat 18 Apr 2026 21:20:02 +0000
Manifest next update:     Sat 25 Apr 2026 21:20:02 +0000
Files and hashes:         1: bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl (hash: kKzCWOwA8vIIdEl5kW0qR/M0g8Yf+CKaa4J/3BbKclo=)
                          2: A2C94D9C3F0F11EB80256B25C4F9AE02.roa (hash: 7C/HtXFs/z0QMgDj00vYWk0uNQg1uQuoBZV2bap4jLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl
                          rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B232, serialNumber=6E184BE14612D5A2B53C4987684450850DB02C74
        Validity
            Not Before: Apr 18 21:20:02 2026 GMT
            Not After : Apr 25 21:20:02 2026 GMT
        Subject: CN=69e3f583-7242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:22:d7:f4:e6:66:b7:71:02:0d:99:dd:88:
                    d9:83:ae:c3:2c:ec:73:99:7e:0f:08:1b:47:ff:c4:
                    49:a4:53:67:e1:54:47:87:88:29:c0:ee:03:e7:af:
                    86:84:a3:06:1f:9d:47:d8:d0:93:60:2a:cd:e5:eb:
                    42:2d:98:61:6b:10:4b:06:01:8d:28:55:58:80:c3:
                    bb:03:17:50:36:94:9d:c7:5a:48:ae:14:b9:02:15:
                    41:3e:66:4b:ec:11:f8:0e:18:e8:cd:70:9d:0b:ae:
                    91:f0:68:64:78:bc:98:19:f0:c9:ab:a9:32:48:cd:
                    f5:c3:fe:b9:79:b2:48:cf:13:2c:ab:93:aa:b7:d2:
                    47:d2:d8:0b:72:f6:2a:94:a2:45:78:d3:50:79:44:
                    17:be:f3:ed:4c:fb:a7:68:23:c1:c8:7d:b7:07:a3:
                    33:cd:0a:43:11:a9:a6:76:99:fb:ce:0d:29:f2:59:
                    5d:51:8f:bd:31:ca:db:58:9a:49:31:1a:00:ac:d6:
                    70:27:bc:42:94:bb:7e:47:74:ce:76:79:b1:ab:93:
                    2d:fa:40:41:35:d7:33:17:77:3b:22:63:27:20:07:
                    ad:a3:71:72:f7:5a:01:c7:0e:df:e9:5e:ea:8a:1f:
                    16:67:71:22:5b:f3:8f:ba:f2:0a:f3:1f:a0:c9:cb:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:CF:C6:30:D9:8F:DE:28:42:B8:EC:C4:AE:65:0A:BA:64:6A:54
            X509v3 Authority Key Identifier:
                keyid:6E:18:4B:E1:46:12:D5:A2:B5:3C:49:87:68:44:50:85:0D:B0:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B232/94D4C7403F0D11EBAF1FCE22C4F9AE02/bhhL4UYS1aK1PEmHaERQhQ2wLHQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:bd:0b:40:ce:44:d7:af:d5:86:e7:b0:f4:0a:6c:92:34:
         f7:ee:3f:1b:0b:8a:40:5d:64:2e:94:f7:b1:32:10:83:57:a5:
         f2:94:b5:5f:ce:a8:57:d6:25:03:3f:35:7d:f8:ad:e5:6b:8a:
         b9:3e:2e:ee:a7:27:75:c3:b7:61:fd:9b:35:18:6e:85:bb:17:
         51:2b:31:f2:82:49:7f:8a:b0:3f:d9:e0:d8:d5:14:81:e0:30:
         69:60:52:5b:74:c0:88:d4:12:13:00:31:a3:9c:c4:dd:b3:a0:
         be:17:cc:78:8a:a7:b7:e6:9a:ba:4f:22:4b:0f:3b:ab:65:f7:
         fb:a4:94:fb:79:1f:a8:34:a6:2d:3f:1b:0b:00:d1:9d:e4:fb:
         3a:48:6e:1e:93:06:94:3c:25:4d:02:81:71:7c:bd:96:13:9b:
         db:fe:6a:ac:73:26:9b:7a:a4:0e:4a:42:6c:03:38:db:1e:76:
         9f:bc:82:38:de:88:b2:26:d5:59:48:64:11:be:38:fb:ce:dd:
         3e:bc:1b:ae:fb:84:47:16:37:7e:0b:81:44:8d:60:f5:b2:ad:
         0f:32:9b:49:d5:cb:42:b8:ce:09:02:87:96:fe:34:85:39:07:
         e6:d1:a1:82:11:7d:48:d8:8b:cc:24:8e:2e:eb:21:71:16:e0:
         f9:10:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:06 2026 by rpki-client