Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
File:                     bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json)
Hash identifier:          ceOjrelH1HpeIn3stmBUbTICEVlxiaIJFQ0gJaqGf88=
Subject key identifier:   1F:87:19:FC:2B:EE:4F:B9:72:2A:02:41:7A:E9:62:00:FB:10:EF:35
Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B
Certificate issuer:       /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
Manifest number:          0105
Signing time:             Fri 17 Apr 2026 05:51:53 +0000
Manifest this update:     Fri 17 Apr 2026 05:51:53 +0000
Manifest next update:     Fri 24 Apr 2026 05:51:53 +0000
Files and hashes:         1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: Em7S130OMKbUH85sDlrs6xLbHhH28ssIo2UsNShkNSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl
                          rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B
        Validity
            Not Before: Apr 17 05:51:53 2026 GMT
            Not After : Apr 24 05:51:53 2026 GMT
        Subject: CN=69e1ca79-9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:80:c1:2c:8b:d0:6c:96:eb:83:c7:da:5d:
                    15:98:03:d5:78:f5:5a:bc:4d:1f:c7:aa:3b:98:1d:
                    88:50:ea:b9:42:d5:90:0b:ca:cc:34:f0:b9:9e:2f:
                    59:64:a7:c1:65:a5:c5:78:27:8f:64:d9:af:8c:ce:
                    60:29:0d:ff:e1:f1:0b:0e:77:5e:6e:51:c5:b6:85:
                    22:b1:29:30:d7:14:1e:3e:bc:1f:20:9f:c7:93:ae:
                    89:51:30:26:a7:88:c7:1a:19:8e:fd:ce:8f:45:43:
                    f7:06:34:3f:42:68:99:ac:37:e1:ce:71:cb:71:7a:
                    32:a9:21:e5:a9:1e:7b:5f:d0:ef:6c:bb:5e:ac:79:
                    b0:8a:d3:57:54:df:9a:3d:19:b6:08:a4:ec:c8:e3:
                    5b:2b:4e:b9:a6:91:8c:5e:28:66:c6:4a:b1:a6:03:
                    8e:6e:99:bd:70:79:0f:0a:22:12:0d:2c:81:b7:2d:
                    cf:7d:ba:38:2a:99:d9:f8:e4:ab:a0:8e:09:3d:c0:
                    f9:6f:d1:f7:8d:18:0d:ac:ca:ea:ba:af:99:50:f4:
                    7b:0d:07:c3:f7:41:dc:48:63:15:55:c2:02:29:34:
                    71:6f:eb:8a:f9:42:1f:5d:a2:f0:76:97:5f:8c:8d:
                    a8:a7:7c:f7:aa:2b:ff:36:b3:ae:91:3d:90:2e:7e:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:87:19:FC:2B:EE:4F:B9:72:2A:02:41:7A:E9:62:00:FB:10:EF:35
            X509v3 Authority Key Identifier:
                keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:58:ce:5c:37:59:8f:0f:44:78:0d:ad:d1:c5:7a:59:37:
         5d:9e:41:c2:b6:7f:ad:c0:2c:27:04:88:71:ff:9f:88:f5:ba:
         19:82:cf:e6:52:f8:5e:99:c0:5b:7d:c7:91:6b:46:85:85:0e:
         02:1a:0e:25:de:a1:52:93:b4:92:02:1c:d3:c5:20:6c:85:61:
         d6:96:12:c2:f5:04:ad:78:43:32:92:01:ce:b3:98:0a:a8:55:
         7e:52:9c:3b:dd:fa:e8:8b:ef:58:c1:ed:62:22:af:49:5b:b7:
         56:90:b8:f1:b2:92:0c:07:75:35:9a:9a:15:a6:8f:74:d0:9d:
         e0:bb:80:39:97:d5:04:57:69:76:de:c1:58:bd:d4:be:ef:bf:
         fd:49:44:8d:99:88:65:25:55:be:ef:a5:d5:26:31:c6:8d:e0:
         83:d5:76:72:40:4a:3b:13:c7:92:c4:67:d8:88:0b:ac:51:db:
         d0:18:9c:57:64:1a:2c:22:34:5b:f4:cb:cb:d9:63:91:fa:16:
         c6:8e:a5:9e:32:d4:b9:1f:2d:56:fe:49:e9:72:88:43:55:e1:
         6e:c0:9a:bb:ae:2d:bd:7d:83:e8:f5:a2:75:dc:f2:36:fc:16:
         61:06:ce:0f:09:d1:52:2f:c4:77:73:f1:37:a3:13:44:e8:31:
         f9:9f:c4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:58:20 2026 by rpki-client