Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          8qRWcWmR1CMyhPUAXu1zkDurFSo9Q5zWqRuTTnek5eU=
Subject key identifier:   1C:7A:C4:66:A8:58:8C:F2:3D:5D:00:B6:63:0D:24:D1:5F:DA:9A:C1
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       2485
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          6227
Signing time:             Thu 16 Apr 2026 14:15:25 +0000
Manifest this update:     Thu 16 Apr 2026 14:15:24 +0000
Manifest next update:     Thu 23 Apr 2026 14:15:24 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: XDeQB7l2Nh/r3DUAyfxdx0248ywmHoBLY7cP+xWR/Eo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9349 (0x2485)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: Apr 16 14:15:24 2026 GMT
            Not After : Apr 23 14:15:24 2026 GMT
        Subject: CN=69e0eefd-b35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:31:0c:bc:21:f3:bb:be:62:d9:51:b2:e1:
                    95:b4:88:46:93:5e:5b:f0:ae:93:0a:9d:d5:5e:af:
                    f7:9f:1a:f6:24:1e:d5:c1:43:26:a3:4e:f0:17:55:
                    fb:01:d7:2c:15:d6:34:fe:3a:d4:bb:ff:a1:d1:22:
                    21:1e:71:33:53:53:48:57:54:f9:0c:bb:e5:52:0d:
                    07:7c:cf:38:6a:ba:5d:b4:dc:59:d5:75:63:8c:67:
                    12:95:37:c7:f3:ee:ca:64:43:16:24:76:7c:6a:f9:
                    93:f7:5e:19:3f:80:90:56:e2:35:a5:73:b2:7f:a8:
                    84:bc:b0:15:6a:7c:be:a9:cc:b3:3b:4a:d6:01:dc:
                    47:bb:b6:38:ff:4f:2a:cb:81:05:3e:8c:78:d5:bc:
                    73:09:e0:b3:15:6f:ec:6f:8d:22:b0:8f:1a:8c:bb:
                    b3:76:e5:2d:34:37:d6:f9:61:78:f1:32:19:88:b2:
                    af:e3:db:f6:4b:70:64:2e:00:99:a8:40:f7:13:fa:
                    8c:f4:36:4f:0f:8c:79:7d:52:ef:95:ec:69:cc:8f:
                    b8:1a:45:6d:a7:0d:af:81:46:20:84:04:78:df:da:
                    59:6d:63:c9:8c:6c:99:5b:3a:3e:bd:4c:2b:87:38:
                    6b:f9:ea:f9:ec:58:08:17:e5:bf:45:a1:60:69:3f:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7A:C4:66:A8:58:8C:F2:3D:5D:00:B6:63:0D:24:D1:5F:DA:9A:C1
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:7b:9b:d8:65:c9:c5:e0:bf:87:1a:71:9b:fd:47:4d:15:
         02:7d:9e:4b:4f:bb:cf:34:68:72:7a:28:5d:76:e9:5d:86:0c:
         97:6b:65:10:ba:74:7e:f0:42:4d:d1:50:cd:58:52:df:e0:8f:
         e2:ea:f0:4f:6b:3f:41:88:a0:97:4f:ea:7d:c6:96:5f:9d:b5:
         40:30:a0:e8:d0:b1:f2:3b:9b:8b:04:27:46:24:c2:95:d9:54:
         ad:c1:1c:d4:f3:d4:9f:4e:28:bd:50:77:ae:06:9a:eb:0a:f7:
         2b:b5:c4:6f:1c:cb:9d:02:34:a6:b5:97:3b:47:36:a4:a6:3e:
         ff:46:2c:c1:79:4b:dd:96:93:04:93:fb:81:b3:40:c6:83:13:
         79:c4:53:1e:d4:be:ad:c1:4d:ca:6c:b7:f2:0c:f9:4f:e5:a3:
         4e:a8:6a:be:c4:c4:f3:44:ce:93:4a:a8:59:43:08:48:23:e2:
         60:94:50:df:b6:7f:5c:1c:c3:49:bc:92:9d:d9:4d:4b:59:1f:
         70:56:ac:bf:b0:fa:64:67:ed:e1:b8:39:7a:82:a4:b1:36:d9:
         0e:e4:9e:b4:f8:35:9d:77:63:1f:e8:b1:ea:7b:19:6a:2e:05:
         b3:89:a9:37:df:38:10:e1:39:74:50:ea:92:97:5b:17:9c:97:
         12:ec:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:18 2026 by rpki-client