Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
File:                     bzPCWtM2F4RBLEKweYYz0Dslvso.mft (raw, json)
Hash identifier:          4JCnj/ypS7T4M9Bp/pcWLBT8gvyohLUpCQY2kWhHZrE=
Subject key identifier:   74:34:7B:A4:E4:A5:7F:CA:98:77:17:7F:A2:DC:E0:81:8E:59:DD:D3
Authority key identifier: 6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA
Certificate issuer:       /CN=A91AB027/serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
Certificate serial:       0FDC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
Manifest number:          0FD2
Signing time:             Thu 16 Apr 2026 17:25:48 +0000
Manifest this update:     Thu 16 Apr 2026 17:25:48 +0000
Manifest next update:     Thu 23 Apr 2026 17:25:48 +0000
Files and hashes:         1: bzPCWtM2F4RBLEKweYYz0Dslvso.crl (hash: +R5mPgKVIh7VCI3dcZcypocHD+cBQpCl6ylMXJYx7bk=)
                          2: 62C1F5587ACD11E9AC0A867BC4F9AE02.roa (hash: HSDF6r0vrEGGhFaSVBrgmhu0L895iD5PYpCHtPDJbg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl
                          rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4060 (0xfdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB027, serialNumber=6F33C25AD3361784412C42B0798633D03B25BECA
        Validity
            Not Before: Apr 16 17:25:48 2026 GMT
            Not After : Apr 23 17:25:48 2026 GMT
        Subject: CN=69e11b9c-8fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:c0:91:8d:4e:2c:0a:3b:da:a9:60:9b:22:
                    19:98:27:7c:e1:61:06:5a:f1:81:ce:93:c5:78:99:
                    4f:9d:df:e8:94:73:76:84:0c:25:c7:dc:b8:3d:50:
                    f7:3a:4d:a5:5a:b1:9c:7f:f5:0b:23:a6:43:e5:17:
                    ef:8a:f9:06:2f:1d:ad:ec:4a:8b:f0:81:5f:46:97:
                    fa:9d:71:04:ad:8a:03:f6:91:83:ea:1d:5d:ca:72:
                    1c:97:28:80:bd:36:35:eb:9c:2c:ea:0c:c4:ec:2c:
                    cb:ac:bd:e0:c4:69:6e:ea:86:e7:15:f8:fb:8d:bc:
                    63:5e:88:bf:75:df:7f:1a:41:1f:fb:83:42:64:f0:
                    09:40:e2:94:41:8d:d0:3d:6b:85:d9:8d:24:67:b0:
                    f3:a7:c4:06:14:53:b1:27:57:e3:a8:8a:1c:3b:67:
                    1c:a4:e6:db:d7:4c:eb:44:bc:9a:d4:d3:87:14:a9:
                    86:09:5e:6a:e9:67:14:9b:eb:34:6d:2a:8d:88:13:
                    a8:bd:38:24:9c:32:f6:d1:47:c4:09:b0:72:79:85:
                    ee:e2:6b:4c:1d:a4:d5:b2:09:3b:3e:bb:78:0f:2c:
                    d3:77:44:42:5c:40:3f:52:35:0a:60:3d:a5:82:f8:
                    22:83:e3:06:15:18:db:ca:ea:af:ab:f8:8a:5d:40:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:7B:A4:E4:A5:7F:CA:98:77:17:7F:A2:DC:E0:81:8E:59:DD:D3
            X509v3 Authority Key Identifier:
                keyid:6F:33:C2:5A:D3:36:17:84:41:2C:42:B0:79:86:33:D0:3B:25:BE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzPCWtM2F4RBLEKweYYz0Dslvso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB027/68F75910734611E9AD561B47C4F9AE02/bzPCWtM2F4RBLEKweYYz0Dslvso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:82:74:b2:e7:50:4e:30:35:5b:62:81:9c:68:f7:8c:19:
         a2:82:40:18:79:f3:1a:f1:03:2d:a1:91:51:a4:c7:15:af:78:
         83:ca:31:02:dc:0b:b8:15:b7:1c:9f:a6:31:58:fc:0d:d7:d8:
         15:7d:d5:22:92:2e:dd:3a:6b:39:30:9b:42:a8:eb:89:5a:ec:
         44:22:f8:bd:74:32:e5:c6:9d:ee:cd:a4:8f:45:8d:d9:05:8e:
         bf:00:49:c0:44:4e:07:15:4f:03:ae:f7:9d:5d:f5:02:24:bc:
         48:ff:a6:8d:17:04:33:23:14:9e:df:75:f1:b1:50:30:06:d7:
         31:e7:a3:08:87:ef:18:c2:11:98:b9:09:96:3b:d9:44:94:11:
         de:6a:0c:aa:32:fa:c0:29:e4:53:3b:3e:66:14:10:ab:27:55:
         dd:c8:cf:4e:91:7d:26:98:69:a7:24:60:96:9b:6e:ee:bb:0e:
         38:ee:d6:d5:16:bd:21:a1:c8:b6:94:f9:94:9f:99:b2:1f:f6:
         37:34:8e:d8:f3:f5:78:d1:06:43:d0:0f:85:17:c4:4e:a2:49:
         49:fa:fe:d9:8a:be:4a:5c:87:df:da:01:00:d9:6c:9a:3c:dc:
         cd:56:24:a3:a9:49:20:48:4d:0e:2c:5f:85:62:f3:6b:92:7e:
         cc:3e:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:09 2026 by rpki-client