Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          gH4X6PZzkKIuhWnf3F313GDKMjNr8l1LMtaiqVW1BIo=
Subject key identifier:   62:49:97:E6:62:F0:F7:DF:14:25:A2:86:EE:86:87:A4:7F:74:63:A4
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          01BA
Signing time:             Fri 12 Jun 2026 22:57:52 +0000
Manifest this update:     Fri 12 Jun 2026 22:57:52 +0000
Manifest next update:     Fri 19 Jun 2026 22:57:52 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: sX7l9JOfjOUxrUrv6/uNbTk6z6YlKiRqkzOoWsoL8wA=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: Jun 12 22:57:52 2026 GMT
            Not After : Jun 19 22:57:52 2026 GMT
        Subject: CN=6a2c8ef0-bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:0f:74:55:bb:a7:e9:e1:7a:eb:f4:07:86:
                    9c:c3:d7:05:da:1b:d3:c6:7d:00:ef:7d:ea:71:70:
                    3f:23:da:46:07:e1:c8:9f:c7:e3:19:a5:76:2f:1e:
                    dd:74:e8:88:d1:03:b2:c5:02:22:1d:5c:4a:d1:4a:
                    86:a4:b4:06:eb:c1:24:d8:7d:0b:0d:69:50:19:b7:
                    01:51:7d:93:e1:db:a4:ae:9f:cb:3d:03:05:ff:87:
                    2a:24:77:48:b1:96:87:07:9d:45:9b:f7:9b:11:6c:
                    f2:fa:3d:74:54:7e:0f:e8:c5:cd:61:1d:e0:66:23:
                    0b:10:78:3d:b5:96:ac:9d:19:57:ad:8e:64:aa:03:
                    18:d5:69:10:f4:23:92:9d:0c:94:d0:52:50:84:3c:
                    8e:22:a3:88:12:ba:ac:23:3a:f3:7e:9a:d5:58:6b:
                    a7:26:50:23:3d:65:85:c7:00:5a:57:25:18:e0:b6:
                    9e:0f:d5:13:61:7b:55:d3:5d:f9:e5:0e:4f:38:f6:
                    84:d8:cb:1e:d2:a1:96:75:90:41:61:42:95:de:cf:
                    16:aa:1f:d9:e7:9e:a6:0a:44:bd:65:5a:01:66:c7:
                    a1:42:e7:ad:d4:d4:1b:35:72:62:27:b6:b9:b1:41:
                    d9:14:8b:58:9c:db:46:9c:7a:c5:eb:fc:69:52:f0:
                    06:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:49:97:E6:62:F0:F7:DF:14:25:A2:86:EE:86:87:A4:7F:74:63:A4
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:77:10:3f:ad:f0:1c:9d:b2:be:4f:54:8a:2b:d0:04:55:
         83:99:fe:c7:12:69:f5:62:a0:05:b8:28:d7:36:59:91:82:31:
         db:b0:04:86:02:05:7b:3e:83:ab:5d:0d:a2:c0:06:37:f7:c7:
         59:dd:03:c4:86:5c:5d:42:2a:82:11:57:11:f7:3d:18:fe:01:
         fb:35:61:8a:29:79:e7:8e:08:13:12:d3:b8:c9:8a:48:2c:81:
         0a:28:59:49:4a:78:76:95:03:f8:13:74:5f:c3:98:5f:69:65:
         07:6f:12:e0:91:56:00:37:48:5b:19:08:85:ef:7d:ae:01:30:
         ad:49:f4:48:90:ee:7b:17:40:30:35:a9:c9:4d:c4:1a:50:c3:
         2a:98:b1:13:7f:a4:3b:a8:a1:7c:4d:b8:1a:67:d9:73:bb:6c:
         85:61:17:5f:c3:bd:83:2f:af:a9:9f:22:62:83:db:bd:b1:a1:
         69:22:99:cc:d3:0d:2f:ec:03:3c:f5:f3:23:99:8d:42:7b:dc:
         5c:e3:ce:f8:a6:d8:d3:9e:ae:5f:44:b5:5c:db:ce:48:dd:89:
         d2:15:11:fd:c2:a5:d1:f0:c3:75:87:a5:18:1e:f8:75:ff:40:
         7d:53:53:e4:67:5e:89:cd:94:51:17:30:65:28:0d:ca:29:25:
         95:78:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:19 2026 by rpki-client