Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
File:                     bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json)
Hash identifier:          nAAEGbd5q/lxKNtnG72IsE332JaRnSj11e/+ORrqDsI=
Subject key identifier:   60:72:0A:E1:81:4A:04:F7:7F:2A:76:D9:47:07:FE:91:3A:CA:30:C8
Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4
Certificate issuer:       /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
Certificate serial:       030B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
Manifest number:          0304
Signing time:             Sat 13 Jun 2026 01:14:11 +0000
Manifest this update:     Sat 13 Jun 2026 01:14:11 +0000
Manifest next update:     Sat 20 Jun 2026 01:14:11 +0000
Files and hashes:         1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: PZTmK4FTZXZUXnnmAy6LOdae9gUzJBah0nwlBJ0xVIc=)
                          2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: qOTgX26Zanjyv6Lj/0iXY/YLtNoeVOf7TQ8Rw4nq2og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl
                          rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779 (0x30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4
        Validity
            Not Before: Jun 13 01:14:11 2026 GMT
            Not After : Jun 20 01:14:11 2026 GMT
        Subject: CN=6a2caee3-56cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:9b:47:45:0a:e8:ab:b0:90:f4:7c:77:e9:
                    60:61:83:fe:8b:4a:26:d5:d5:23:a6:64:a5:e9:0a:
                    08:fe:b1:87:5a:c5:17:ff:55:ac:50:a0:f2:97:ce:
                    9f:3b:1a:ad:ec:3f:f5:4a:47:ca:20:d3:bf:80:01:
                    dc:2d:08:be:a1:bc:86:41:8c:7e:00:d8:28:a5:10:
                    82:98:fd:7c:e6:40:c0:07:2c:c9:4b:94:43:1b:a0:
                    b8:75:83:82:4a:90:84:9a:3d:ce:e4:32:4f:d7:6b:
                    ef:17:f0:69:4d:ac:e8:0e:5a:0d:ff:34:ce:5a:36:
                    3e:96:82:fc:3c:5c:8a:60:11:3c:70:5b:47:b4:a8:
                    32:b9:b8:2c:b6:05:21:a1:db:8e:96:e7:0d:64:e3:
                    c8:bb:85:64:ba:65:78:d5:c1:78:a7:9f:de:81:60:
                    cd:57:dd:6e:cf:35:a6:a2:25:2e:13:38:55:a0:04:
                    cd:eb:16:aa:aa:f9:2d:78:40:55:21:03:e2:2d:95:
                    8a:10:5a:d9:99:d5:85:7d:ac:48:42:10:f4:0c:61:
                    f1:a4:d1:72:b8:fc:07:a5:08:e1:84:11:cb:31:12:
                    7d:fa:88:e3:cb:f0:86:87:47:3a:26:b7:58:97:9b:
                    e9:a7:15:24:36:a8:9a:36:09:63:13:7d:b3:25:20:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:72:0A:E1:81:4A:04:F7:7F:2A:76:D9:47:07:FE:91:3A:CA:30:C8
            X509v3 Authority Key Identifier:
                keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:fb:a6:09:f7:1f:d5:ad:a3:7d:89:75:81:62:66:c0:9e:
         00:d8:31:bd:9e:a0:0c:3c:4d:65:66:cc:e0:4e:7a:b1:4a:62:
         3b:26:c9:5a:8f:ca:b0:bd:b3:17:47:e0:0a:2f:67:8f:5f:b9:
         52:a0:c1:7c:bf:0d:01:d2:51:03:4a:bf:c0:9c:a9:fe:a8:f8:
         83:5d:27:49:99:cd:7a:f6:13:08:7d:d2:d9:57:d1:35:5f:55:
         4a:82:6c:ed:cd:37:ba:50:3a:25:a7:a9:0d:51:9b:10:c3:66:
         d6:43:27:66:29:07:15:e2:2b:a1:f3:d7:f3:2e:d2:12:fb:75:
         2b:df:53:33:37:04:2b:6d:0c:23:c2:f1:60:d7:bc:ea:6e:a8:
         33:b3:f8:19:aa:31:ac:70:bf:00:c1:6d:d4:0a:39:0d:a7:a3:
         69:b2:1e:97:10:d0:2e:be:bc:1c:10:6d:91:67:89:aa:e4:44:
         e3:f1:ae:9b:e3:0e:df:a8:a8:f0:bf:b6:a3:3e:36:6b:c9:95:
         1b:cf:25:47:80:8f:bc:aa:b4:8e:4b:34:5d:3b:c8:f4:6f:ae:
         48:d2:25:07:99:ba:04:46:68:bd:c7:25:73:4a:4c:9a:2d:0b:
         51:8c:22:2a:3a:c0:32:7a:27:47:88:4d:e0:4c:ba:a2:9d:e0:
         f3:2e:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:57:47 2026 by rpki-client