Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File:                     bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier:          Juol9CPSfD8ebFr6Z3N9H+ik/WV7Df3vn86PI2PpugU=
Subject key identifier:   C9:7B:D4:19:DF:2A:E9:3A:76:66:A4:F7:51:E4:7C:4A:2F:20:3E:A5
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer:       /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number:          46
Signing time:             Sat 13 Jun 2026 08:29:46 +0000
Manifest this update:     Sat 13 Jun 2026 08:29:46 +0000
Manifest next update:     Sat 20 Jun 2026 08:29:46 +0000
Files and hashes:         1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: hGpK6bOXv6WI7wZbyMP5FBCTjb6oyAKwZVl5bseSMuE=)
                          2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
        Validity
            Not Before: Jun 13 08:29:46 2026 GMT
            Not After : Jun 20 08:29:46 2026 GMT
        Subject: CN=6a2d14fa-dd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:1d:03:1c:94:88:45:a9:d4:43:42:f8:51:
                    6e:6d:34:7c:3c:e3:b5:cf:50:50:e4:ee:1d:4e:c5:
                    5c:5c:61:d9:f0:af:4b:34:4b:09:90:ed:83:b8:17:
                    d7:36:9b:cf:4a:0e:af:7c:86:f2:5d:c1:1b:4b:b5:
                    e8:d4:3a:84:f9:59:90:97:dc:31:8a:8b:b1:67:1c:
                    1d:16:b0:fd:10:b1:1e:21:7f:0c:b3:cb:d0:f9:81:
                    86:a3:78:67:da:73:ed:cb:d1:d8:31:fd:e1:b9:a2:
                    cc:d1:29:24:c4:42:3a:fd:09:b0:20:5b:ba:3b:a8:
                    53:63:f5:f0:3f:a8:89:0a:4b:ed:c0:a7:42:dc:c5:
                    28:9e:f1:75:65:ed:10:cd:10:18:f6:77:21:80:d5:
                    5b:81:68:17:83:4b:66:77:f3:2e:8c:b2:23:db:02:
                    9a:c1:a4:f7:59:6c:50:c0:f6:f9:fc:e8:b8:7f:a2:
                    b0:41:8d:50:8e:26:e7:33:07:4a:99:53:90:b3:2c:
                    88:cf:94:56:20:75:c5:1e:92:d6:20:e4:3d:5b:40:
                    54:27:7c:e2:fe:96:b7:40:45:3d:de:73:4a:a7:de:
                    59:a3:a0:19:67:33:93:b6:84:1f:eb:9c:2c:e0:27:
                    5d:7e:c7:44:de:86:06:4b:f6:d1:81:d0:66:31:aa:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7B:D4:19:DF:2A:E9:3A:76:66:A4:F7:51:E4:7C:4A:2F:20:3E:A5
            X509v3 Authority Key Identifier:
                keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:ea:c0:85:5c:af:bf:7d:36:d0:35:29:90:68:0b:5d:39:
         37:69:f7:9e:e3:10:80:39:2a:1a:47:a7:1a:de:2d:62:ed:f5:
         dc:7d:9d:1e:7a:e1:9e:89:fd:80:d5:85:33:52:56:25:f8:da:
         d5:e9:0a:a5:e5:de:ce:0a:76:3f:84:4b:2e:8e:97:85:f8:91:
         fb:c6:60:a9:0d:1f:00:18:79:ea:a9:f4:bf:b6:7c:64:b9:e7:
         67:b3:dc:b1:ea:4d:9a:24:89:aa:01:97:64:87:8a:80:fe:d5:
         37:39:b2:67:be:6b:da:81:28:1c:e5:70:36:18:84:ea:f2:74:
         4c:c1:a8:1d:a2:95:41:53:1d:a5:6e:8e:d1:bf:a3:84:cc:89:
         96:fe:d1:bb:f5:57:55:8a:03:79:1a:8a:63:64:25:f0:0e:4f:
         0f:8c:cf:ec:5b:85:91:72:51:16:e6:c2:29:a2:4a:51:bf:cf:
         cb:48:98:38:d1:1c:7d:dd:3f:96:44:51:89:9f:df:7a:80:fa:
         19:25:ff:c7:e3:29:ed:6c:bc:27:3d:56:2b:cb:00:e9:7e:b7:
         2a:bf:57:3b:8c:3c:56:22:22:1d:3e:49:c2:d0:27:dd:5e:ad:
         b7:00:cb:ee:93:86:03:da:13:33:5a:17:e8:8e:51:23:5e:84:
         85:da:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:08:04 2026 by rpki-client