Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
File:                     BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json)
Hash identifier:          G/UY3pjLN750PuM42UB8zVE5nTc4PS9ueD6hSm23tYU=
Subject key identifier:   71:09:6F:B2:AB:6C:A7:A4:A9:44:AD:DF:A5:C8:82:25:90:0C:F9:13
Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A
Certificate issuer:       /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
Manifest number:          E5
Signing time:             Fri 17 Apr 2026 06:16:45 +0000
Manifest this update:     Fri 17 Apr 2026 06:16:45 +0000
Manifest next update:     Fri 24 Apr 2026 06:16:45 +0000
Files and hashes:         1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: C/jCef0IMIM6OpuLMc+MCuIweFI5yuj0s+3UE1a+9uc=)
                          2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: 0Vpr4wHkrRxShWlsrRPFVmtyt2/mJk9Z/g3wYu3DTO4=)
                          3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: +2yUerADc2yEVbMSngexvekNdzNxgr2F5nZV/rqxi/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl
                          rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A
        Validity
            Not Before: Apr 17 06:16:45 2026 GMT
            Not After : Apr 24 06:16:45 2026 GMT
        Subject: CN=69e1d04d-1cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b3:9e:2b:23:d6:24:b3:7b:65:2e:4f:89:b4:
                    12:b5:e1:b3:37:70:a7:9e:f5:b0:39:83:af:06:36:
                    d9:65:26:0b:f7:fc:f0:b0:2f:cd:65:ce:e9:4b:d8:
                    b0:8d:16:14:ad:be:04:b9:ff:0f:a9:61:43:03:4e:
                    b1:eb:06:c7:95:42:e1:d3:b1:3e:6d:35:17:00:01:
                    96:de:cb:db:5c:ec:56:9e:3a:7c:32:76:8d:d4:3a:
                    24:61:2d:12:fc:c2:12:48:9f:ec:e8:d0:ab:1a:7f:
                    59:cb:0d:99:41:06:ab:03:f0:82:22:7b:08:f1:8b:
                    96:f7:14:57:2a:8f:f1:e3:5c:ba:cf:05:e5:97:98:
                    90:97:a8:23:56:6a:59:6b:90:f5:3d:06:99:7a:1c:
                    2b:4c:f7:44:57:3c:ae:0c:74:b3:cd:20:b2:15:ed:
                    b5:79:72:a3:ff:d5:87:b4:dd:3f:cc:7b:4c:e1:ce:
                    db:14:ed:e1:3b:73:73:52:92:d4:e4:26:47:09:b0:
                    12:7d:42:68:5c:1b:3f:84:c3:c7:44:48:66:d5:83:
                    c4:4d:b4:0b:4b:63:c6:88:b2:8e:e6:14:97:f8:ea:
                    36:1b:92:9d:84:cd:95:cf:44:c4:aa:dd:4f:0c:eb:
                    6c:37:d1:77:a3:2b:c2:a9:13:4e:af:63:ba:d1:df:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:09:6F:B2:AB:6C:A7:A4:A9:44:AD:DF:A5:C8:82:25:90:0C:F9:13
            X509v3 Authority Key Identifier:
                keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:50:2b:ba:82:b8:3b:e0:ab:97:2f:4b:77:5d:bf:4f:e5:4d:
         d7:b7:45:39:9f:11:34:e0:b2:75:51:6d:97:0b:7d:17:5b:d7:
         75:63:68:e3:3d:53:9a:3d:45:7f:98:bb:75:75:56:f6:2f:35:
         04:d1:cb:2f:e7:df:ad:73:00:6f:9a:14:5f:47:ab:b6:61:cd:
         f2:fd:6b:c1:4f:20:6c:24:4c:a4:57:72:d3:60:df:82:9a:3a:
         1b:12:62:62:e7:f7:03:24:69:d6:ef:ef:02:30:ae:b6:f6:41:
         c3:47:8e:93:7a:2e:8c:22:07:04:20:cf:d9:18:20:4e:e1:28:
         60:a4:08:06:9b:fb:99:ac:9b:d1:5c:2d:ae:c7:fc:00:e6:b7:
         db:5c:e1:ce:b9:d2:96:da:6d:7b:1f:08:fb:34:9b:18:f9:6a:
         02:4e:8e:6f:aa:d9:27:76:95:03:74:17:3a:e6:d2:c7:5e:8a:
         fe:b9:de:75:19:24:6a:39:9e:72:f7:fe:e3:56:57:f4:af:24:
         0a:b3:2d:f2:3c:19:61:1d:5b:7d:bc:7e:f8:58:f4:32:b6:26:
         81:22:af:e9:ff:3c:20:14:79:af:c0:f4:21:78:a9:54:be:97:
         b4:38:c3:1c:58:f3:d7:1b:53:41:c1:bc:37:b3:45:1c:15:d0:
         49:22:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:35 2026 by rpki-client