Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File:                     Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier:          agvJILP8R1GVu2pcbvGhpqfZEFUuGW5m5MQllnrMJZw=
Subject key identifier:   DC:FC:47:34:D0:F4:5D:24:9B:57:98:9C:A7:0E:DF:C5:4E:5C:FC:57
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       0524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number:          1A66
Signing time:             Thu 16 Apr 2026 16:44:15 +0000
Manifest this update:     Thu 16 Apr 2026 16:44:14 +0000
Manifest next update:     Thu 23 Apr 2026 16:44:14 +0000
Files and hashes:         1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: 1mvIgOHmJhFqm/V+hyN6jrjTVtElorX0RkcT9cm6Lrs=)
                          2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 4w5731lHYfGZnO+SC8VdKGR/fvzbDEpA8YsPdrr+1XY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: Apr 16 16:44:14 2026 GMT
            Not After : Apr 23 16:44:14 2026 GMT
        Subject: CN=69e111df-40d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:a6:a0:86:71:8a:5f:b0:bf:ec:77:7d:4a:
                    38:02:21:e0:7b:d2:50:e5:30:8e:9e:48:a4:ef:d4:
                    30:08:64:56:3a:93:5b:b0:2b:58:67:8c:de:1a:c6:
                    40:51:09:ad:81:d5:08:25:f4:55:c1:26:42:83:5a:
                    6f:97:16:18:01:fd:f1:be:18:d1:16:2a:12:dd:f4:
                    56:b2:6b:ef:70:7b:9c:93:d3:4b:d2:a6:eb:f2:c8:
                    b5:5b:b2:43:62:f2:66:14:8a:21:0e:c9:15:bd:13:
                    07:60:3f:c2:7f:b7:bc:d6:25:4a:42:6b:82:cd:1d:
                    4a:49:65:9c:64:da:72:04:9a:db:3a:42:6c:fa:7c:
                    96:a2:94:90:2f:e7:c7:bd:d8:09:04:89:00:5e:aa:
                    f9:ec:a8:8c:f3:e1:74:fd:ac:c8:f6:a4:19:4d:a4:
                    4a:3b:a9:e0:98:6c:a4:54:0c:2f:43:d2:47:da:f1:
                    f0:b5:1b:fa:05:57:e7:8d:35:0a:a7:7e:ff:ea:b4:
                    85:7f:69:7a:4a:30:4e:e0:64:61:bf:a9:7a:97:00:
                    4c:99:8a:f3:6a:88:90:98:dc:06:94:ff:0f:f6:19:
                    44:ec:d0:e4:0e:3f:f4:f7:f5:2f:26:9d:30:7e:b2:
                    a8:03:6b:4e:76:6f:2f:49:2d:33:ec:20:4d:b9:84:
                    1a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:47:34:D0:F4:5D:24:9B:57:98:9C:A7:0E:DF:C5:4E:5C:FC:57
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:43:56:d0:a3:64:af:30:28:59:7d:c0:fd:de:da:31:9f:
         e4:44:83:ce:9b:87:ff:03:02:85:bf:fd:35:2d:40:fa:c4:50:
         0a:d7:b0:ed:d8:2c:11:c8:3e:f0:22:0a:70:41:50:c1:78:f2:
         75:19:9a:8c:ff:b5:22:9a:bb:01:de:85:24:5f:04:b0:fc:7e:
         7a:17:b1:a0:85:1f:12:99:a4:2f:61:7f:ad:0b:e0:9c:7d:e9:
         1b:9b:6d:0b:9c:67:10:3e:7d:bd:27:e1:da:20:fd:9b:f5:f9:
         14:93:0c:f3:ce:e5:95:23:f2:17:bf:24:ea:3d:ef:36:5c:79:
         a2:1d:79:df:20:22:24:c2:33:05:93:fa:c7:e1:57:a8:18:c7:
         53:10:a5:49:58:96:8f:38:9f:2a:4b:a9:6a:b2:52:91:b5:36:
         8b:5f:02:92:ad:a1:d7:28:d1:7a:0e:9b:e3:9d:b0:7a:6f:ee:
         49:cc:55:cb:7a:7b:0c:fe:e3:fe:80:26:9f:0d:e1:6f:e1:c8:
         7e:b5:9f:89:c2:8c:ea:70:fb:c6:a6:ef:ca:19:46:06:1c:03:
         88:7c:60:f2:94:f5:81:02:d3:46:0a:1e:7f:08:7a:d5:72:50:
         ae:60:ce:80:5f:c6:93:39:9e:53:4f:8a:df:38:51:e5:f6:f3:
         d4:56:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:44 2026 by rpki-client