Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
File:                     BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json)
Hash identifier:          nPO2CiNJFtUdagls8qbnMotxyo1/bhCl2TmssXulmVw=
Subject key identifier:   EE:A5:0E:2A:C9:F3:A2:17:8B:A1:91:59:A7:A3:1A:5F:B4:E7:97:31
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Certificate issuer:       /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
Manifest number:          017A
Signing time:             Sat 13 Jun 2026 04:37:55 +0000
Manifest this update:     Sat 13 Jun 2026 04:37:55 +0000
Manifest next update:     Sat 20 Jun 2026 04:37:55 +0000
Files and hashes:         1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: lycLSPoJtHIr1IsSKR7hhJKm4PCTRxLdUNMGgH6Qbtg=)
                          2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 2GXcGnF9Hnk+FPg8WEW+/EUmPpkB7ugokbrO1JSFDnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
        Validity
            Not Before: Jun 13 04:37:55 2026 GMT
            Not After : Jun 20 04:37:55 2026 GMT
        Subject: CN=6a2cdea3-a936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:5f:44:33:7d:c1:07:9f:0c:49:ca:20:15:
                    45:ab:f7:c2:75:94:ca:6c:99:54:0b:52:7a:3d:4a:
                    c1:26:90:a7:2d:61:17:99:e8:1e:29:0c:47:2d:5b:
                    f3:ce:aa:ad:b0:4c:49:c9:bf:74:8b:c5:4e:6e:80:
                    de:e8:64:bb:d1:fb:d5:a4:79:0e:3e:85:32:9e:7c:
                    43:14:48:e8:df:53:66:e3:c9:a0:a3:aa:21:dc:ae:
                    92:11:b5:bc:79:fb:28:4f:bf:29:14:0c:c9:c7:d2:
                    c0:6e:22:f0:0e:22:d0:d5:5d:1c:4f:e4:34:23:e7:
                    f2:ec:d4:d6:db:22:7e:b4:85:35:96:6a:2d:d8:01:
                    4b:aa:29:88:05:b3:49:90:46:a5:1f:ef:dc:c3:09:
                    6e:71:59:6e:e6:7d:ee:49:f5:1f:e5:d6:37:25:31:
                    d0:3b:29:8b:f4:12:5c:a6:5c:a0:10:43:f5:1e:63:
                    6a:08:02:d9:fa:e5:9f:6a:ab:44:12:5e:13:35:35:
                    8b:09:4b:24:20:5a:20:13:a1:4a:28:10:ef:c0:bf:
                    94:4f:71:2c:ec:3d:c2:e7:88:3a:5a:20:29:a1:bf:
                    3b:06:8b:53:cf:bd:54:e1:21:e8:fb:94:43:0f:ae:
                    ae:a1:8d:90:22:4f:c9:14:a5:27:3c:73:8f:53:07:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A5:0E:2A:C9:F3:A2:17:8B:A1:91:59:A7:A3:1A:5F:B4:E7:97:31
            X509v3 Authority Key Identifier:
                keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a7:09:16:50:ed:a8:f9:ed:4c:14:06:e1:77:e3:fb:4e:1b:
         42:b1:12:01:7b:bf:39:4a:34:1d:6a:aa:06:dc:c9:af:2c:7a:
         83:fb:9b:a2:0d:a9:d7:a8:62:7a:7b:89:0c:33:29:ab:03:b5:
         f0:ff:1c:50:6a:14:91:10:ea:91:89:76:b5:2d:c5:dc:32:fe:
         82:ed:1f:5e:66:e1:a1:fd:c4:19:af:a0:36:de:22:b1:8f:40:
         51:34:f0:8b:b4:b8:9b:1d:8b:d0:16:66:0e:b9:50:ff:8f:99:
         35:93:a7:90:d0:29:13:30:a0:93:24:55:5f:af:b5:04:09:33:
         f9:78:35:d0:59:4d:5a:a4:c8:37:3c:91:8e:8f:e4:41:44:15:
         25:5a:15:a4:84:47:44:66:1a:81:53:dd:5a:f9:20:03:74:81:
         32:fa:46:8a:c3:c5:e7:76:c5:e2:c6:bb:af:ae:dc:0d:1c:cc:
         82:88:1a:87:71:04:5a:09:ca:a9:1b:99:aa:7e:3e:a0:37:b4:
         ff:8d:dd:fc:d9:99:ea:1c:8e:8a:de:35:4d:0a:b2:11:15:1a:
         ae:f6:97:57:b6:55:b1:36:75:17:4c:84:28:46:52:77:13:d3:
         47:9f:d9:b2:f7:22:32:a0:ea:52:48:33:ca:47:a3:0f:cc:36:
         4b:37:48:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:07 2026 by rpki-client