Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
File:                     bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json)
Hash identifier:          kGmnCNg2xlGwk9RAYf0I/XVYXP3aitfsEvAjOoCZFdU=
Subject key identifier:   40:B3:73:F5:B6:AC:50:B5:32:41:BF:E6:98:8B:2E:F3:B8:32:D0:B4
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Certificate issuer:       /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial:       0817
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
Manifest number:          0812
Signing time:             Fri 12 Jun 2026 21:14:37 +0000
Manifest this update:     Fri 12 Jun 2026 21:14:37 +0000
Manifest next update:     Fri 19 Jun 2026 21:14:37 +0000
Files and hashes:         1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: eQvRzZgNuhueE9pW5fD1xPGVgO/BY7DeYoqXlr62YsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
        Validity
            Not Before: Jun 12 21:14:37 2026 GMT
            Not After : Jun 19 21:14:37 2026 GMT
        Subject: CN=6a2c76bd-031d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:c3:4f:09:3d:d3:79:0a:90:6b:26:b4:a4:
                    74:f3:7f:3a:bd:c4:28:88:d5:06:f1:6f:ca:3c:7c:
                    42:09:cf:08:85:0a:b8:4d:e5:99:84:55:fc:78:d8:
                    62:91:e2:5a:17:3c:ba:65:fc:32:7c:78:dc:f8:87:
                    e6:6e:45:54:69:fb:23:af:4f:63:b1:a2:bd:48:72:
                    5f:9d:8b:12:90:6c:7b:da:ea:08:d8:a1:c6:eb:8d:
                    c5:59:ce:59:aa:de:ef:0c:87:e7:85:79:7e:1e:df:
                    86:f8:47:cd:b1:73:17:28:de:8d:96:bf:1b:c5:d7:
                    de:1f:7b:cb:b9:ac:28:bc:66:04:e7:b3:75:93:95:
                    7f:82:23:64:56:96:0a:6e:b2:94:77:06:ec:2b:41:
                    f3:2f:9f:e8:34:d4:31:46:33:a2:b8:ed:30:f9:95:
                    4d:ec:56:44:b8:68:5f:aa:71:77:82:7e:35:d2:13:
                    a5:93:bc:42:2e:b3:d0:ad:11:63:7f:9a:5f:42:d5:
                    18:3e:b2:75:d8:58:74:ac:59:34:71:5b:5c:1d:05:
                    ec:c8:16:d4:fd:93:3e:ec:46:f0:b7:2f:a3:0b:53:
                    9f:09:cf:5f:7a:46:ed:66:5d:d3:c3:96:04:7d:df:
                    32:07:87:74:4f:c8:67:03:0b:a5:48:e3:ad:d3:e7:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B3:73:F5:B6:AC:50:B5:32:41:BF:E6:98:8B:2E:F3:B8:32:D0:B4
            X509v3 Authority Key Identifier:
                keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:37:57:4f:c6:8a:cf:1d:d0:8e:95:3a:19:f0:7d:09:7b:39:
         06:05:a6:70:57:8f:8d:01:a3:2b:82:f7:be:84:c0:bf:ff:91:
         28:c7:67:6a:19:34:16:e1:78:fa:38:62:78:97:38:d8:f0:47:
         be:28:c5:2d:fa:60:47:64:9c:db:44:8f:fe:1a:01:ca:ce:dc:
         51:b9:44:62:d2:66:70:45:32:29:98:51:6e:91:a8:cd:fb:28:
         a6:65:c1:c4:62:6d:36:25:da:53:e3:d7:84:ba:7d:23:f9:34:
         f1:91:56:08:d9:b6:af:11:a9:df:ad:66:dd:90:9b:1e:17:ff:
         bc:fc:7e:44:81:39:36:d0:88:d1:e5:89:85:a4:30:6d:43:9f:
         c5:16:ee:32:09:3f:69:6a:d5:c9:38:84:1e:1b:b4:89:75:46:
         02:45:d8:98:8f:27:a3:32:89:23:0e:28:01:74:d7:75:3e:35:
         da:e8:d9:6a:c6:ab:32:b6:d8:0b:18:22:04:c3:b5:65:f9:0b:
         c9:50:1c:c8:aa:53:63:f0:a3:0e:94:cc:cc:b6:44:df:1f:2b:
         c4:08:61:e4:8b:9a:88:0d:71:a8:95:22:cc:23:65:1c:a5:ae:
         bd:7f:10:6d:ac:e6:5f:ff:96:22:88:2c:d9:cc:d6:8d:18:cc:
         43:7c:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:58:14 2026 by rpki-client