Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
File:                     bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft (raw, json)
Hash identifier:          qEPrmJyJfw3MQtR/2StdzCW6CBxbW7ChvfVOu4EhlLk=
Subject key identifier:   A8:99:50:91:6A:9A:9D:01:57:8D:2F:84:56:47:7B:09:A8:05:78:97
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Certificate issuer:       /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial:       39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
Manifest number:          36
Signing time:             Wed 15 Apr 2026 08:10:57 +0000
Manifest this update:     Wed 15 Apr 2026 08:10:56 +0000
Manifest next update:     Wed 22 Apr 2026 08:10:56 +0000
Files and hashes:         1: bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl (hash: VtCmoHrBROT9ipreCF5+eW0PIw8+Mjp7WVWWbxL8zw8=)
                          2: C1B7F140EF6811F09BA576A7586F56BC.roa (hash: FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
        Validity
            Not Before: Apr 15 08:10:56 2026 GMT
            Not After : Apr 22 08:10:56 2026 GMT
        Subject: CN=69df4811-8d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:c8:16:20:40:cf:de:b5:a4:fe:f4:2c:0c:
                    c2:7f:fc:cb:50:f6:6d:2b:55:74:0d:a8:5c:3b:ba:
                    39:39:13:56:9a:91:e5:64:68:cd:4f:18:94:e1:0c:
                    2c:eb:a0:0e:0a:59:9c:1c:47:30:a0:04:4b:59:89:
                    09:4b:0f:37:9c:82:47:25:a6:91:61:24:3d:68:6a:
                    a9:f0:5b:a3:e9:f9:bf:bb:63:56:45:28:89:25:56:
                    8c:6c:f5:42:fc:e2:95:07:06:24:0b:b8:06:95:6b:
                    60:07:1a:5d:52:d9:a0:19:05:af:a3:f7:01:0f:e7:
                    1d:87:31:b7:b4:f0:71:72:73:e1:4e:0d:bd:da:54:
                    09:ae:da:84:6b:5e:c3:d6:b5:35:3c:3e:6c:e2:25:
                    19:1c:fe:2f:b0:79:c6:16:e7:c6:85:5e:ad:f4:be:
                    05:b3:53:76:f8:96:d8:53:33:77:4d:81:22:e4:2e:
                    bc:1f:23:f4:55:82:c4:b5:c1:fd:41:ec:90:89:84:
                    aa:5e:89:d0:99:5c:9f:b6:d2:8d:a3:c4:2c:66:8c:
                    60:97:d9:83:49:f9:2b:a6:96:5a:65:ab:bc:6a:fe:
                    77:b3:f7:c4:d8:11:87:ea:c7:17:67:98:12:2a:51:
                    fa:ec:31:40:a9:b3:43:dd:b8:9a:5b:a4:d6:12:32:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:50:91:6A:9A:9D:01:57:8D:2F:84:56:47:7B:09:A8:05:78:97
            X509v3 Authority Key Identifier:
                keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:db:5b:01:a4:db:76:ca:d0:b6:a9:ff:5a:56:b0:c6:26:
         3a:b8:17:b6:3a:a1:9d:e2:32:7b:03:7a:dc:03:c2:1b:60:bb:
         dc:89:74:a3:37:fb:88:6e:d5:c3:19:8b:bf:f8:50:6c:f6:57:
         e2:d1:77:1e:5d:ee:ef:e6:c8:4f:a4:72:bf:17:a8:ff:99:44:
         c9:db:82:cf:6c:c9:c7:61:66:a2:b5:00:c2:ab:83:79:59:3b:
         c9:a8:38:82:d3:68:15:df:10:45:fa:14:f9:fb:f6:2e:82:f0:
         5f:f2:6d:2b:f3:81:ba:3e:bd:0c:6c:c0:50:75:0f:9b:51:69:
         ac:6f:cd:13:a6:6b:d6:cd:bd:c6:03:5e:4b:a2:04:18:92:1d:
         0e:af:e9:b6:7f:30:46:17:7b:55:b6:7c:d7:33:98:7f:d8:f3:
         de:0c:7d:3b:15:66:fa:d2:e6:2c:33:c7:dc:43:78:11:c9:19:
         45:e1:16:ca:46:4d:0b:f1:cc:de:e5:c8:4d:ad:82:25:4b:00:
         42:50:b7:b2:ad:7e:71:81:2a:fe:e8:2b:ec:47:39:d8:05:cb:
         01:08:f4:c8:df:83:9a:0a:14:5d:ec:c2:7e:cd:99:aa:21:02:
         80:3a:dc:77:8d:40:28:3e:e2:72:18:9b:8d:cb:d3:c1:38:09:
         97:a0:7e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:45 2026 by rpki-client