Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
File:                     BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json)
Hash identifier:          QMhE4vT21eiYH5XCUGUleJHw6wHOFp6tl55woMSu0RI=
Subject key identifier:   0F:2A:7E:AB:0C:8F:0F:86:F3:84:4E:EC:AA:9A:42:C0:AD:7A:4A:38
Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E
Certificate issuer:       /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
Certificate serial:       05D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
Manifest number:          05D0
Signing time:             Tue 28 Jul 2026 23:40:51 +0000
Manifest this update:     Tue 28 Jul 2026 23:40:50 +0000
Manifest next update:     Tue 04 Aug 2026 23:40:50 +0000
Files and hashes:         1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: OajMautVJ9+YWvspOKbwtNiGqRulgRnqwFflRc0vewU=)
                          2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl
                          rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 23:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E
        Validity
            Not Before: Jul 28 23:40:50 2026 GMT
            Not After : Aug  4 23:40:50 2026 GMT
        Subject: CN=6a693e03-72ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:cf:31:a2:13:d6:4e:a3:ca:bb:d0:ce:be:
                    30:5b:23:e9:bf:21:04:4b:af:de:63:0b:9e:a7:3a:
                    ed:42:46:26:78:2a:4c:be:a6:9e:b9:de:c5:8c:84:
                    f7:ec:28:fc:66:f4:62:7f:92:8e:02:83:08:13:11:
                    ce:68:b4:ca:3a:95:53:45:f4:99:4c:3c:43:81:50:
                    39:87:14:53:04:d0:ca:dd:f0:5b:f5:98:82:74:fa:
                    9e:c6:da:f0:83:08:e3:71:25:31:7f:93:2a:c8:c5:
                    c3:53:8a:1c:ef:9e:13:d9:cf:9b:52:7c:76:ca:21:
                    44:f6:9d:96:4d:3c:06:7a:28:d6:c3:79:fa:f7:d1:
                    4f:d8:d4:8e:d0:be:20:05:96:ad:3c:5b:60:63:90:
                    6b:e6:99:4c:83:35:ac:96:00:01:11:4c:f8:e3:24:
                    c6:e5:64:3a:cd:7f:22:f0:e5:67:79:2e:87:a8:07:
                    2c:a2:54:22:8c:e9:d2:57:fe:3e:2b:ff:a4:b3:d4:
                    35:1c:b4:da:9d:47:66:64:43:da:71:d0:38:e5:76:
                    54:f1:d8:5e:7f:2b:30:df:8d:da:02:50:92:4b:69:
                    11:64:e5:a0:27:3b:59:12:cb:49:af:59:08:80:73:
                    df:6b:d7:e0:9b:94:a3:eb:9a:08:bd:a7:1b:01:38:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2A:7E:AB:0C:8F:0F:86:F3:84:4E:EC:AA:9A:42:C0:AD:7A:4A:38
            X509v3 Authority Key Identifier:
                keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:40:65:94:3d:d0:8e:61:63:a8:cd:3c:47:c7:4f:46:01:
         d5:7a:03:43:1d:98:ed:cb:5b:b8:f7:ab:df:5d:00:b9:8d:f1:
         ef:40:18:d2:fb:00:2d:e4:c8:38:9c:23:1e:c0:db:b3:cd:af:
         67:a6:0a:36:f2:70:3e:1f:2b:71:ba:01:ab:11:fb:50:d4:31:
         22:08:01:98:e9:14:30:b4:52:98:bf:be:c9:17:8c:94:36:ab:
         2f:5b:29:1f:b9:67:8d:2c:80:ed:d2:63:4d:6e:5e:1a:71:ad:
         d7:56:31:72:0f:b8:1c:f9:09:db:53:37:c0:8e:e1:5f:30:6e:
         f4:7e:d9:46:ff:59:04:82:24:cf:ed:b1:36:56:70:cf:41:8e:
         c4:b4:8c:a3:07:75:25:7f:23:b5:c3:69:24:53:7c:9f:bc:b2:
         4e:ca:72:58:53:34:03:02:fa:0a:60:6b:4b:45:a9:99:15:87:
         f8:5a:5f:07:3a:29:b9:7f:83:58:b1:8d:4e:62:1c:84:24:31:
         41:20:96:a4:b1:32:c5:4d:4f:f6:09:04:68:60:f8:96:99:4b:
         39:d8:fd:62:f4:3f:8e:39:46:75:55:59:18:2e:cf:6b:99:f0:
         7c:5b:2b:11:e1:82:7a:22:03:a2:79:4a:22:8f:5d:2d:87:50:
         95:44:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:48:19 2026 by rpki-client