Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
File:                     bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft (raw, json)
Hash identifier:          FkJ6icKUPP/yqPHdd7e9nUCwXWZj2CwGvaZ2viK8XGQ=
Subject key identifier:   24:0F:4E:7B:29:B5:CA:F7:00:65:38:3E:75:BA:12:96:67:A3:4A:1C
Authority key identifier: 6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95
Certificate issuer:       /CN=A919243F/serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
Manifest number:          53
Signing time:             Sun 05 Apr 2026 07:31:38 +0000
Manifest this update:     Sun 05 Apr 2026 07:31:38 +0000
Manifest next update:     Sun 12 Apr 2026 07:31:38 +0000
Files and hashes:         1: bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl (hash: w8F6CfQvFajGR22uv4pjaa6Xt3OGClJsOW/fYQYZDOE=)
                          2: 384B24AAB65511F0AE39E37FC4F9AE02.roa (hash: 4gEMioogyqtQCIBsWxjQrNaqNtpOHByAYfSBJ8goR+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl
                          rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919243F, serialNumber=6E1F12409CF39BF913C432B5876FFAFD9FD06195
        Validity
            Not Before: Apr  5 07:31:38 2026 GMT
            Not After : Apr 12 07:31:38 2026 GMT
        Subject: CN=69d20fda-5a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:1b:f3:26:20:62:8f:5a:67:01:9b:10:0a:
                    fc:51:34:e9:b8:66:8c:28:94:1c:fe:a8:f3:3a:6f:
                    ed:cb:e4:a1:d7:a5:aa:83:bf:7a:e5:60:f7:bd:af:
                    9c:a9:36:4b:9f:ed:a6:41:6d:cc:79:6c:18:3b:da:
                    76:ab:8b:71:31:b1:38:76:8b:4a:ce:37:af:f0:e7:
                    b4:29:14:63:e8:fb:d5:bb:98:d1:10:40:cf:9c:56:
                    8d:f4:10:b8:ec:7d:87:de:a5:4e:cb:68:b3:57:d3:
                    08:4d:3f:45:94:46:c3:61:4e:f3:78:de:a3:8d:28:
                    0a:da:8f:80:b8:ec:45:07:7a:e1:08:3b:ec:6c:9b:
                    b1:9b:14:18:3f:c9:7a:5f:fa:26:f0:19:02:e8:a2:
                    eb:f8:bd:f7:88:72:98:b9:2b:eb:e0:c0:03:42:c1:
                    90:82:fe:ee:cb:b9:18:58:71:75:2d:8e:22:3c:f9:
                    f7:82:b4:d4:3a:69:5a:ea:5e:ba:a9:20:8c:90:d0:
                    82:bb:11:d9:00:93:d9:70:de:5d:5a:0d:71:7f:9f:
                    1b:c0:8f:55:24:6f:aa:2f:79:3f:b4:99:54:7d:89:
                    fe:1d:7c:4d:f0:79:9e:d6:a9:f8:c5:ca:54:84:38:
                    e4:f9:a4:9e:1e:6e:8b:fb:ab:31:a5:09:ce:c5:dc:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0F:4E:7B:29:B5:CA:F7:00:65:38:3E:75:BA:12:96:67:A3:4A:1C
            X509v3 Authority Key Identifier:
                keyid:6E:1F:12:40:9C:F3:9B:F9:13:C4:32:B5:87:6F:FA:FD:9F:D0:61:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919243F/E8DCA632B65411F09ECF4B7FC4F9AE02/bh8SQJzzm_kTxDK1h2_6_Z_QYZU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:1a:8b:13:95:be:a8:0e:d8:d5:15:ee:fa:82:7e:51:e5:
         78:b5:c5:e3:86:8f:f3:55:0c:7b:0e:5e:35:4b:8e:12:ba:aa:
         05:e6:01:be:a9:e3:00:d0:c1:e5:58:e2:c6:09:c0:ae:0e:13:
         93:a1:ea:05:c2:2f:98:52:41:1c:ed:03:07:ae:38:8e:ba:63:
         4d:c6:3a:cc:6b:be:3d:46:f8:96:b9:de:5e:3f:a7:dc:27:c6:
         83:d8:ff:34:fd:1f:83:ce:af:74:0f:10:ad:d6:f6:36:66:6e:
         c6:d7:7e:cc:5a:85:6f:4f:a7:84:80:42:d2:4f:a7:0f:a3:40:
         04:10:24:ea:76:d8:94:44:37:24:8b:2f:29:a5:97:11:27:30:
         c7:25:4c:22:8f:f5:4e:d9:a1:d2:89:0f:96:8f:74:90:9f:31:
         1b:a9:ca:a8:75:ad:ac:a0:19:36:45:61:85:b4:fd:11:d0:5a:
         08:1e:7e:08:9c:fb:b0:da:d6:41:42:96:c7:8a:42:99:9b:1b:
         8c:ed:06:47:5b:76:3e:6d:97:a1:91:87:f6:10:75:b5:eb:9d:
         a1:21:b2:a5:08:b3:ba:e9:37:b7:c6:20:26:b0:56:f6:3b:dc:
         07:29:0b:a4:32:5d:c1:72:b5:8a:7a:f3:3a:a6:5c:bd:05:26:
         f8:df:ba:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:37 2026 by rpki-client