Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          +Io4LrDNE23zM49Xsbf0eRVwbxeYth4fLfYXchLYS0w=
Subject key identifier:   9A:2A:56:22:B4:E8:93:E5:50:EB:FF:87:90:86:50:BF:1B:58:0F:54
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       247F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          6215
Signing time:             Sat 04 Apr 2026 14:15:31 +0000
Manifest this update:     Sat 04 Apr 2026 14:15:31 +0000
Manifest next update:     Sat 11 Apr 2026 14:15:31 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: J8uGNnCnD7RtXRXjh8wGl3sx4H25vI198ZIglJ7TCgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9343 (0x247f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: Apr  4 14:15:31 2026 GMT
            Not After : Apr 11 14:15:31 2026 GMT
        Subject: CN=69d11d03-f9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:71:40:35:a6:32:cf:cb:85:ad:7e:74:bf:
                    64:13:72:78:af:03:60:0c:80:34:77:07:b9:0e:d6:
                    e5:87:a8:15:9b:85:ed:0a:8e:25:18:25:d4:dd:82:
                    4a:e7:e1:26:96:46:df:49:ad:37:c0:fd:69:9e:6b:
                    57:3e:c0:11:cf:7e:f3:b8:d9:ed:ed:50:52:ff:ba:
                    dd:14:d8:99:d8:67:8b:9a:a5:ec:c8:2a:2d:c5:9c:
                    14:eb:30:8f:30:5d:12:86:f3:1b:52:47:77:b3:1e:
                    79:d3:a2:c6:8d:09:9b:94:49:8a:ba:82:bc:10:a0:
                    35:1c:3b:38:23:c6:04:7f:e6:76:a3:67:fc:8c:28:
                    9a:cc:ca:25:ac:e7:e2:50:3a:df:e1:62:8c:f7:9f:
                    1b:e0:67:b1:6b:b2:2c:f7:1c:d9:84:8f:07:d8:81:
                    0e:25:63:73:a8:0b:f3:34:b1:cd:96:d8:45:d3:27:
                    7f:fd:ef:c5:04:61:fe:bb:98:8f:0d:08:c3:ff:e9:
                    a5:d6:8f:e8:3a:da:1c:38:82:30:39:28:d8:2c:b7:
                    12:63:06:3c:73:76:ce:61:9d:f7:2c:55:aa:d8:d9:
                    08:35:1b:d8:08:24:e8:be:e6:99:d9:32:34:51:0f:
                    25:e4:2c:d0:f4:ce:75:df:a4:f5:8e:e8:fe:26:60:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2A:56:22:B4:E8:93:E5:50:EB:FF:87:90:86:50:BF:1B:58:0F:54
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:25:52:c4:59:41:87:c4:da:4e:bd:c8:c0:6f:8b:bb:fe:
         79:61:1f:7e:53:43:f7:b2:05:91:54:30:0c:79:5e:59:c1:a6:
         27:ca:24:be:41:f9:3f:a8:9c:9e:79:6f:7f:fc:d1:80:09:6b:
         ed:d6:25:5e:3e:32:a1:8b:4d:6e:e2:fa:7c:ba:52:79:c4:73:
         63:04:bb:f7:43:71:4c:86:e9:00:20:05:12:25:fc:64:dd:bd:
         1e:19:c5:e8:18:33:5b:60:d7:65:d5:26:c6:f9:4b:29:22:9c:
         15:a6:4c:ec:9d:5e:83:2b:13:d8:79:2c:f2:76:27:85:15:d5:
         41:3f:ec:32:05:7a:8a:a8:37:2f:96:c0:c8:b4:7d:84:a6:80:
         08:e9:22:47:0e:0b:c2:9a:07:59:7c:da:1b:93:c4:7a:78:22:
         16:0b:00:72:a1:e7:74:63:b5:b7:2e:44:5d:7e:d1:2d:af:b7:
         59:cf:65:f0:7f:23:28:a2:9b:38:15:a2:ba:68:e1:ee:4c:b2:
         12:29:71:f3:5c:a6:eb:7b:84:d4:fb:b5:f8:a9:76:b4:3b:ae:
         a4:0c:ff:4a:f6:d2:55:ca:56:93:97:46:e4:15:78:b2:df:75:
         82:dd:1e:8f:d8:8b:55:67:2a:39:4d:cf:a0:ed:ad:f7:60:57:
         66:93:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:51:48 2026 by rpki-client