Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
File:                     BN7ay9uvpcHBT5KBe5b39QMQCig.mft (raw, json)
Hash identifier:          +nwnVJfYdcRBoL7pi6UezCPnqwCICqycKDyusCOWFSg=
Subject key identifier:   B9:9A:08:BC:46:64:DA:21:30:FE:82:87:25:CC:FB:43:1D:92:7D:72
Authority key identifier: 04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28
Certificate issuer:       /CN=A912DD36/serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
Manifest number:          015A
Signing time:             Sun 05 Apr 2026 04:27:16 +0000
Manifest this update:     Sun 05 Apr 2026 04:27:15 +0000
Manifest next update:     Sun 12 Apr 2026 04:27:15 +0000
Files and hashes:         1: BN7ay9uvpcHBT5KBe5b39QMQCig.crl (hash: rqjNNiahUWfiqpWoaYySr9gxVO0CmSAFBrWqZDH78r0=)
                          2: 09EC8E16662211EFB6FA446CC4F9AE02.roa (hash: b75sAYMEIXYdDT25gmVHvykzgLoZpS+x22joZCKSsl4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl
                          rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DD36, serialNumber=04DEDACBDBAFA5C1C14F92817B96F7F503100A28
        Validity
            Not Before: Apr  5 04:27:15 2026 GMT
            Not After : Apr 12 04:27:15 2026 GMT
        Subject: CN=69d1e4a3-dec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5b:f0:0d:71:2e:f3:c1:0c:2a:db:65:b8:07:
                    d1:37:0a:d4:f7:fa:c1:58:b2:1b:50:fb:f0:5e:9c:
                    02:de:86:5d:d0:a8:c0:90:2b:73:26:cb:8f:ce:77:
                    d1:b7:20:14:8a:98:6f:c1:32:72:85:ec:88:de:35:
                    d6:fa:42:0a:d7:28:ab:e6:c0:ba:9b:e7:96:ae:1c:
                    ab:15:b4:e1:4b:ab:41:e4:b7:27:16:d8:b0:dd:7f:
                    59:8b:b4:5c:b9:5c:98:a4:9f:98:68:3f:84:e3:6c:
                    48:af:ca:38:5f:e2:91:85:61:8b:f8:97:91:38:13:
                    fe:f2:43:da:e5:6f:78:1c:f2:90:f3:07:25:64:01:
                    40:4a:62:8a:b2:5e:e2:da:1c:e3:1c:94:ba:57:e6:
                    4f:0f:ad:ab:5f:0b:3e:3e:8b:88:d7:b0:b6:f2:f7:
                    f8:ea:62:1c:73:91:b7:1d:6c:6d:50:8c:58:c3:b2:
                    80:26:0f:85:5f:5b:39:c7:1c:08:a2:07:e5:63:28:
                    14:7a:4f:91:b7:a1:40:60:19:78:46:75:c6:92:bb:
                    98:a2:27:9b:d2:2f:37:16:ab:6e:26:65:22:b1:10:
                    24:1f:44:a2:f0:82:17:39:b0:37:68:35:14:ef:b7:
                    8a:d7:9a:75:d8:06:ff:11:eb:9e:f7:dc:82:ef:55:
                    c8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:08:BC:46:64:DA:21:30:FE:82:87:25:CC:FB:43:1D:92:7D:72
            X509v3 Authority Key Identifier:
                keyid:04:DE:DA:CB:DB:AF:A5:C1:C1:4F:92:81:7B:96:F7:F5:03:10:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BN7ay9uvpcHBT5KBe5b39QMQCig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD36/7F4023F2253211EFBC93211AC4F9AE02/BN7ay9uvpcHBT5KBe5b39QMQCig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:bd:bc:4f:c1:62:4c:2f:93:f5:51:da:8a:15:45:00:b5:
         c0:f0:72:27:84:05:bf:5a:fd:8d:ff:55:38:7e:8c:39:cc:21:
         b0:6d:82:c2:34:ce:68:bc:53:27:3e:d3:8f:f9:53:49:55:37:
         41:9b:7e:a9:4a:78:cc:04:77:e5:3f:71:f5:ad:4b:ab:d3:b8:
         a6:f3:28:1a:f3:a0:5b:1f:4e:3c:41:d2:2e:d1:de:20:38:a5:
         fa:39:49:20:7e:48:cf:ec:6c:e3:03:40:d5:fa:72:b1:0f:b4:
         d3:b8:d6:dd:bb:bc:1a:e9:bb:69:33:2c:54:e9:86:28:9a:b1:
         52:10:8a:00:20:31:cd:7e:44:0b:34:c7:67:6c:49:8f:32:c0:
         b1:4c:75:1f:80:0c:95:d1:00:7a:7d:f4:12:b2:7f:32:74:8a:
         1b:ef:36:36:94:51:34:d5:25:80:01:85:65:99:31:da:85:84:
         6d:7a:90:fd:ed:e8:39:d9:7e:0a:3a:ad:43:8a:0c:75:63:ad:
         c3:da:17:09:cd:c2:73:44:28:4f:a9:71:30:6e:69:9f:85:81:
         a5:ea:32:d8:7a:fb:57:b8:80:a6:e6:d6:a2:09:53:be:01:71:
         81:d9:e9:77:2f:b0:18:8b:ca:47:e8:95:62:93:31:34:a3:76:
         da:af:17:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:30 2026 by rpki-client