Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File:                     bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier:          TQJFXi+g3gSIYUX39Ju+Kto4sFyNKEzA5V1FpYu0jdY=
Subject key identifier:   77:34:7B:DC:EB:EB:BA:67:62:F0:8A:90:4C:80:3C:85:C6:3B:EE:05
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer:       /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial:       0170
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number:          016D
Signing time:             Mon 01 Jun 2026 05:29:29 +0000
Manifest this update:     Mon 01 Jun 2026 05:29:28 +0000
Manifest next update:     Mon 08 Jun 2026 05:29:28 +0000
Files and hashes:         1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: GCdvq4y7AQ4VSESmC0Spy3t9G/DYqIuXAjWQ+h4gEh8=)
                          2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: eFqoSUC3CBG2LpBUw/aigLIa86LE66amw5wsVo9Bfuc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
                          rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
        Validity
            Not Before: Jun  1 05:29:28 2026 GMT
            Not After : Jun  8 05:29:28 2026 GMT
        Subject: CN=6a1d18b9-840c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:10:48:1b:f4:39:bd:57:5c:72:af:80:91:
                    4c:23:33:0f:d9:ce:40:ff:08:37:da:35:87:52:1c:
                    f2:1d:92:1b:59:fe:3d:11:46:fb:7b:b9:6c:95:36:
                    46:65:ac:b1:34:7f:f8:2e:4b:51:da:07:3b:93:2a:
                    d8:43:01:41:fc:99:13:21:e1:cd:3e:76:41:f7:8e:
                    95:4b:5e:4f:6f:4d:10:24:49:96:b0:b1:69:88:03:
                    e8:a1:3b:b9:ed:e6:6b:a8:0f:8d:74:00:b9:25:af:
                    ac:72:6d:56:3a:e0:11:90:0d:c9:ee:bc:c3:63:08:
                    1d:07:79:2e:a3:85:bc:df:52:ce:5a:4e:b0:04:e1:
                    1f:16:b3:9e:a4:70:8c:02:1e:6a:6a:fd:09:6e:08:
                    84:99:e0:00:c9:f0:b2:52:7e:03:85:d8:d3:e8:8a:
                    b7:16:7e:86:af:d6:19:af:f2:fe:00:c8:14:e0:3b:
                    ea:55:50:4d:cb:cb:d6:c6:03:89:77:c4:c4:af:af:
                    dd:57:4f:87:4e:72:7c:84:0d:fc:79:80:01:c1:b6:
                    b5:c8:3e:e8:94:56:dc:05:94:6c:3e:65:46:14:0f:
                    49:79:25:be:eb:42:f5:41:68:24:6f:bf:9b:4c:f5:
                    52:d3:60:68:a4:24:f3:cf:04:de:04:22:07:77:d7:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:34:7B:DC:EB:EB:BA:67:62:F0:8A:90:4C:80:3C:85:C6:3B:EE:05
            X509v3 Authority Key Identifier:
                keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c9:14:6a:04:02:9e:c5:cc:47:26:4c:86:81:92:3a:bd:f3:
         0e:52:6f:98:17:fc:1e:96:6c:90:7e:58:78:9f:a6:7c:4c:b3:
         7b:5c:7f:ed:d3:5b:1f:04:31:97:39:5c:be:56:21:7d:7a:04:
         cd:6d:f7:7b:d4:76:9f:c2:2e:04:8e:a5:d2:13:02:f7:29:30:
         2c:39:3d:66:ff:0d:fb:11:9d:21:99:98:3a:b4:63:d1:06:3c:
         c5:f2:2c:63:c8:af:31:e4:2c:0e:fe:57:8b:62:6e:72:42:b8:
         bc:16:7f:5f:c9:c2:bf:12:2d:36:1d:21:67:ca:fa:77:4e:36:
         65:e2:d0:fd:c0:9e:db:7e:dc:a2:2e:a0:31:10:74:7e:df:37:
         7a:ae:46:01:8d:14:ba:6c:02:bb:91:5e:d1:35:2c:11:3a:be:
         1d:eb:59:30:cc:b8:d8:ef:88:c4:6b:a7:8d:75:2b:46:e8:34:
         3b:25:f6:de:23:e9:7b:11:a7:a0:b3:5f:b6:5b:ca:e9:f1:48:
         65:fe:ee:c8:56:92:4c:72:e5:d6:a2:80:42:6e:02:3f:a5:e8:
         d8:d1:ee:88:b9:84:1e:cc:ed:a8:05:ed:4c:d3:d9:5e:19:42:
         85:ac:17:17:d7:d7:e1:91:28:f1:23:e4:d3:85:04:e9:89:02:
         3d:9f:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:09 2026 by rpki-client