Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
File:                     bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft (raw, json)
Hash identifier:          lTDyktMgVEyRS/vjOhtQbKvGaVvU5AXgnLo1zoUtg7U=
Subject key identifier:   67:10:E8:5E:88:9D:48:70:13:34:3D:A5:7F:69:E8:6F:18:2A:19:C4
Authority key identifier: 6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38
Certificate issuer:       /CN=A913EA16/serialNumber=6E148A0D085780386A817DCD8D64695411C76838
Certificate serial:       04C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
Manifest number:          04B7
Signing time:             Wed 20 May 2026 23:58:39 +0000
Manifest this update:     Wed 20 May 2026 23:58:39 +0000
Manifest next update:     Wed 27 May 2026 23:58:39 +0000
Files and hashes:         1: bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl (hash: 5A61eRK/JStPxqDUMcmGAUqhhAJdvH0oNkFtz7WLgCI=)
                          2: 8B729608B62F11EFB2DE315FC4F9AE02.roa (hash: htZKbTCRw2kolIOs+1xX3ByAdUKRSkWwNNKR43qldvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl
                          rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EA16, serialNumber=6E148A0D085780386A817DCD8D64695411C76838
        Validity
            Not Before: May 20 23:58:39 2026 GMT
            Not After : May 27 23:58:39 2026 GMT
        Subject: CN=6a0e4aaf-fe34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:c1:f5:51:dd:9b:14:af:f4:4b:1a:11:f6:
                    e5:6b:e4:20:80:27:f2:ac:f1:ae:66:14:16:a1:22:
                    6d:64:45:fe:06:25:ce:74:44:46:27:c5:0a:0d:bd:
                    16:32:78:d5:2a:96:a7:81:60:7e:eb:35:6a:ae:9d:
                    49:20:6b:74:f2:21:6a:fb:db:65:5d:18:67:d9:8f:
                    f7:64:18:71:06:76:64:b6:43:3c:44:66:64:45:80:
                    ff:68:e0:a4:5d:75:91:56:c2:52:df:e8:43:37:64:
                    eb:7e:61:77:f2:4f:b1:75:cc:48:b1:9e:cf:d6:17:
                    bb:e7:6b:77:48:dd:cf:4b:99:10:76:e7:6c:a6:24:
                    38:f1:fc:56:f8:c2:ce:95:7b:f6:5f:d4:76:cc:42:
                    9a:85:46:47:87:6b:0b:a1:91:3c:bf:82:27:41:32:
                    82:ef:b9:66:98:43:58:54:af:75:1b:d0:cf:46:0d:
                    07:31:d3:d0:63:ad:d7:52:8c:bc:3d:bb:c5:cf:08:
                    f5:84:89:1c:11:3a:12:9d:57:22:37:6e:e6:42:d1:
                    96:04:a8:ce:7a:88:e3:c6:11:37:64:a7:ad:42:cf:
                    37:ed:c3:36:45:a1:8c:60:5c:6d:86:69:b2:cb:93:
                    5d:69:e8:f0:7d:3e:d4:ae:78:65:e8:d0:71:15:3b:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:10:E8:5E:88:9D:48:70:13:34:3D:A5:7F:69:E8:6F:18:2A:19:C4
            X509v3 Authority Key Identifier:
                keyid:6E:14:8A:0D:08:57:80:38:6A:81:7D:CD:8D:64:69:54:11:C7:68:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhSKDQhXgDhqgX3NjWRpVBHHaDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EA16/452F7AEE777B11EC86FC105DC4F9AE02/bhSKDQhXgDhqgX3NjWRpVBHHaDg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:d1:82:c6:c7:89:00:3e:55:bb:8f:09:e9:a6:d3:e5:20:7c:
         ee:b5:72:02:ed:e3:a4:5c:7b:75:52:cf:48:e3:ec:f3:16:67:
         05:81:1a:f1:c0:c7:17:b9:09:23:b5:50:ae:fc:c4:1d:76:c6:
         62:53:c0:92:63:ff:fc:96:d0:55:b3:e8:35:9d:58:b9:a4:6b:
         c5:8d:6c:da:37:5a:d5:1d:8c:b5:7c:4a:0b:a1:ce:bf:03:55:
         c4:46:96:84:81:96:2e:9a:c1:68:04:a7:81:c5:e6:d1:3d:ec:
         d3:52:35:51:19:83:ab:42:3c:75:d5:6a:3f:20:77:0a:6e:38:
         e4:e5:b8:f4:67:86:a5:60:93:09:1a:87:7b:f5:83:86:26:30:
         45:9f:22:bc:78:9a:66:2e:9d:ef:1d:e3:a3:94:27:b0:7c:4e:
         ee:58:0b:d7:9e:c6:ab:6e:d8:3f:fc:cf:68:dc:d9:1d:c8:08:
         83:94:6a:5a:ce:d1:4f:25:c0:81:63:85:84:91:a6:27:be:77:
         6a:60:7d:78:f5:6c:4f:b7:76:f1:58:9a:e7:d0:41:ac:a3:20:
         b3:c4:3f:26:89:91:81:7d:87:0d:93:96:c6:9e:b9:3c:b2:58:
         fa:a1:17:8d:db:da:f6:ee:c4:be:51:c2:5c:57:53:06:c6:13:
         2e:7f:74:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VBMTYxMTAvBgNVBAUTKDZFMTQ4QTBEMDg1NzgwMzg2QTgxN0RDRDhENjQ2OTU0
MTFDNzY4MzgwHhcNMjYwNTIwMjM1ODM5WhcNMjYwNTI3MjM1ODM5WjAYMRYwFAYD
VQQDEw02YTBlNGFhZi1mZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw/bB9VHdmxSv9EsaEfbla+QggCfyrPGuZhQWoSJtZEX+BiXOdERGJ8UKDb0W
MnjVKpangWB+6zVqrp1JIGt08iFq+9tlXRhn2Y/3ZBhxBnZktkM8RGZkRYD/aOCk
XXWRVsJS3+hDN2TrfmF38k+xdcxIsZ7P1he752t3SN3PS5kQdudspiQ48fxW+MLO
lXv2X9R2zEKahUZHh2sLoZE8v4InQTKC77lmmENYVK91G9DPRg0HMdPQY63XUoy8
PbvFzwj1hIkcEToSnVciN27mQtGWBKjOeojjxhE3ZKetQs837cM2RaGMYFxthmmy
y5NdaejwfT7Urnhl6NBxFTtO/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcQ6F6I
nUhwEzQ9pX9p6G8YKhnEMB8GA1UdIwQYMBaAFG4Uig0IV4A4aoF9zY1kaVQRx2g4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUExNi80NTJGN0FFRTc3
N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdEaHFnWDNOaldScFZCSEhh
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JoU0tEUWhYZ0RocWdYM05qV1JwVkJISGFEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUExNi80NTJGN0FFRTc3N0IxMUVDODZGQzEwNURDNEY5QUUwMi9iaFNLRFFoWGdE
aHFnWDNOaldScFZCSEhhRGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvNGCxseJAD5Vu48J6abT5SB87rVyAu3jpFx7dVLPSOPs8xZnBYEa8cDHF7kJ
I7VQrvzEHXbGYlPAkmP//JbQVbPoNZ1YuaRrxY1s2jda1R2MtXxKC6HOvwNVxEaW
hIGWLprBaASngcXm0T3s01I1URmDq0I8ddVqPyB3Cm445OW49GeGpWCTCRqHe/WD
hiYwRZ8ivHiaZi6d7x3jo5QnsHxO7lgL157Gq27YP/zPaNzZHcgIg5RqWs7RTyXA
gWOFhJGmJ753amB9ePVsT7d28Via59BBrKMgs8Q/JomRgX2HDZOWxp65PLJY+qEX
jdva9u7EvlHCXFdTBsYTLn90dg==
-----END CERTIFICATE-----
Generated at Thu May 21 12:36:09 2026 by rpki-client