Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File:                     bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier:          58f583de/1wXCFdweQ2MVRbzlV33bShFulAnDQt/OMc=
Subject key identifier:   80:45:A3:84:04:D3:9F:97:63:4E:A1:04:F6:D8:71:B2:6C:B9:02:A1
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer:       /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial:       0742
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number:          0739
Signing time:             Fri 22 May 2026 21:53:43 +0000
Manifest this update:     Fri 22 May 2026 21:53:42 +0000
Manifest next update:     Fri 29 May 2026 21:53:42 +0000
Files and hashes:         1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: 7F7TQuRyyVrmvGjIICoz2wfCXN9fYleDhxBCh6do/hk=)
                          2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: Pjx2fk1ERBs14VqIaD9LJOxFbqs8w+2aRHPGV9fMHnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
                          rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 21:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858 (0x742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
        Validity
            Not Before: May 22 21:53:42 2026 GMT
            Not After : May 29 21:53:42 2026 GMT
        Subject: CN=6a10d067-a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:80:f8:20:0a:50:cd:4b:41:c1:44:a4:2a:71:
                    0c:35:0e:02:ff:b8:b9:74:50:36:9e:c0:5a:e4:12:
                    7b:5f:25:41:de:e8:45:02:dd:93:e8:ee:45:d4:c7:
                    be:ef:01:ed:d3:98:79:e2:0c:96:75:04:19:65:22:
                    5a:f9:56:d7:06:c9:94:02:be:63:41:6c:40:ff:e0:
                    36:f3:e6:81:84:48:1b:97:21:ce:eb:be:df:33:6b:
                    fb:49:e1:79:c9:61:90:da:5a:fd:5e:9f:28:99:76:
                    87:f4:9f:ed:18:b4:0d:b1:ee:19:6d:47:6e:73:d0:
                    a7:93:06:d5:42:1f:25:f2:8d:86:9b:7d:ea:42:50:
                    69:83:df:57:b5:ef:ab:e3:89:ee:07:90:aa:48:14:
                    9e:70:f4:15:c8:99:ca:d5:0b:3a:86:53:9a:1e:1a:
                    be:a4:20:fc:24:63:6a:a4:08:30:bd:2e:d3:6e:7a:
                    37:e2:4d:bf:48:db:46:66:1f:1a:0f:6d:4c:cf:b8:
                    61:4b:7a:84:e7:b0:dd:08:db:cc:fc:a7:47:fd:5b:
                    cd:2b:c6:f8:35:bd:09:d7:1e:20:b3:ba:8a:1b:d2:
                    ab:f2:6d:a4:e9:5b:2d:60:19:ee:82:ba:1b:7c:b3:
                    de:44:e4:08:bb:73:49:b0:76:12:40:a7:df:46:d0:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:45:A3:84:04:D3:9F:97:63:4E:A1:04:F6:D8:71:B2:6C:B9:02:A1
            X509v3 Authority Key Identifier:
                keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:23:23:4c:99:30:dd:8b:65:fe:eb:bb:b6:19:0e:50:83:
         e3:b9:d2:d4:74:de:e4:a7:bd:f3:8d:8b:a0:0b:17:9d:cd:95:
         db:e3:b5:6e:19:1a:bc:2f:f5:f7:43:bf:44:79:66:be:04:7e:
         7d:54:fa:52:a9:44:f9:e3:28:f5:47:ec:48:11:1f:5b:0b:37:
         56:44:7f:83:34:03:4a:49:f9:de:79:df:06:a3:8b:4c:21:47:
         53:24:bf:11:28:c4:cd:5b:9e:53:7d:25:8b:bd:88:df:44:3d:
         20:64:11:30:c0:1d:de:49:16:02:af:3c:29:36:15:3f:2c:a3:
         19:7a:05:e6:08:ca:0f:c6:f7:ba:ad:3f:07:e7:6b:10:e6:52:
         6e:ff:18:8a:38:4c:c9:9a:38:20:87:81:b6:ec:b3:30:a2:fd:
         89:45:19:01:e6:cf:6c:8d:9e:bb:f5:fd:37:18:c1:f6:d5:50:
         53:2b:40:35:df:2f:00:f0:0b:c3:4e:4b:95:09:2a:ba:b8:a8:
         52:75:9b:ef:3d:d4:63:02:30:8f:18:5a:91:59:5d:14:cf:49:
         11:ce:cf:15:1b:e0:ed:03:1d:b1:18:5e:48:e5:87:fd:bb:72:
         97:48:80:04:c2:a3:b1:d1:a9:26:f8:84:10:0c:14:c8:3b:dc:
         5a:5d:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:24 2026 by rpki-client