Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
File:                     bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft (raw, json)
Hash identifier:          KYvutIlvFVqyx9WWpbipG8YNprLoRighuJ0ZCF402rY=
Subject key identifier:   ED:EA:29:40:E2:31:A6:EA:1E:0C:AF:82:71:4F:62:DB:99:C3:C9:DC
Authority key identifier: 6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9
Certificate issuer:       /CN=A914949E/serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
Manifest number:          01CE
Signing time:             Sun 05 Apr 2026 03:10:53 +0000
Manifest this update:     Sun 05 Apr 2026 03:10:52 +0000
Manifest next update:     Sun 12 Apr 2026 03:10:52 +0000
Files and hashes:         1: bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl (hash: wpwAROpKWO9nVi1neJ1PMmF9bLgFkme4L2D1uhqw9W0=)
                          2: 52531292718111EEA2596A60C4F9AE02.roa (hash: xAtT+WHdk8wH+J6tD5+jiUroriSZKOyNLMOepfOpKx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl
                          rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914949E, serialNumber=6E345C01556DE3EDA1D9134D4A2D7EA523A148F9
        Validity
            Not Before: Apr  5 03:10:52 2026 GMT
            Not After : Apr 12 03:10:52 2026 GMT
        Subject: CN=69d1d2bd-a941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:ea:a4:81:b0:7c:f5:c3:f7:56:10:c2:f9:
                    7a:a8:ec:e7:c9:ba:ef:e6:72:62:21:66:65:d3:5d:
                    2f:f5:d0:62:7b:c9:81:54:27:53:f5:0c:b4:b2:87:
                    d9:cc:53:04:b7:b1:74:0d:d1:48:4d:10:68:c9:89:
                    8e:bd:24:93:44:60:be:78:32:30:ab:f7:9f:d4:55:
                    2b:38:c4:00:55:cf:d0:ef:11:c3:2e:fc:28:9b:e3:
                    5a:25:c3:a4:65:d4:9a:e3:b7:5b:3f:ab:e5:1c:4a:
                    4e:7f:8b:f2:0a:52:d0:fb:22:0b:ff:b0:22:9f:5c:
                    f5:31:ee:f0:d6:4e:ae:02:a0:60:53:36:b3:2f:0a:
                    44:42:b8:73:b1:f3:38:b8:57:b3:8e:ab:85:79:80:
                    14:f9:7a:e4:06:79:2a:27:fa:96:ae:74:45:cb:9b:
                    75:03:4c:6b:71:b1:6b:28:db:90:4a:7c:be:65:71:
                    ef:63:99:01:38:5b:af:6e:18:9d:9e:94:a0:e8:b9:
                    c5:8d:ab:08:96:46:7e:27:69:f3:84:ab:a2:bb:93:
                    c7:2f:cc:91:53:88:46:8c:6d:c4:9b:07:a8:24:b1:
                    5d:39:d5:a2:29:9f:65:c9:27:c1:f2:ad:8c:37:92:
                    a8:be:a6:77:b9:2f:41:bb:3b:de:7a:9e:f1:85:2c:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:EA:29:40:E2:31:A6:EA:1E:0C:AF:82:71:4F:62:DB:99:C3:C9:DC
            X509v3 Authority Key Identifier:
                keyid:6E:34:5C:01:55:6D:E3:ED:A1:D9:13:4D:4A:2D:7E:A5:23:A1:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjRcAVVt4-2h2RNNSi1-pSOhSPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914949E/80785F50716911EEB51B380DC4F9AE02/bjRcAVVt4-2h2RNNSi1-pSOhSPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:76:f0:36:fd:e5:bc:f9:36:37:42:cd:46:85:70:23:5b:
         4c:de:92:a7:69:61:55:37:6e:28:b6:3e:f3:49:00:18:4e:c7:
         57:79:b3:3e:a8:b8:da:6a:16:47:d0:50:d7:73:d1:96:3a:98:
         f8:46:af:4a:3c:90:39:d0:2a:50:43:b9:47:5d:e6:23:25:79:
         21:3f:6f:fb:d6:b0:b1:43:49:f5:97:a9:41:5b:2b:e4:85:0a:
         5d:e3:f7:0d:d0:12:a3:dd:45:b7:05:6d:e2:ce:91:d7:15:09:
         31:fe:11:89:5d:89:50:c5:ee:26:6b:bc:b3:30:5f:a1:21:b4:
         41:b3:2f:bf:c9:bf:66:44:66:51:c1:9e:2b:c9:de:ea:18:f0:
         67:60:c7:76:41:c5:91:5b:b9:43:09:4d:12:3c:fb:25:6d:00:
         dc:d1:a1:a2:20:37:2b:e5:56:05:1b:97:d0:9b:43:61:3e:f9:
         4e:00:2f:84:e4:f8:14:97:ad:ea:2a:43:d4:1b:33:f3:23:36:
         7f:3f:65:4b:22:fa:8b:b4:63:b8:5f:7c:ac:c5:c4:d9:a7:7b:
         7e:77:45:30:b3:84:33:cc:a7:1e:06:f0:12:3b:a6:d4:4e:47:
         bc:90:c0:88:c0:2d:0d:cb:ec:7c:eb:5d:14:73:f6:95:26:01:
         87:b1:43:4d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDk0OUUxMTAvBgNVBAUTKDZFMzQ1QzAxNTU2REUzRURBMUQ5MTM0RDRBMkQ3RUE1
MjNBMTQ4RjkwHhcNMjYwNDA1MDMxMDUyWhcNMjYwNDEyMDMxMDUyWjAYMRYwFAYD
VQQDEw02OWQxZDJiZC1hOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr0PqpIGwfPXD91YQwvl6qOznybrv5nJiIWZl010v9dBie8mBVCdT9Qy0sofZ
zFMEt7F0DdFITRBoyYmOvSSTRGC+eDIwq/ef1FUrOMQAVc/Q7xHDLvwom+NaJcOk
ZdSa47dbP6vlHEpOf4vyClLQ+yIL/7Ain1z1Me7w1k6uAqBgUzazLwpEQrhzsfM4
uFezjquFeYAU+XrkBnkqJ/qWrnRFy5t1A0xrcbFrKNuQSny+ZXHvY5kBOFuvbhid
npSg6LnFjasIlkZ+J2nzhKuiu5PHL8yRU4hGjG3EmweoJLFdOdWiKZ9lySfB8q2M
N5KovqZ3uS9Buzveep7xhSxErwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3qKUDi
MabqHgyvgnFPYtuZw8ncMB8GA1UdIwQYMBaAFG40XAFVbePtodkTTUotfqUjoUj5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTQ5RS84MDc4NUY1MDcx
NjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQtMmgyUk5OU2kxLXBTT2hT
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JqUmNBVlZ0NC0yaDJSTk5TaTEtcFNPaFNQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OTQ5RS84MDc4NUY1MDcxNjkxMUVFQjUxQjM4MERDNEY5QUUwMi9ialJjQVZWdDQt
MmgyUk5OU2kxLXBTT2hTUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiLF28Db95bz5NjdCzUaFcCNbTN6Sp2lhVTduKLY+80kAGE7HV3mzPqi42moW
R9BQ13PRljqY+EavSjyQOdAqUEO5R13mIyV5IT9v+9awsUNJ9ZepQVsr5IUKXeP3
DdASo91FtwVt4s6R1xUJMf4RiV2JUMXuJmu8szBfoSG0QbMvv8m/ZkRmUcGeK8ne
6hjwZ2DHdkHFkVu5QwlNEjz7JW0A3NGhoiA3K+VWBRuX0JtDYT75TgAvhOT4FJet
6ipD1Bsz8yM2fz9lSyL6i7RjuF98rMXE2ad7fndFMLOEM8ynHgbwEjum1E5HvJDA
iMAtDcvsfOtdFHP2lSYBh7FDTQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:02 2026 by rpki-client