Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
File:                     BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json)
Hash identifier:          UDjD0rjggUmzsZ55sCULl3Z7RyVgX53xeLbPDBjOxzg=
Subject key identifier:   42:9E:79:B8:F6:FF:CB:F8:72:C2:B9:3A:AB:F3:28:67:B1:F3:06:7F
Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C
Certificate issuer:       /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
Manifest number:          0247
Signing time:             Thu 11 Jun 2026 04:39:44 +0000
Manifest this update:     Thu 11 Jun 2026 04:39:44 +0000
Manifest next update:     Thu 18 Jun 2026 04:39:44 +0000
Files and hashes:         1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: ruZG6lOSzsGTpvWL4kTrhN3At59XrlmuNkXLOugXLA4=)
                          2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: D0We847jC9NmtS/4aP2Z+ItJ6o2XNA0yQ9zXCE962BM=)
                          3: 00646A9CE0D511F08788B2A9556F56BC.roa (hash: FtBFCaWOLNLTBRIeXShQkhCIojOskqt9TOXuLZ51kXs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl
                          rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 04:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C
        Validity
            Not Before: Jun 11 04:39:44 2026 GMT
            Not After : Jun 18 04:39:44 2026 GMT
        Subject: CN=6a2a3c10-9b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:9d:cb:39:95:db:de:78:46:a2:4b:21:51:
                    1c:5b:0e:ae:2b:4f:f8:01:ba:2f:e2:71:31:0f:7a:
                    af:8b:2e:77:e9:16:a7:4f:84:8e:4a:de:dd:c7:45:
                    d1:96:60:10:ea:30:7b:98:c2:73:74:45:09:b8:94:
                    ee:e8:08:89:00:7c:2f:b5:12:46:8e:97:7e:a7:08:
                    a3:a3:24:97:83:74:3e:f9:12:28:e7:bf:83:6b:67:
                    ba:5a:d3:5a:76:4d:cf:2f:2b:68:49:70:fe:c2:05:
                    3e:1f:95:23:2a:60:7e:83:a2:c2:c9:d2:ac:32:76:
                    66:33:7a:a3:08:5f:33:96:21:07:24:0c:15:55:69:
                    1b:9d:71:95:27:6d:8d:ab:f4:83:f6:8c:cc:90:10:
                    fb:0f:ca:4f:09:83:af:c3:61:00:49:a3:c1:68:82:
                    b7:4d:23:23:d5:80:1c:bb:31:9e:25:57:e8:d4:77:
                    ec:f4:b6:24:ec:cf:6e:78:26:70:64:87:37:22:5c:
                    85:3b:d5:f2:c8:63:f3:06:d9:3e:a3:4e:90:7e:f7:
                    55:82:98:a3:89:4b:b2:d5:0d:18:6a:0e:c4:ad:83:
                    67:3f:71:3a:fd:89:9a:de:cf:4e:5e:71:ce:f7:a3:
                    83:8f:70:64:4a:52:30:40:13:a5:2f:9d:6c:7b:71:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9E:79:B8:F6:FF:CB:F8:72:C2:B9:3A:AB:F3:28:67:B1:F3:06:7F
            X509v3 Authority Key Identifier:
                keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:76:24:ec:81:35:de:40:38:82:21:46:c5:4b:27:63:e9:49:
         eb:cf:c0:6f:7a:8e:6e:21:66:dc:6a:d3:c6:d1:25:6d:0d:f9:
         6f:c6:d6:38:4b:04:24:10:d1:1e:55:6b:76:45:85:ce:45:80:
         ac:ae:ac:8f:ea:0d:80:a4:4c:2d:a3:b1:49:81:40:00:97:28:
         fd:4e:74:c3:ad:08:fe:c3:33:4e:1a:7a:47:f7:c2:15:80:6c:
         c5:99:80:5c:36:ff:88:ca:84:41:88:eb:76:0e:27:a1:e9:09:
         90:1c:97:02:4d:03:4b:42:d4:8e:62:57:28:cf:9f:82:95:75:
         f2:06:23:47:10:7a:ff:8d:c3:1a:c8:01:a2:3d:68:59:c4:9e:
         82:f7:36:b7:e4:e5:80:15:f1:fc:5e:fa:4f:88:7c:5b:be:47:
         eb:27:8f:f5:3e:df:3f:10:77:aa:c7:42:a2:8f:e6:a1:db:0e:
         6b:bb:39:71:e7:31:d7:bf:f2:4b:61:b0:e7:0e:e3:e2:25:43:
         d8:a7:0a:14:1f:6a:35:28:14:c2:ed:c0:d8:8b:f6:a9:c0:86:
         d4:6e:3e:ef:f1:30:56:86:40:69:3d:96:b3:0c:1f:6e:af:2d:
         93:ae:45:d5:15:3a:c0:14:9a:de:88:34:9b:ae:d0:9a:41:38:
         fe:47:b2:f8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4
NDU0NzczNUMwHhcNMjYwNjExMDQzOTQ0WhcNMjYwNjE4MDQzOTQ0WjAYMRYwFAYD
VQQDEw02YTJhM2MxMC05YjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5F2dyzmV2954RqJLIVEcWw6uK0/4Abov4nExD3qviy536RanT4SOSt7dx0XR
lmAQ6jB7mMJzdEUJuJTu6AiJAHwvtRJGjpd+pwijoySXg3Q++RIo57+Da2e6WtNa
dk3PLytoSXD+wgU+H5UjKmB+g6LCydKsMnZmM3qjCF8zliEHJAwVVWkbnXGVJ22N
q/SD9ozMkBD7D8pPCYOvw2EASaPBaIK3TSMj1YAcuzGeJVfo1Hfs9LYk7M9ueCZw
ZIc3IlyFO9XyyGPzBtk+o06QfvdVgpijiUuy1Q0Yag7ErYNnP3E6/Yma3s9OXnHO
96ODj3BkSlIwQBOlL51se3G2FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKeebj2
/8v4csK5OqvzKGex8wZ/MB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5
NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1
NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALHYk7IE13kA4giFGxUsnY+lJ68/Ab3qObiFm3GrTxtElbQ35b8bWOEsEJBDR
HlVrdkWFzkWArK6sj+oNgKRMLaOxSYFAAJco/U50w60I/sMzThp6R/fCFYBsxZmA
XDb/iMqEQYjrdg4noekJkByXAk0DS0LUjmJXKM+fgpV18gYjRxB6/43DGsgBoj1o
WcSegvc2t+TlgBXx/F76T4h8W75H6yeP9T7fPxB3qsdCoo/modsOa7s5cecx17/y
S2Gw5w7j4iVD2KcKFB9qNSgUwu3A2Iv2qcCG1G4+7/EwVoZAaT2Wswwfbq8tk65F
1RU6wBSa3og0m67QmkE4/key+A==
-----END CERTIFICATE-----
Generated at Thu Jun 11 20:50:33 2026 by rpki-client