Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
File:                     bPH0dvRFFGbI_SbiFvMnbMFeLho.mft (raw, json)
Hash identifier:          MTODsAK8iRv1eGqqI6OlHAF7H6oVN/F+gcr9e3EYWbM=
Subject key identifier:   68:90:99:3E:90:A8:A4:A9:65:41:23:DD:12:5B:C9:ED:2B:69:02:F3
Authority key identifier: 6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A
Certificate issuer:       /CN=A91529DF/serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
Manifest number:          46
Signing time:             Mon 27 Apr 2026 08:24:15 +0000
Manifest this update:     Mon 27 Apr 2026 08:24:15 +0000
Manifest next update:     Mon 04 May 2026 08:24:15 +0000
Files and hashes:         1: bPH0dvRFFGbI_SbiFvMnbMFeLho.crl (hash: 96Bt8OJphUwPG6vEsYuRLPMUrR4JKYBmnGjIWbADMpQ=)
                          2: E9C84708F67911F0B1D76CE5736F56BC.roa (hash: B9uNDvU5cJoDVtHMnMwD+CGmLLX1Ekokgd9afDF1IlY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl
                          rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 08:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91529DF, serialNumber=6CF1F476F4451466C8FD26E216F3276CC15E2E1A
        Validity
            Not Before: Apr 27 08:24:15 2026 GMT
            Not After : May  4 08:24:15 2026 GMT
        Subject: CN=69ef1d2f-baf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:36:a5:81:a0:db:34:a4:cc:8a:7e:d8:e1:
                    45:34:03:9e:a2:2a:96:1b:e3:a0:de:60:1b:1f:86:
                    91:50:68:6d:ae:7e:97:22:b6:c0:c5:c9:43:30:e8:
                    e7:f9:c7:31:8a:2a:a4:fa:cb:36:8a:b2:a0:2d:e5:
                    ad:0d:68:2b:17:10:c8:7f:89:d8:be:e1:bf:e0:18:
                    7d:84:05:b5:29:88:7d:77:72:78:28:cb:3a:b1:7d:
                    7d:96:a7:c2:a9:fb:74:7a:ec:cd:92:76:fd:0e:71:
                    6f:5c:ef:aa:67:7a:1a:c7:12:ca:06:62:7b:7d:24:
                    28:2c:23:47:b6:ce:86:4c:ec:ba:8a:f6:ac:5e:6c:
                    59:f0:04:48:36:cf:a1:db:36:c9:dc:7f:1b:6d:9d:
                    4b:b4:f3:a4:9e:45:bc:04:47:8b:bc:c7:74:1c:56:
                    48:fe:82:f1:8e:0a:e8:fd:30:fa:d4:29:3f:84:ae:
                    3a:e4:1a:3d:01:43:57:bb:54:69:5e:b1:2b:a3:1e:
                    a0:87:21:74:1f:db:84:3b:22:dc:84:fd:bd:36:27:
                    33:5c:54:02:1f:54:9e:c3:06:fd:88:05:0f:38:bd:
                    75:ad:69:59:83:d3:b6:8e:d4:85:71:e8:35:02:62:
                    3e:7d:30:06:a9:8f:48:d7:39:19:c4:c8:de:b2:6b:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:90:99:3E:90:A8:A4:A9:65:41:23:DD:12:5B:C9:ED:2B:69:02:F3
            X509v3 Authority Key Identifier:
                keyid:6C:F1:F4:76:F4:45:14:66:C8:FD:26:E2:16:F3:27:6C:C1:5E:2E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPH0dvRFFGbI_SbiFvMnbMFeLho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529DF/EACCA918ED2E11F080C46032476F56BC/bPH0dvRFFGbI_SbiFvMnbMFeLho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:f6:c1:e4:9c:97:2e:75:25:58:25:f2:51:e0:15:1f:30:
         77:15:8f:aa:f7:c4:64:97:a6:fe:86:b3:3d:26:f8:e2:0d:ea:
         59:20:c3:73:1f:2d:46:1c:b8:d9:5d:6b:59:8e:02:a6:5c:e7:
         1c:00:29:3d:8d:e1:02:82:7b:37:5e:a5:33:9f:a8:04:d4:40:
         88:9a:d0:ab:80:ed:aa:dc:83:ff:cb:4f:79:c5:8a:9c:6f:ed:
         0e:e6:d0:a1:d8:e7:16:5a:95:1a:af:e8:04:9f:9e:c3:48:3a:
         1d:6e:df:69:81:7f:c2:00:67:13:3c:24:7d:63:61:a4:1d:29:
         0e:3f:4c:76:6b:a9:77:e7:cb:66:37:2b:8b:2e:c3:3f:51:68:
         3d:97:1b:fd:b8:10:38:24:4c:c3:15:d6:23:05:b7:40:7d:f5:
         f6:fe:8b:9f:98:7b:03:89:1b:05:3b:46:89:4d:14:d4:40:9b:
         6b:00:5c:d2:0f:66:5b:93:f1:73:63:c9:0a:5a:6a:7c:72:6b:
         2d:b9:f3:5c:1e:56:5c:38:f1:e1:f8:65:fc:59:dd:77:e1:5d:
         9b:2c:10:6d:8b:b4:a2:83:9d:51:f7:e1:e0:c1:c0:cb:08:95:
         cb:14:69:80:6e:d1:7d:e2:8a:58:89:1d:67:79:25:ff:73:4a:
         d1:37:4e:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjlERjExMC8GA1UEBRMoNkNGMUY0NzZGNDQ1MTQ2NkM4RkQyNkUyMTZGMzI3NkND
MTVFMkUxQTAeFw0yNjA0MjcwODI0MTVaFw0yNjA1MDQwODI0MTVaMBgxFjAUBgNV
BAMTDTY5ZWYxZDJmLWJhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDU+TalgaDbNKTMin7Y4UU0A56iKpYb46DeYBsfhpFQaG2ufpcitsDFyUMw6Of5
xzGKKqT6yzaKsqAt5a0NaCsXEMh/idi+4b/gGH2EBbUpiH13cngoyzqxfX2Wp8Kp
+3R67M2Sdv0OcW9c76pnehrHEsoGYnt9JCgsI0e2zoZM7LqK9qxebFnwBEg2z6Hb
NsncfxttnUu086SeRbwER4u8x3QcVkj+gvGOCuj9MPrUKT+ErjrkGj0BQ1e7VGle
sSujHqCHIXQf24Q7ItyE/b02JzNcVAIfVJ7DBv2IBQ84vXWtaVmD07aO1IVx6DUC
Yj59MAapj0jXORnEyN6yawqzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaJCZPpCo
pKllQSPdElvJ7StpAvMwHwYDVR0jBBgwFoAUbPH0dvRFFGbI/SbiFvMnbMFeLhow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOURGL0VBQ0NBOTE4RUQy
RTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdiSV9TYmlGdk1uYk1GZUxo
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYlBIMGR2UkZGR2JJX1NiaUZ2TW5iTUZlTGhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy
OURGL0VBQ0NBOTE4RUQyRTExRjA4MEM0NjAzMjQ3NkY1NkJDL2JQSDBkdlJGRkdi
SV9TYmlGdk1uYk1GZUxoby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAOWfbB5JyXLnUlWCXyUeAVHzB3FY+q98Rkl6b+hrM9JvjiDepZIMNzHy1GHLjZ
XWtZjgKmXOccACk9jeECgns3XqUzn6gE1ECImtCrgO2q3IP/y095xYqcb+0O5tCh
2OcWWpUar+gEn57DSDodbt9pgX/CAGcTPCR9Y2GkHSkOP0x2a6l358tmNyuLLsM/
UWg9lxv9uBA4JEzDFdYjBbdAffX2/oufmHsDiRsFO0aJTRTUQJtrAFzSD2Zbk/Fz
Y8kKWmp8cmstufNcHlZcOPHh+GX8Wd134V2bLBBti7Sig51R9+HgwcDLCJXLFGmA
btF94opYiR1neSX/c0rRN07c
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:29:58 2026 by rpki-client