Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File:                     BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier:          SyxWJbgz9GmDA41+Kiq9aBbuvO599+3sHaqb4hnMPnk=
Subject key identifier:   80:26:C5:80:C8:47:38:ED:87:A2:4A:DE:FB:62:C7:58:36:8D:36:EF
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number:          01D3
Signing time:             Thu 21 May 2026 03:45:15 +0000
Manifest this update:     Thu 21 May 2026 03:45:15 +0000
Manifest next update:     Thu 28 May 2026 03:45:15 +0000
Files and hashes:         1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: ZnVgm+Gd9DrDX1ylbvoqi55NdioNpqn7Z+qlYSsRHHM=)
                          2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: May 21 03:45:15 2026 GMT
            Not After : May 28 03:45:15 2026 GMT
        Subject: CN=6a0e7fcb-81ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:90:b4:ae:38:db:76:7c:71:bb:14:90:cb:
                    c4:66:57:42:a6:b7:2c:29:80:cc:f5:fa:e5:5a:c3:
                    eb:16:60:f5:d9:ac:8f:0e:5f:10:6d:48:87:a8:ef:
                    38:06:91:51:e9:af:09:a2:3d:c0:6a:dd:a6:eb:b0:
                    81:9c:04:db:fd:d7:07:fb:9a:b8:6b:3a:33:94:90:
                    29:5b:98:af:d9:2b:21:47:ad:43:12:83:dc:ef:42:
                    87:17:1d:41:50:a0:13:ca:4a:5a:df:06:8e:85:f3:
                    34:84:0e:bc:46:62:62:e4:ee:2c:01:dc:5d:4b:8a:
                    83:6a:39:f0:68:36:5e:e3:53:31:37:d7:60:07:d4:
                    be:61:84:72:5e:9d:56:08:0d:c3:18:c7:e0:bd:b2:
                    aa:ea:8f:26:19:22:8c:8f:52:0a:6c:f9:c6:eb:8d:
                    ff:86:ce:b3:45:e2:b0:20:2e:d8:c3:ad:5a:7f:b2:
                    6d:7d:3c:d0:ef:a5:41:c0:4d:2f:c2:4a:7a:3b:a0:
                    37:f3:cd:45:89:d9:82:21:e1:a9:c7:20:bb:60:e7:
                    b5:08:eb:54:1d:ba:3f:b4:97:03:11:5b:82:7a:10:
                    18:18:82:9a:c7:f1:7f:03:ef:33:4d:9f:4d:a0:7e:
                    dd:21:98:56:a1:7b:a4:61:8e:71:5b:d9:e2:9f:83:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:C5:80:C8:47:38:ED:87:A2:4A:DE:FB:62:C7:58:36:8D:36:EF
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:35:de:2c:3e:93:5b:25:78:fc:83:c7:ff:3f:f9:05:b1:e0:
         74:89:2c:25:05:d0:d1:ea:87:36:7d:bf:55:1a:2e:70:be:3f:
         96:2f:83:d5:45:e9:33:4e:e5:42:f2:92:5f:1e:e8:02:5b:22:
         07:3f:2d:63:90:f4:17:ab:07:43:df:81:5e:d3:7b:eb:e8:97:
         34:d1:b3:ba:f2:65:20:7d:47:03:7a:e1:14:96:6d:1b:15:df:
         64:18:87:ba:de:e9:d7:5b:5d:13:5f:a7:f3:51:08:f3:08:c6:
         b0:1f:63:88:b0:b3:65:39:82:0c:33:dd:bb:25:a9:09:be:7b:
         b0:05:36:aa:7b:dc:18:d6:f4:b5:e2:fa:42:38:a3:fc:11:31:
         a5:c0:4a:1b:4f:a6:08:95:1f:f7:a6:71:d6:d8:8c:73:7a:1f:
         dd:cb:f0:a1:a0:55:46:1a:84:3e:2b:9e:d5:74:30:d2:44:2f:
         ab:f8:50:ba:49:d0:5e:1e:4e:eb:b5:84:dc:29:6c:73:3b:73:
         59:83:ce:5a:60:5e:8c:5a:80:d2:ad:2b:e3:27:92:26:3f:5c:
         2e:86:a3:36:5e:07:60:eb:f4:b9:35:f1:e5:db:54:af:ff:f9:
         27:45:f5:72:8e:0f:4e:a3:47:7e:1e:fe:c7:af:a8:e9:7a:51:
         ac:d9:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:33 2026 by rpki-client