Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File:                     BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier:          pRT3TxG2YJbgfYI+Ba6PjKQB/OVsU18yIeQoU9ZKRT8=
Subject key identifier:   EA:22:B7:C2:BF:7D:89:BB:F3:75:A3:AC:2F:8F:77:6E:A2:47:24:3D
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer:       /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial:       01C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number:          01BC
Signing time:             Sun 05 Apr 2026 03:27:17 +0000
Manifest this update:     Sun 05 Apr 2026 03:27:17 +0000
Manifest next update:     Sun 12 Apr 2026 03:27:17 +0000
Files and hashes:         1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: I8Xp5k/6LP2e1AutBAEUhObAeYHfeyY2ZbURdeIk4Y8=)
                          2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: ziUwj1t2MgzSTb6oGuF04WPFD3CesqsmmUkvkWjxkR4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
                          rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
        Validity
            Not Before: Apr  5 03:27:17 2026 GMT
            Not After : Apr 12 03:27:17 2026 GMT
        Subject: CN=69d1d695-f7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:3b:17:52:c6:6e:dd:8f:df:95:62:e8:ff:
                    84:fa:b3:03:46:cb:a3:7f:e2:ca:3d:8a:7f:ce:a6:
                    f5:6c:42:b6:87:6d:7b:d0:a8:94:08:89:48:ce:26:
                    ce:6c:25:68:ea:1a:70:6a:69:89:af:cd:b8:45:0d:
                    46:e8:5f:30:47:b0:90:5e:3f:55:f5:cc:3f:a9:a2:
                    57:a7:63:49:35:41:2c:b1:7e:57:0a:74:c6:55:cd:
                    ac:7e:89:3e:db:c4:35:34:6d:76:6c:00:f7:6e:f2:
                    0c:8a:5f:89:65:95:43:74:bd:98:5c:69:d7:89:0c:
                    a0:c4:fc:57:ec:1d:97:f5:8e:f7:06:d3:df:86:8c:
                    ef:f6:07:cd:11:0b:53:69:dc:68:1f:13:f4:42:ce:
                    7a:31:74:8f:f9:76:31:55:0f:26:df:98:c7:24:ba:
                    5b:66:63:ac:5d:af:bf:73:0f:0d:9c:2f:eb:1b:ca:
                    eb:e8:98:55:68:b6:d8:39:92:ce:73:bf:9d:1f:3e:
                    45:5c:2c:11:bc:c7:5c:b1:06:fe:4a:7c:65:8f:0e:
                    8f:9b:5b:7f:a3:9c:ee:9b:ec:c6:06:68:f4:06:d4:
                    1d:55:10:43:32:55:7a:95:b9:8a:59:74:df:bc:2f:
                    7c:6f:34:16:21:de:74:60:f7:41:56:85:de:3c:d9:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:22:B7:C2:BF:7D:89:BB:F3:75:A3:AC:2F:8F:77:6E:A2:47:24:3D
            X509v3 Authority Key Identifier:
                keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:01:0d:9d:33:3a:bf:28:21:90:0e:4a:da:af:f2:d4:f8:ea:
         3b:56:a5:7f:a3:b9:68:47:7e:a3:67:b3:85:90:68:6f:bf:83:
         e7:39:33:1e:00:c3:5c:03:65:49:f0:e0:47:32:ba:95:fb:a7:
         12:71:6f:7a:0f:ad:30:95:8a:f9:50:ca:65:47:6f:b4:a7:88:
         78:a3:eb:6a:06:f6:20:6f:86:6b:c1:f8:2d:c2:24:19:8f:af:
         b0:06:c3:cc:f4:f4:eb:c3:61:e1:57:b7:76:64:bc:30:f3:df:
         44:9c:25:16:7a:f9:3a:2d:e9:ad:15:27:9e:ad:54:19:3b:24:
         de:37:4d:d1:af:13:7e:3a:8b:87:78:99:23:c0:3d:ec:b4:20:
         4f:4f:b5:b1:20:4e:de:bf:71:b8:dc:81:15:a3:3f:93:e6:d9:
         41:a9:1e:e3:35:45:ea:1e:ee:fa:4c:ef:02:5c:62:06:4e:b1:
         2e:94:6f:6f:26:72:d0:07:1d:51:84:0e:82:0c:19:8b:df:e1:
         05:36:47:7d:d8:b2:fa:65:8a:b1:c8:d1:7a:f8:60:49:48:dc:
         90:9d:89:83:00:2a:4f:f9:07:09:cd:c9:30:84:3b:46:e7:57:
         19:ed:3b:9d:93:c0:7d:0a:62:a2:49:04:2e:b7:ae:8c:72:34:
         55:40:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:26:12 2026 by rpki-client