Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
File:                     bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json)
Hash identifier:          3bDqcb0E1R9XxZAQyTewP8iFwzcITktvLtBEtkIKqQQ=
Subject key identifier:   2D:59:23:F2:4A:85:EE:3D:55:09:C5:16:9A:A5:04:31:E4:8F:0B:EA
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       019B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
Manifest number:          0192
Signing time:             Mon 01 Jun 2026 05:10:09 +0000
Manifest this update:     Mon 01 Jun 2026 05:10:09 +0000
Manifest next update:     Mon 08 Jun 2026 05:10:09 +0000
Files and hashes:         1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: 1Xk9NET4nkVHjuxiLdpsWPiAjulA5erVrvduz7SFQiQ=)
                          2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: gVmzpA9zRHnYukGpUCnMcrjZvxQuC2VsY3N1/rrLsw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:10:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Jun  1 05:10:09 2026 GMT
            Not After : Jun  8 05:10:09 2026 GMT
        Subject: CN=6a1d1431-9233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:fa:1f:be:ce:f7:5a:a9:51:be:81:51:7e:
                    20:6c:33:74:09:1a:f2:ec:56:c2:17:b6:43:f6:d0:
                    4f:21:7f:ff:69:d4:5c:10:c0:07:44:56:e3:b2:31:
                    16:b6:53:f2:db:c8:a3:a1:16:39:c5:4b:36:61:28:
                    ef:13:9e:6a:7b:d1:88:3c:05:ed:93:93:c0:6a:ee:
                    2c:78:98:a1:fe:01:e3:b4:48:40:45:ab:df:62:34:
                    74:e8:61:cf:4b:9d:93:af:0a:55:c7:26:83:37:f7:
                    91:11:a4:01:04:a8:95:1c:a7:61:8c:5a:b7:a3:02:
                    08:a8:4d:24:36:42:a6:06:7c:a9:75:77:74:fa:97:
                    68:2c:c0:9a:7e:f0:66:91:45:f0:2a:6b:fa:7e:8b:
                    d9:af:7b:6c:94:4d:a4:89:c2:44:4c:d5:cf:ff:3f:
                    49:3e:17:4f:7a:c2:5b:6b:06:69:3c:89:42:02:ca:
                    40:ea:4e:c5:28:16:38:89:12:5d:b6:e9:2d:2e:5b:
                    93:20:0b:80:18:41:a7:79:fa:69:3d:81:c8:75:e3:
                    d4:d3:a9:f5:06:2f:ff:29:d5:99:f0:03:6e:5b:06:
                    9e:d1:69:94:cd:28:8e:0c:96:68:23:78:5a:db:1f:
                    14:23:88:bc:40:26:c8:9a:75:17:80:19:ca:64:9a:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:59:23:F2:4A:85:EE:3D:55:09:C5:16:9A:A5:04:31:E4:8F:0B:EA
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3a:a8:08:a9:2f:1a:95:94:cf:ee:d6:ea:17:62:ac:a0:2f:
         4a:13:4e:b0:82:9c:ed:b2:fd:e3:40:dc:43:13:96:15:20:6a:
         b8:56:6e:87:39:cf:63:12:35:45:29:fe:57:7e:e7:68:21:34:
         03:6f:47:81:ec:6c:53:cb:b1:88:c5:ce:43:3d:f0:c6:0b:cc:
         95:35:39:00:ce:1d:7b:02:ab:6b:5b:00:2c:48:7f:c1:dd:ef:
         ca:1b:44:64:92:86:41:55:c0:0d:58:01:84:8d:e7:6c:ca:7c:
         91:18:7c:b7:7b:c8:a5:65:b7:c5:c0:1c:b3:de:60:0b:e2:70:
         39:ce:b6:40:eb:e3:d9:3d:68:40:f6:31:eb:e0:85:d8:bf:51:
         ff:18:fa:ea:4e:4d:e5:d9:a6:62:f7:a3:10:29:f0:b3:7e:34:
         23:54:f6:a0:32:fd:d5:73:7c:01:ae:ec:23:ac:59:b9:6e:2b:
         ae:87:76:90:fe:a1:20:63:a9:d6:dc:40:a0:5b:32:6a:22:59:
         ac:07:2f:1b:99:14:d8:02:c0:2f:be:b8:e0:bb:c8:43:28:38:
         0d:3b:9d:c6:b4:98:59:51:f0:f8:76:c2:60:26:31:61:66:ad:
         ea:61:69:28:e7:f4:99:1d:35:1c:20:00:fd:6d:cb:4d:64:86:
         2f:c2:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:10 2026 by rpki-client