Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
File:                     BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json)
Hash identifier:          9pohDktspoV9BsphmcgSvDlbX08u1SYWNurrNrHPoL0=
Subject key identifier:   48:55:4D:F9:BD:DE:24:02:8F:6D:B4:50:04:5A:2C:FF:25:94:AF:26
Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31
Certificate issuer:       /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
Certificate serial:       08A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
Manifest number:          0892
Signing time:             Sat 20 Jun 2026 20:34:14 +0000
Manifest this update:     Sat 20 Jun 2026 20:34:14 +0000
Manifest next update:     Sat 27 Jun 2026 20:34:14 +0000
Files and hashes:         1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: EPcMe4Eo9IyRYUGm0HFZYz3w7GmgeMBHPowMQ6Vcm4s=)
                          2: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: NOqEaP7U/yGr1eMLYAeMdC9Ec160B/2VK+AAEC/VD28=)
                          3: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: aKo7kU9VzRLVHM7TZXIM7HCq0FFfzX8NtTNUa7Z5tOk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl
                          rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Jun 2026 20:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2214 (0x8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731
        Validity
            Not Before: Jun 20 20:34:14 2026 GMT
            Not After : Jun 27 20:34:14 2026 GMT
        Subject: CN=6a36f946-e1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:97:76:2a:82:b8:7e:7e:5c:21:75:a2:e9:
                    f5:16:ec:a3:04:b6:c7:ad:39:2a:82:2e:e7:d3:b7:
                    e2:66:0a:f9:93:ce:9e:61:26:96:5c:7c:cc:89:93:
                    92:56:6a:a4:e7:39:34:c0:db:2c:5d:c3:bf:20:40:
                    97:eb:d3:61:ad:e2:fb:38:49:41:ba:69:6b:89:48:
                    11:a5:cc:36:ce:a1:98:d9:90:d6:8b:f4:73:ee:8d:
                    d3:c8:b9:96:6e:a6:35:65:bb:65:39:91:2b:6e:9d:
                    ff:cd:49:df:ef:4f:7d:18:18:d5:91:f2:46:7d:f8:
                    e1:cb:95:a0:96:86:c1:ce:31:0e:bd:92:e1:76:22:
                    63:c7:c7:7c:78:34:fd:0a:da:cf:2f:ad:60:8f:32:
                    52:16:97:35:05:8a:3e:87:e9:41:23:ab:0a:6a:e2:
                    df:3d:63:85:7b:2f:f2:3c:f1:88:34:d2:20:58:3c:
                    d6:6c:01:09:ee:1d:d1:4f:56:36:cf:1d:fb:ea:93:
                    b5:f1:68:8a:55:dd:45:89:f7:13:f5:06:f8:09:4a:
                    6c:35:23:42:ae:19:f3:4d:69:20:ba:36:6f:d5:18:
                    1c:98:fa:83:d8:d9:cd:d4:01:4e:15:e7:fa:5e:d8:
                    6c:cf:81:e6:dc:03:95:f8:06:18:a7:11:b5:7d:79:
                    31:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:55:4D:F9:BD:DE:24:02:8F:6D:B4:50:04:5A:2C:FF:25:94:AF:26
            X509v3 Authority Key Identifier:
                keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:dc:4b:b9:6b:0b:9d:85:6f:9c:02:f9:e4:d3:58:05:e9:
         81:01:60:42:cc:c7:64:6a:53:b7:7e:be:fe:32:95:2f:17:7e:
         a6:3e:a4:c6:f1:32:40:9e:77:55:d1:71:f1:ed:03:d9:6a:d9:
         28:d7:6a:2f:7d:d7:90:4b:4f:a1:8d:9e:30:30:4d:c8:01:ec:
         99:6d:49:df:98:8b:4d:7a:1f:84:e1:0e:04:12:f8:3c:27:0b:
         0e:ab:4a:3d:4a:8b:6b:01:b6:34:8d:cf:06:4b:87:11:35:c5:
         a4:50:76:e4:3d:e6:47:51:40:3d:1b:1a:3e:17:07:ca:3c:a3:
         7b:06:b6:47:9d:5c:f8:08:96:f8:f9:1e:60:62:ab:02:d4:e6:
         45:d0:c2:63:9f:52:c3:da:f9:5b:6c:ae:d7:ce:18:4f:04:2c:
         93:3e:74:f7:8d:27:e0:6d:23:15:da:59:21:bf:71:b5:c1:06:
         39:24:61:2a:5b:75:5e:d9:0f:a1:eb:56:4a:97:c8:88:36:02:
         25:07:49:07:87:93:1e:d2:b1:2f:cc:8b:85:cb:c7:14:da:f1:
         17:c0:57:bc:e7:a1:de:17:9b:8a:ec:57:9e:a6:63:28:c5:10:
         93:ff:35:93:78:4e:f5:8e:f0:e2:1d:a5:3a:00:c5:f5:85:ce:
         a2:a8:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 17:10:01 2026 by rpki-client