Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          UIiihvoipm3tuoLVQITk9NfvpZhdQNph3IJbL7gLmN4=
Subject key identifier:   EA:D7:A8:C9:7E:4B:C3:BA:82:B8:34:AD:F6:64:9A:44:AB:68:E4:DB
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          72
Signing time:             Wed 29 Apr 2026 08:39:43 +0000
Manifest this update:     Wed 29 Apr 2026 08:39:42 +0000
Manifest next update:     Wed 06 May 2026 08:39:42 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: lmodYhecFCe7i7hb3TbCA2XtCNfmg2Of7fYhW19/b9I=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 08:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Apr 29 08:39:42 2026 GMT
            Not After : May  6 08:39:42 2026 GMT
        Subject: CN=69f1c3ce-ed9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:b2:50:d4:26:94:04:f6:9c:ac:3b:19:eb:
                    f1:8f:fb:0e:8e:d6:bc:42:f0:1e:88:d0:50:7b:b9:
                    51:8a:2c:76:cf:51:6a:e1:df:76:c1:50:df:6b:20:
                    9c:33:83:a0:56:66:3b:b7:3d:7a:73:15:14:a5:ca:
                    98:92:c0:0a:ad:a6:3b:0c:f0:71:bf:33:00:63:28:
                    74:47:23:5e:8d:6a:1a:16:2e:4d:9b:53:ca:43:fa:
                    96:39:a3:5c:fe:65:e8:bb:3b:0d:6f:9e:af:04:cf:
                    58:0f:65:b4:71:5c:23:e9:81:bf:eb:13:0d:b1:6a:
                    ae:77:8d:5f:c2:08:c7:d4:de:dd:7e:2a:4e:f5:55:
                    f7:ff:06:53:d1:84:16:26:16:bf:2d:40:3a:d5:54:
                    b1:ae:1b:a6:82:7d:5e:ed:06:de:bf:a0:48:90:35:
                    8f:1a:ac:33:92:f1:06:f6:e9:95:98:ee:21:4f:c9:
                    7b:0c:d6:ba:10:6c:5d:ce:bd:5e:8b:04:f5:4a:76:
                    38:9a:fe:82:9a:58:0b:2f:75:7b:61:60:4d:95:55:
                    6a:50:ab:75:9f:27:3c:f6:89:5c:6b:1a:f4:83:2d:
                    e2:41:20:21:68:e8:e9:97:f9:38:8b:3a:34:07:a2:
                    88:2b:00:94:11:81:cb:a6:bc:bf:0c:b5:01:d5:41:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:A8:C9:7E:4B:C3:BA:82:B8:34:AD:F6:64:9A:44:AB:68:E4:DB
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:21:b8:03:4e:5e:ea:81:e6:91:69:c7:1d:fe:af:18:c6:
         ad:2b:bc:4d:f3:bb:c9:49:91:3a:4f:40:f3:9e:8a:ff:11:83:
         aa:b2:67:36:73:76:fb:29:8f:0b:77:bb:13:74:91:ef:cb:ce:
         4a:f2:ea:a0:ac:04:34:e2:c5:9a:61:76:67:76:01:9e:dd:63:
         55:45:c0:bd:d9:f2:9b:ce:42:b8:3c:fc:90:e8:44:53:29:30:
         6c:3e:f1:47:1d:df:a8:7c:35:1a:4d:77:c2:47:93:23:e3:aa:
         a9:dd:1b:7b:f0:0a:f0:6e:88:d2:8a:ec:b5:0e:62:71:9e:c3:
         a4:2c:6e:20:e2:8a:f4:3e:94:fc:37:10:22:2c:be:d5:f9:1b:
         c4:4b:a9:b9:ca:fc:3a:37:d9:bf:c1:ad:ec:3a:12:91:e4:1e:
         a1:60:7f:0d:e8:48:29:2b:78:35:c0:46:05:6f:1c:69:a4:5d:
         9c:e0:1c:30:39:37:4c:1a:68:5e:c0:00:ab:4a:f5:c8:40:8e:
         a3:f3:a2:a5:89:12:b8:bd:24:fa:4e:3b:23:aa:33:eb:50:ef:
         a3:23:c3:88:79:ab:4c:77:41:2d:c1:fb:2d:25:81:45:00:fe:
         19:60:82:63:5e:61:83:b7:46:e4:3d:ad:ba:5a:92:ea:5b:62:
         e2:69:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 16:58:10 2026 by rpki-client