Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
File:                     9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json)
Hash identifier:          AydL15HqT/xNkxtFDrPUJlVr9TsbNyAcSjyQ/AF4ADo=
Subject key identifier:   BD:40:25:09:3F:B3:95:88:61:89:69:77:39:4B:12:3C:2D:C3:55:4E
Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2
Certificate issuer:       /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
Certificate serial:       0212
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
Manifest number:          0212
Signing time:             Tue 02 Jun 2026 15:46:16 +0000
Manifest this update:     Tue 02 Jun 2026 15:46:16 +0000
Manifest next update:     Tue 09 Jun 2026 15:46:16 +0000
Files and hashes:         1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: tvcpJn/WLuElsSIvUJZ7kdgJcu7twsbThCdXnaIToLY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2
        Validity
            Not Before: Jun  2 15:46:16 2026 GMT
            Not After : Jun  9 15:46:16 2026 GMT
        Subject: CN=6a1efac8-ee68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:05:8d:41:14:da:56:40:2a:6e:5f:c4:4a:
                    05:eb:ef:89:98:af:98:ba:5b:8c:6a:b9:55:a1:e4:
                    a3:60:3c:5f:45:ca:a4:f9:4f:a5:a6:05:39:ca:e9:
                    e5:f1:41:40:5e:72:9f:37:10:1f:2c:06:6f:73:37:
                    ac:6d:bd:b0:57:de:93:70:9f:d5:1c:6a:94:63:09:
                    6a:53:6a:2c:97:a7:ef:26:c9:e4:bf:4a:89:10:c4:
                    b7:3c:eb:63:ae:9f:6d:e5:89:42:0c:44:1a:6f:63:
                    be:96:b3:c9:8f:bb:8e:71:6c:1c:03:27:ae:ce:e9:
                    88:cc:00:8a:35:8a:e1:b5:eb:bd:0b:5d:e0:1c:eb:
                    c8:59:6b:80:dd:52:b6:77:16:7e:09:ae:d9:83:5a:
                    52:3d:61:2a:38:0c:5e:da:9a:3a:58:2b:7d:cc:b8:
                    0d:ec:8f:7e:d2:a2:a7:bb:3b:7d:79:6a:2d:20:a1:
                    3b:41:77:7a:7e:a8:61:40:db:bf:b9:c1:28:38:d0:
                    01:87:c6:a1:aa:8d:97:1c:3c:80:c7:c7:2f:29:fe:
                    24:da:56:5a:70:4d:d2:87:b9:94:89:5e:75:bc:09:
                    fa:dc:b7:39:e6:cc:1e:6d:08:24:0b:73:d7:5d:25:
                    58:54:21:92:a4:90:ed:59:ef:af:b7:f3:8a:4c:99:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:25:09:3F:B3:95:88:61:89:69:77:39:4B:12:3C:2D:C3:55:4E
            X509v3 Authority Key Identifier:
                keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:aa:46:50:e2:18:22:32:77:1a:bd:e4:1c:40:76:4f:d4:
         31:71:0d:17:43:9b:0c:c7:4e:fe:0a:19:37:d3:f1:8f:5f:ae:
         83:bd:1b:19:4f:7e:ca:7c:04:d3:1c:c1:f9:ef:5d:b2:af:62:
         1c:d6:00:d3:ed:ac:a5:a6:3e:a9:0f:47:1c:77:ad:34:57:86:
         e6:80:f9:f5:e5:29:e5:b8:d2:0d:bf:5d:8e:7a:da:b7:53:5d:
         0c:68:98:ce:42:07:3d:e1:f0:ce:46:9c:0f:9a:35:fb:5f:18:
         f0:c3:8e:b4:7b:fa:91:e2:6e:1d:b4:ea:5a:49:c9:47:d9:76:
         81:78:d9:77:1c:0b:a2:7d:d0:ed:f7:d9:2e:2c:2e:12:f0:b8:
         ec:1d:0d:3b:7a:b6:59:79:ba:ae:ff:f9:34:06:77:98:76:ad:
         2c:07:61:82:75:41:a6:f8:c3:53:c1:55:41:62:f6:06:45:90:
         5a:1e:dd:d7:da:b6:82:bd:95:73:2d:26:0e:1b:77:11:ec:3a:
         38:3c:5e:9b:f6:7d:3a:66:97:09:77:8c:87:db:b4:a0:b9:fb:
         72:76:49:84:2c:2b:27:16:73:d3:8f:25:00:31:3d:7e:63:9f:
         bc:67:10:5f:5b:fe:a4:a1:52:f6:93:e4:fd:ef:fd:6b:72:90:
         71:4b:97:54
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF
QzMyMEJDRTIwHhcNMjYwNjAyMTU0NjE2WhcNMjYwNjA5MTU0NjE2WjAYMRYwFAYD
VQQDEw02YTFlZmFjOC1lZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3p4FjUEU2lZAKm5fxEoF6++JmK+YuluMarlVoeSjYDxfRcqk+U+lpgU5yunl
8UFAXnKfNxAfLAZvczesbb2wV96TcJ/VHGqUYwlqU2osl6fvJsnkv0qJEMS3POtj
rp9t5YlCDEQab2O+lrPJj7uOcWwcAyeuzumIzACKNYrhteu9C13gHOvIWWuA3VK2
dxZ+Ca7Zg1pSPWEqOAxe2po6WCt9zLgN7I9+0qKnuzt9eWotIKE7QXd6fqhhQNu/
ucEoONABh8ahqo2XHDyAx8cvKf4k2lZacE3Sh7mUiV51vAn63Lc55swebQgkC3PX
XSVYVCGSpJDtWe+vt/OKTJkt6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL1AJQk/
s5WIYYlpdzlLEjwtw1VOMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw
QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji
cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhdCqRlDiGCIydxq95BxAdk/UMXENF0ObDMdO/goZN9Pxj1+ug70bGU9+ynwE
0xzB+e9dsq9iHNYA0+2spaY+qQ9HHHetNFeG5oD59eUp5bjSDb9djnrat1NdDGiY
zkIHPeHwzkacD5o1+18Y8MOOtHv6keJuHbTqWknJR9l2gXjZdxwLon3Q7ffZLiwu
EvC47B0NO3q2WXm6rv/5NAZ3mHatLAdhgnVBpvjDU8FVQWL2BkWQWh7d19q2gr2V
cy0mDht3Eew6ODxem/Z9OmaXCXeMh9u0oLn7cnZJhCwrJxZz048lADE9fmOfvGcQ
X1v+pKFS9pPk/e/9a3KQcUuXVA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:11 2026 by rpki-client