Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
File:                     BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json)
Hash identifier:          Gtm32fQ+d1gxPIPJSiaZHlV+8Z/nZzt20ql5fV4FBCk=
Subject key identifier:   AB:42:D7:33:35:E1:4B:46:99:52:3D:48:67:4F:51:ED:AF:47:70:7C
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       093A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
Manifest number:          0923
Signing time:             Sat 04 Apr 2026 20:02:51 +0000
Manifest this update:     Sat 04 Apr 2026 20:02:51 +0000
Manifest next update:     Sat 11 Apr 2026 20:02:51 +0000
Files and hashes:         1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: l3ORgQ3nNCJNUjO572lA2Twn6Et2RN13AiZF5tt/bWg=)
                          2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: Z2m4Jsc7KJXnL8YM7ejb01wiUtzIb3zTkmv5GoyJMzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2362 (0x93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Apr  4 20:02:51 2026 GMT
            Not After : Apr 11 20:02:51 2026 GMT
        Subject: CN=69d16e6b-6228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:a5:6d:a3:e8:8b:c7:b5:09:10:7d:29:44:
                    51:a6:b2:52:fc:8a:34:1e:79:6c:46:8e:62:2b:2f:
                    ed:5a:1f:f8:44:d0:6a:19:67:11:fa:55:7c:68:6a:
                    00:db:4b:fd:c8:59:d6:60:6e:6f:77:70:9e:3c:96:
                    4a:93:4c:b8:5a:c7:c0:78:65:3c:e7:12:12:b4:08:
                    83:40:51:88:b1:de:84:e0:78:48:92:0b:ad:5a:ac:
                    83:cd:ec:8f:0e:c6:83:e0:03:b0:9f:81:11:73:29:
                    eb:eb:fc:d9:3c:3d:fb:63:fe:79:a9:76:24:c0:6c:
                    f8:a9:34:99:b3:1c:16:3c:25:38:5c:d2:f6:2e:48:
                    fe:07:73:c2:fc:a5:f6:e1:bf:60:a0:d6:95:d3:86:
                    e7:d2:5d:7a:f4:1a:29:6f:a8:da:4e:ba:b2:c1:82:
                    c3:07:0b:76:16:d2:6e:46:d3:e6:1d:35:24:7e:96:
                    42:35:a6:55:a6:f8:4d:d4:38:0f:11:b5:08:d5:36:
                    84:c9:e8:b3:55:c8:bf:db:84:a6:d2:d5:4b:bf:f7:
                    37:41:bb:30:fc:ef:b8:bd:75:37:83:43:8c:65:24:
                    b1:a6:94:97:c9:67:d7:30:68:88:f3:d0:53:dc:5c:
                    41:8a:4c:ff:0c:01:7a:2c:80:ca:33:86:7e:e9:c4:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:D7:33:35:E1:4B:46:99:52:3D:48:67:4F:51:ED:AF:47:70:7C
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:84:06:4c:d4:4d:7f:f2:f4:9f:39:4b:f0:82:72:44:0c:
         4b:1d:dc:7a:0b:99:3d:d5:e9:48:e8:52:ef:26:79:9b:85:c6:
         d8:88:cf:5a:10:e9:80:4a:97:63:a9:7c:39:9a:a3:17:d6:c2:
         09:f1:a4:b1:c4:13:1a:1a:56:c3:a1:f2:21:cf:5d:84:48:08:
         d4:44:f9:0f:c5:29:d9:0f:bd:51:c2:c8:95:01:31:ac:ef:b8:
         8a:45:aa:50:99:8e:7d:a9:a5:81:8d:9b:0d:34:14:f6:51:84:
         41:6d:21:37:d9:f4:a0:6f:15:cd:89:23:ac:8c:79:8b:f8:cd:
         a8:07:cc:ca:d2:87:e6:37:c9:c7:02:92:08:15:3f:30:99:fd:
         78:ee:94:cf:b7:43:9a:fb:91:2a:bb:f8:d5:28:57:d7:79:2b:
         b2:28:2a:3d:b5:e6:a8:1a:8c:51:71:6b:5c:0b:44:f3:35:2a:
         57:5b:8c:9b:cf:12:65:92:4d:47:00:bf:6a:51:cc:07:bb:f6:
         e0:2d:7c:cb:8f:de:fd:59:fd:62:79:5f:61:c8:32:c4:12:1c:
         dc:d3:37:d0:c6:12:8a:78:ff:bd:46:66:56:38:fa:4c:08:d6:
         58:a6:f7:0b:1c:c5:4f:f9:28:b1:05:3e:52:09:bc:f0:d0:59:
         16:5a:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:35:31 2026 by rpki-client