Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
File:                     bGZwF1JoMcwYJ1GN4StiH28_N4g.mft (raw, json)
Hash identifier:          r/kBsaNAQ4UouSGnPGyMkQFVqyU/oOy/vPI1uqV44IQ=
Subject key identifier:   99:9F:C3:01:AC:EC:CD:FA:D8:95:19:D8:B6:30:96:53:CA:6E:AA:D3
Authority key identifier: 6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88
Certificate issuer:       /CN=A9183704/serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
Certificate serial:       88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
Manifest number:          81
Signing time:             Sun 05 Apr 2026 07:05:32 +0000
Manifest this update:     Sun 05 Apr 2026 07:05:32 +0000
Manifest next update:     Sun 12 Apr 2026 07:05:32 +0000
Files and hashes:         1: bGZwF1JoMcwYJ1GN4StiH28_N4g.crl (hash: M8QdTwDHqdCXIMQY0620UWYjJFj0YseOSTRtxuy1OeA=)
                          2: 7ECD6624D8F411F0885FED3572D3641D.roa (hash: kEwnH7Od+kt8tebTEN6qNlYk79LWf5Il0l1R0uvP8ro=)
                          3: B25E5954768D11F091768048C4F9AE02.roa (hash: XBpapngz5dr5cXTfIZvo3z58b3+Y9S6acFpjx4E21A4=)
                          4: DC1B4E64768D11F0BC42C048C4F9AE02.roa (hash: dVCUtpZknoGOXbCPR2t9DsP1/pKxGj7UhMl3FB7miV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl
                          rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:05:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183704, serialNumber=6C667017526831CC1827518DE12B621F6F3F3788
        Validity
            Not Before: Apr  5 07:05:32 2026 GMT
            Not After : Apr 12 07:05:32 2026 GMT
        Subject: CN=69d209bc-c2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:b8:0a:bb:9b:1b:a1:24:48:51:5b:bc:0c:
                    78:c5:e7:17:22:a0:67:e7:b1:97:61:a1:9b:34:60:
                    31:d1:b3:8f:df:e0:d5:a7:9c:37:7f:dc:2d:cd:81:
                    cf:fe:9c:20:3a:c5:f7:02:5c:ab:ef:91:df:17:1c:
                    98:3e:00:82:51:9d:a1:ac:94:00:ea:a9:fe:67:0d:
                    96:9f:94:1a:e4:c8:a6:2d:60:8c:fa:c7:81:12:5e:
                    cc:11:25:b5:91:78:6a:cb:66:33:82:16:b7:ec:8e:
                    15:07:c5:3f:1f:58:ef:6f:75:30:7e:ba:d9:e3:84:
                    49:f7:51:85:29:5b:bb:3d:87:26:0c:e8:7d:09:d7:
                    d5:7a:e7:ef:f2:23:b4:a1:5c:db:bd:02:7b:69:7d:
                    d2:95:5e:bb:9d:10:6c:14:14:81:ba:e1:52:9b:05:
                    32:80:df:a3:00:8b:77:95:66:79:76:43:b3:ac:3b:
                    96:e0:5a:94:23:2a:09:b5:f7:3e:4c:6d:37:4f:c2:
                    82:8e:cf:c1:c5:d5:cd:10:7c:78:6b:61:b7:1c:cf:
                    13:e1:58:9d:1e:a6:9b:69:da:7c:02:47:9e:b7:25:
                    75:a9:ae:1c:04:56:79:38:7a:fa:75:fc:96:b7:63:
                    80:b2:5a:fe:b9:64:a7:5e:51:f2:8e:ea:f7:83:b4:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:C3:01:AC:EC:CD:FA:D8:95:19:D8:B6:30:96:53:CA:6E:AA:D3
            X509v3 Authority Key Identifier:
                keyid:6C:66:70:17:52:68:31:CC:18:27:51:8D:E1:2B:62:1F:6F:3F:37:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGZwF1JoMcwYJ1GN4StiH28_N4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183704/C5B47D72740C11F094E8D540C4F9AE02/bGZwF1JoMcwYJ1GN4StiH28_N4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:84:f8:61:73:8a:9e:c0:fb:f9:47:5c:c4:55:c2:b8:ac:
         f9:53:59:cc:b5:06:c9:15:54:e7:cf:ac:0c:3c:8a:95:be:86:
         e9:7d:31:8f:84:22:1d:8c:89:7e:f9:56:a9:98:ce:3b:c4:29:
         39:b8:c5:db:e0:8b:01:1a:8d:43:2a:e7:57:bd:45:2c:6a:b8:
         a7:1b:ab:49:e3:22:71:90:fd:8a:0d:0d:09:6f:d2:e3:8c:21:
         f2:98:1c:79:a5:a5:2b:08:52:78:5e:89:80:a6:68:90:d9:28:
         74:07:71:2a:91:14:ee:79:fd:5b:29:f5:a3:50:a7:3e:23:44:
         ee:d4:af:cc:f3:5b:45:93:da:37:5e:2e:46:31:96:6f:b2:5b:
         d9:57:47:e0:2f:d2:d7:8e:35:27:a3:99:14:7f:0a:1b:41:f7:
         f5:4b:ea:25:2f:3a:ba:62:3f:e0:b1:bf:06:28:52:0e:93:50:
         69:c3:ae:cd:73:6d:ff:2c:58:86:3a:5a:ea:92:7d:42:08:58:
         9e:2b:27:7b:6c:1a:c7:40:20:e9:5e:81:d0:8a:ed:21:c8:df:
         75:49:6a:bc:7a:23:5e:40:46:1a:12:cb:7e:3e:8f:85:15:a3:
         53:ea:7a:b3:58:91:6c:9c:63:3a:27:85:43:13:c0:06:f5:e8:
         e3:85:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:38 2026 by rpki-client