Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
File:                     bhQyTH_rm8iZLUocPkWehqPxjuE.mft (raw, json)
Hash identifier:          snj8ufW+o1lZw2I3vrUJOZCLImx5Q/POLM4OuUH0MyA=
Subject key identifier:   3B:11:3D:41:98:87:45:F7:80:E6:3B:CA:50:1F:EE:BC:72:E1:12:05
Authority key identifier: 6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1
Certificate issuer:       /CN=A91CDC08/serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
Manifest number:          38
Signing time:             Fri 15 May 2026 08:44:03 +0000
Manifest this update:     Fri 15 May 2026 08:44:03 +0000
Manifest next update:     Fri 22 May 2026 08:44:03 +0000
Files and hashes:         1: bhQyTH_rm8iZLUocPkWehqPxjuE.crl (hash: 6t99O3SFUjWll3glm3ioYl5R7W0pym70c7JZNXowol0=)
                          2: 2508F7B8001611F18F2C9137416F56BC.roa (hash: kk4e8+otr3vEuo88eNfz1XFH7SDaG9Z2aCSEpZsnIgI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl
                          rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDC08, serialNumber=6E14324C7FEB9BC8992D4A1C3E459E86A3F18EE1
        Validity
            Not Before: May 15 08:44:03 2026 GMT
            Not After : May 22 08:44:03 2026 GMT
        Subject: CN=6a06dcd3-2cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:6a:ef:6f:72:ef:2f:d8:cd:5e:f9:22:1e:
                    c9:80:89:c4:19:c4:7a:a9:f7:6b:0b:02:ac:85:ba:
                    3d:ca:6a:97:91:31:35:0a:ca:41:f7:0b:a2:8a:50:
                    97:9c:a4:2a:cc:61:6f:01:89:90:45:ab:70:49:f8:
                    3a:6b:73:84:89:c0:bd:63:5d:69:b8:1c:f7:ca:e1:
                    d6:28:95:37:e7:bb:27:c8:db:1e:00:83:51:59:b9:
                    e4:0d:14:47:26:68:37:86:96:e8:f9:1b:7d:6b:d9:
                    88:02:47:73:87:42:c3:40:13:25:59:71:37:fb:f3:
                    de:e7:70:76:02:21:a0:a2:fb:10:0f:ac:4b:1c:ea:
                    bb:f4:f1:ef:9c:87:95:72:74:0c:61:32:0f:00:75:
                    aa:1c:1b:b7:71:92:03:40:b1:db:6c:bf:92:e4:60:
                    e4:67:93:6f:68:40:cc:80:d0:54:0c:55:72:10:0c:
                    11:4d:bc:a0:0b:5e:6c:fd:ce:3a:15:df:a6:04:2d:
                    1e:45:f5:5a:ef:01:4a:23:f7:bd:b1:8e:72:4f:89:
                    d5:cc:b6:25:f2:1b:eb:46:70:a6:16:4b:82:31:8a:
                    43:56:53:8d:d3:94:b8:8b:9f:65:e0:32:01:b9:8b:
                    14:59:f6:1d:0a:af:f3:5c:4d:dd:fc:cb:e5:7a:27:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:11:3D:41:98:87:45:F7:80:E6:3B:CA:50:1F:EE:BC:72:E1:12:05
            X509v3 Authority Key Identifier:
                keyid:6E:14:32:4C:7F:EB:9B:C8:99:2D:4A:1C:3E:45:9E:86:A3:F1:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bhQyTH_rm8iZLUocPkWehqPxjuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDC08/F3E657FC001511F195D58AD4406F56BC/bhQyTH_rm8iZLUocPkWehqPxjuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0c:c2:f1:6f:ef:06:3e:3a:39:d4:26:91:f5:91:fd:38:70:
         83:4e:ea:01:e5:ef:c3:2a:d1:5e:ea:54:d3:8e:bf:53:b6:94:
         83:25:ea:df:c7:2e:fc:ce:ea:e6:e2:73:8a:81:4c:30:d4:a7:
         ad:ab:96:cd:74:be:97:4d:2d:c1:57:51:a4:0c:ef:58:b1:a0:
         d2:68:e2:0e:0e:e4:a8:9e:4c:46:e4:e6:5d:54:a3:e7:fc:24:
         0e:43:98:0a:3c:c2:2e:95:cb:8a:d1:39:75:ef:c7:bd:d8:ae:
         0a:a8:3c:db:5e:92:60:4d:ac:55:ba:57:0f:5e:ac:4c:ea:cb:
         1b:2d:14:78:50:17:55:7e:91:c5:f5:4e:85:8d:43:86:cb:0b:
         e6:79:96:cc:bb:70:0e:93:2f:3f:63:ef:b1:0f:5c:5c:2a:c8:
         4c:aa:08:4d:45:5d:ac:61:ee:bd:8d:34:13:6a:37:6f:fd:1b:
         3a:76:e5:4a:e3:ac:d9:bc:25:84:1b:24:05:5c:6f:4f:bf:38:
         bf:a7:23:b0:55:60:3a:8b:26:a4:16:5e:79:6f:af:d8:83:07:
         6c:ab:a5:b4:77:b4:ed:7f:88:f6:66:0c:54:59:b2:0b:17:99:
         0a:e4:19:fa:9e:a3:65:ad:f2:42:37:aa:a4:41:bd:de:08:83:
         be:e3:a1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:33:25 2026 by rpki-client