Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
File:                     Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json)
Hash identifier:          3e/OrVj8lFQYZM24Jwhz5HHrVSEeqvTibhunsJtQ8Hg=
Subject key identifier:   C6:FD:2C:75:91:31:8D:1E:F3:B0:62:6C:BE:25:48:71:4C:B4:22:FB
Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10
Certificate issuer:       /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
Certificate serial:       0557
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
Manifest number:          1ACC
Signing time:             Sun 26 Jul 2026 16:54:35 +0000
Manifest this update:     Sun 26 Jul 2026 16:54:35 +0000
Manifest next update:     Sun 02 Aug 2026 16:54:35 +0000
Files and hashes:         1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: HCSCv4H49M/syxvr+XoDWWc9dIHU0qCXGCJIUR9+T1s=)
                          2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 4w5731lHYfGZnO+SC8VdKGR/fvzbDEpA8YsPdrr+1XY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 16:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10
        Validity
            Not Before: Jul 26 16:54:35 2026 GMT
            Not After : Aug  2 16:54:35 2026 GMT
        Subject: CN=6a663bcb-a40e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:39:28:d9:5a:48:eb:9c:62:2e:ea:f9:9e:19:
                    a4:6b:22:3b:38:14:a1:f6:da:32:f1:03:81:fb:b8:
                    86:66:a1:e3:ba:db:25:61:77:c8:97:89:b6:ec:e4:
                    df:5f:b1:02:2e:3a:a0:ea:cc:ed:70:69:f2:88:3f:
                    39:19:d2:e8:c3:00:44:04:cb:bb:1d:a2:99:68:80:
                    3e:ea:5a:a7:26:b7:da:2c:a1:5a:a2:cb:1c:d7:04:
                    73:1a:45:5f:14:7a:fe:4d:83:d4:aa:ef:93:0e:4d:
                    bb:02:8e:c1:29:2d:bd:0f:a5:99:dc:be:d7:27:5d:
                    ab:8b:f9:57:9d:2b:e7:82:3e:79:31:47:52:c2:71:
                    c6:07:bf:f2:7d:57:69:67:da:61:6c:a8:61:f1:30:
                    a6:c9:05:45:35:25:4d:27:92:13:79:83:06:53:8c:
                    19:86:71:f3:f5:87:00:29:b6:ff:f6:e2:17:3b:66:
                    16:fb:64:31:15:bd:3a:a2:b4:ac:f1:2b:1e:d1:c0:
                    63:1d:4b:ee:43:7c:36:cf:3b:72:a6:67:6b:4a:15:
                    dc:5b:8a:22:ee:5d:59:63:95:7c:e4:bd:2c:f2:e4:
                    fa:fa:ae:0b:d1:c5:ef:d5:4f:ef:15:eb:57:7c:ce:
                    00:6a:62:57:21:4d:2b:fe:bb:4c:a7:ec:89:0b:14:
                    43:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:2C:75:91:31:8D:1E:F3:B0:62:6C:BE:25:48:71:4C:B4:22:FB
            X509v3 Authority Key Identifier:
                keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:64:77:12:d7:3c:cc:fe:fe:3a:8b:d0:82:27:16:e8:23:
         51:73:74:6a:b2:51:b9:23:51:f9:1b:7e:02:58:bc:e2:bd:ba:
         0e:17:0c:b4:ea:28:7f:f9:1e:85:2b:1d:0f:f6:b6:0a:a2:b6:
         f5:85:4d:aa:bc:47:7d:ce:09:d1:66:03:bd:65:0a:6c:71:39:
         82:3e:3b:24:bb:7c:01:ac:64:7c:44:b6:2b:c3:ac:2f:00:5f:
         42:00:5b:22:3c:a8:7e:73:08:bd:49:09:1e:b1:e9:4c:2a:07:
         ea:10:4a:6c:74:62:67:77:9e:c1:a4:df:14:e2:0e:7f:2d:2d:
         f7:69:c4:90:cc:9e:45:9e:53:c8:29:25:15:d2:a8:63:e3:ce:
         cc:41:9b:eb:fa:62:80:7e:61:44:5c:95:ba:4a:a5:77:3d:c4:
         63:be:48:fc:c0:68:26:0e:d3:c0:ec:e0:22:64:3c:4d:8e:17:
         c2:7d:b5:1f:90:d9:5b:09:8c:35:60:04:d7:bd:b7:8b:51:8e:
         81:b2:2f:cc:b9:91:84:ec:96:e7:15:f5:fc:2b:0b:69:c8:11:
         5c:35:1f:60:68:d6:84:38:e3:7d:68:73:26:41:76:49:47:d6:
         09:d6:98:93:68:8c:ba:18:a9:4e:b9:ff:c0:20:43:76:d1:f7:
         ec:89:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 03:22:35 2026 by rpki-client