Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
File:                     BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json)
Hash identifier:          uyvBUhyq/4CpgM6AHLYYC9RpuzERHfV4x9QXHR/f6LI=
Subject key identifier:   CD:73:63:CB:15:D8:A8:CC:0D:F8:79:B0:8B:2D:D5:52:A1:89:42:C6
Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C
Certificate issuer:       /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
Certificate serial:       1738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
Manifest number:          171C
Signing time:             Sat 04 Apr 2026 16:32:08 +0000
Manifest this update:     Sat 04 Apr 2026 16:32:07 +0000
Manifest next update:     Sat 11 Apr 2026 16:32:07 +0000
Files and hashes:         1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: UHPPwWFbt+eh3gJDD2OhNAThN1dkpeZzbeHdCv5YrLA=)
                          2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: CJNG/K8L9+DgV5sR3qhRIaI7DfSSiBEZ1i4T4JpMdyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5944 (0x1738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C
        Validity
            Not Before: Apr  4 16:32:07 2026 GMT
            Not After : Apr 11 16:32:07 2026 GMT
        Subject: CN=69d13d08-cad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:57:8e:22:78:60:35:0c:8d:e4:7d:bc:d8:
                    1a:45:02:7c:b5:45:a5:c1:30:f4:fc:48:ee:b4:b0:
                    f0:c6:7c:67:ac:31:53:37:86:62:d8:09:1a:44:1c:
                    cd:05:38:52:83:65:42:7d:54:61:38:85:12:8a:fc:
                    a1:cb:f2:b5:ac:e1:bb:73:3c:bf:38:12:56:da:3f:
                    60:ed:49:38:de:39:ca:68:34:9f:43:c8:b1:d2:50:
                    94:7c:d1:fe:21:3c:de:69:e2:ee:96:49:30:91:a5:
                    fe:ca:65:8a:12:96:9b:f2:b3:f7:46:de:01:50:5b:
                    2f:2e:af:7e:88:23:4d:49:fe:1f:bd:72:96:9f:9f:
                    11:42:d0:24:d4:e8:89:d2:ed:15:83:b8:3e:3f:ed:
                    cc:1b:fa:9f:c1:8c:5a:42:94:da:dc:14:0c:37:ca:
                    f2:aa:34:55:b4:61:16:87:34:e3:9a:a2:73:2d:4e:
                    d7:fd:f5:13:84:9a:f8:b6:50:1d:a2:dc:ea:3a:bf:
                    41:fa:de:f2:2c:43:e4:74:a4:31:37:ba:20:b6:aa:
                    64:5d:91:ad:7a:43:bb:a4:69:33:9f:01:1d:8a:94:
                    51:c9:f3:1f:87:67:5d:4c:00:a9:7c:15:48:9c:4b:
                    10:91:e5:00:38:b4:87:4e:3c:a6:58:d7:03:4b:78:
                    99:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:73:63:CB:15:D8:A8:CC:0D:F8:79:B0:8B:2D:D5:52:A1:89:42:C6
            X509v3 Authority Key Identifier:
                keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:f5:8e:7b:c8:57:cc:95:b9:f4:f2:24:8a:fc:79:60:6d:
         97:d2:bd:b2:85:61:3b:17:14:77:b4:99:d3:33:f5:3d:bb:46:
         9f:47:c0:1b:28:26:9c:20:de:26:8f:c1:71:52:46:3c:a1:a2:
         b5:c6:f4:1e:19:1b:da:1b:39:c1:31:35:77:a7:e3:79:e8:76:
         7b:f9:61:24:54:21:be:39:10:f2:7c:61:df:da:0e:46:0e:a5:
         aa:08:65:1b:cd:b2:23:1a:33:57:e4:e1:88:46:41:f3:87:8e:
         71:13:57:2d:a3:ec:4e:0b:60:7b:a3:8b:50:a7:05:1a:45:c6:
         6d:08:20:c3:b3:53:e8:44:79:b9:ab:f6:06:65:47:25:07:ee:
         49:f0:d9:f4:c8:52:80:ef:76:80:1d:e7:2f:90:b0:bb:28:cd:
         de:2b:a4:a2:40:9c:97:b8:f2:81:71:4e:ac:b7:a7:3b:4a:41:
         00:25:b6:da:6c:7a:35:38:f5:cc:1e:3b:2d:10:e9:00:43:64:
         c7:82:16:dc:aa:0c:54:45:1b:20:83:90:9a:33:66:f8:6c:47:
         d0:73:d8:8a:f7:66:29:55:43:e4:82:33:17:d3:2f:8a:14:de:
         d0:dd:15:25:f9:77:b8:37:43:f3:d8:7a:4d:c5:3d:f6:2c:3f:
         27:2a:e3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:13:55 2026 by rpki-client