Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
File:                     9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json)
Hash identifier:          /uif10f7G6FTWDIBL5DgmkMU13xSVZuPcYQQ7sbnf1A=
Subject key identifier:   28:BC:BB:40:73:1D:0C:19:68:8C:B1:38:F0:6C:A5:CC:82:18:F8:93
Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Certificate issuer:       /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Certificate serial:       0176
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
Manifest number:          0171
Signing time:             Thu 21 May 2026 04:46:24 +0000
Manifest this update:     Thu 21 May 2026 04:46:23 +0000
Manifest next update:     Thu 28 May 2026 04:46:23 +0000
Files and hashes:         1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: hAY67qtI3LYbSI4reBYm4Idu2Fbwvu44MT1rZOt7Xzo=)
                          2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: eZb19K4Y/DQ/sNU4ZXv4s8zJTek1JXBNOEh4fBR+KDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
        Validity
            Not Before: May 21 04:46:23 2026 GMT
            Not After : May 28 04:46:23 2026 GMT
        Subject: CN=6a0e8e20-fc20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:3e:4a:71:10:9b:16:06:bb:4b:68:ca:fe:
                    2c:ee:be:48:20:f6:24:2c:9c:79:b5:8b:f9:22:4d:
                    40:b6:6f:7e:60:e9:42:c8:9d:b4:7e:78:4c:0e:90:
                    58:24:e8:d3:c5:82:d9:7a:1a:e7:6a:c1:43:c5:72:
                    80:29:7d:fc:02:2d:b1:cd:65:c7:28:d8:db:37:04:
                    ce:b3:ce:e1:48:93:49:55:ac:03:cd:7e:38:2d:e5:
                    be:71:d1:b4:a3:a9:86:36:40:5e:39:00:70:9d:38:
                    6d:3f:30:26:bc:85:c7:f5:df:01:c3:04:99:73:a1:
                    b3:f2:d6:04:bd:bd:de:63:2b:8d:b6:f2:97:34:d6:
                    8e:86:97:48:6e:83:b3:c0:d3:4b:7e:38:4f:99:9f:
                    f4:e7:2c:92:6f:ba:d6:99:b6:04:e6:9f:73:5f:d0:
                    a7:32:58:06:c9:d7:eb:97:0b:33:6f:dc:79:22:f2:
                    c5:72:ca:3b:28:23:df:5f:97:98:94:ef:e2:57:43:
                    8b:e0:73:14:2a:46:0e:0c:61:b4:23:b0:14:cf:e4:
                    09:03:05:af:23:77:80:93:90:d6:8d:91:a5:c8:c5:
                    59:e2:db:84:d8:e5:3b:1f:87:c9:73:34:bd:d6:22:
                    07:8c:18:f7:5b:56:28:1f:aa:43:08:86:4e:31:fa:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:BB:40:73:1D:0C:19:68:8C:B1:38:F0:6C:A5:CC:82:18:F8:93
            X509v3 Authority Key Identifier:
                keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:8d:0c:6f:ea:2f:83:00:4c:52:f0:4a:c5:14:42:1f:56:
         f0:83:83:b7:3e:f9:3a:1c:4b:58:11:64:37:2f:d5:e6:9e:8b:
         47:44:2b:a4:9e:c3:6c:cc:6c:81:1a:e7:37:4e:3c:b6:d6:e1:
         f4:07:79:e7:83:9e:ae:cc:b1:2d:a9:24:10:b4:24:86:06:9c:
         f2:69:3c:b0:ec:75:00:78:84:d9:cf:03:68:57:11:a1:a9:c7:
         1c:55:a1:15:0a:9c:7d:1a:0b:4a:24:34:88:ca:3a:62:28:88:
         a4:f3:6f:13:f1:62:55:b9:f0:ef:26:f1:9e:78:5d:56:0b:8b:
         38:ac:de:3e:53:5a:e0:27:67:a8:a6:43:d9:fd:fd:32:6d:44:
         fe:cc:9d:02:32:13:cc:d9:c7:1a:a6:2f:87:5d:89:02:71:93:
         5e:fe:44:12:be:25:3f:99:22:47:67:36:47:65:b1:0a:4f:32:
         81:de:c2:8e:3c:15:f3:3e:5f:6b:96:88:1e:c7:05:f3:20:1b:
         5e:64:7c:04:36:23:b6:1a:33:53:8d:ed:a2:06:c4:63:0e:03:
         89:94:d4:f7:11:71:da:23:4f:ca:18:82:99:4b:3b:da:64:a0:
         a3:64:43:46:47:6c:b2:3c:00:a1:26:9e:9c:04:7f:29:6f:c9:
         ca:c0:66:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx
QTU4MUNDNjMwHhcNMjYwNTIxMDQ0NjIzWhcNMjYwNTI4MDQ0NjIzWjAYMRYwFAYD
VQQDEw02YTBlOGUyMC1mYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq6M+SnEQmxYGu0toyv4s7r5IIPYkLJx5tYv5Ik1Atm9+YOlCyJ20fnhMDpBY
JOjTxYLZehrnasFDxXKAKX38Ai2xzWXHKNjbNwTOs87hSJNJVawDzX44LeW+cdG0
o6mGNkBeOQBwnThtPzAmvIXH9d8BwwSZc6Gz8tYEvb3eYyuNtvKXNNaOhpdIboOz
wNNLfjhPmZ/05yySb7rWmbYE5p9zX9CnMlgGydfrlwszb9x5IvLFcso7KCPfX5eY
lO/iV0OL4HMUKkYODGG0I7AUz+QJAwWvI3eAk5DWjZGlyMVZ4tuE2OU7H4fJczS9
1iIHjBj3W1YoH6pDCIZOMfrclQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCi8u0Bz
HQwZaIyxOPBspcyCGPiTMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG
RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U
WDEtMW45V0ZjVlFhV0J6R00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfFuNDG/qL4MATFLwSsUUQh9W8IODtz75OhxLWBFkNy/V5p6LR0QrpJ7DbMxs
gRrnN048ttbh9Ad554OersyxLakkELQkhgac8mk8sOx1AHiE2c8DaFcRoanHHFWh
FQqcfRoLSiQ0iMo6YiiIpPNvE/FiVbnw7ybxnnhdVguLOKzePlNa4CdnqKZD2f39
Mm1E/sydAjITzNnHGqYvh12JAnGTXv5EEr4lP5kiR2c2R2WxCk8ygd7CjjwV8z5f
a5aIHscF8yAbXmR8BDYjthozU43togbEYw4DiZTU9xFx2iNPyhiCmUs72mSgo2RD
RkdssjwAoSaenAR/KW/JysBmow==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:41 2026 by rpki-client