Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
File:                     bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft (raw, json)
Hash identifier:          +j+PfnklrsiyHsMj31Mx8/roVHeGMo9QmKEM/aoWU54=
Subject key identifier:   97:6E:55:D3:3D:85:A5:FA:C6:AC:5F:7C:1B:55:AE:83:C9:A8:84:D2
Authority key identifier: 6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2
Certificate issuer:       /CN=A912781D/serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
Certificate serial:       95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
Manifest number:          95
Signing time:             Thu 23 Jul 2026 09:15:44 +0000
Manifest this update:     Thu 23 Jul 2026 09:15:44 +0000
Manifest next update:     Thu 30 Jul 2026 09:15:44 +0000
Files and hashes:         1: bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl (hash: QNS1YMvD5LJjOt5/rEKto406dE2hLf6kJLmj3vQWCmo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl
                          rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912781D, serialNumber=6C2297F82E218374941392652C9C8B3055C863A2
        Validity
            Not Before: Jul 23 09:15:44 2026 GMT
            Not After : Jul 30 09:15:44 2026 GMT
        Subject: CN=6a61dbc0-2d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:a6:86:a2:02:b6:bb:18:03:c4:0f:f0:75:
                    75:81:9d:ed:76:9c:82:ca:ad:68:f7:d4:71:7c:b8:
                    bd:76:8b:dc:0d:b5:14:ec:5c:9b:04:92:42:62:1b:
                    95:5b:6a:75:4d:95:e2:5a:9b:e1:f2:a9:62:0e:c1:
                    a7:25:dd:be:3e:0f:d0:35:ed:af:83:4a:1d:01:86:
                    d5:f0:17:c4:54:bd:de:df:29:e3:d8:11:99:dd:78:
                    3f:e4:6d:f6:72:8c:8b:2e:66:d5:6f:1f:61:3f:0a:
                    1d:5b:36:ef:f1:88:4f:73:ad:7f:97:7c:83:0f:f6:
                    39:26:91:62:e6:e1:93:2a:b5:db:59:c8:e6:73:3b:
                    3a:31:94:32:ba:a3:f7:a7:21:f9:33:e2:7e:75:be:
                    5b:10:19:b9:43:d5:f2:f1:9c:0d:2b:db:fe:f4:62:
                    25:1b:3f:8c:a7:31:76:0d:c9:93:cc:47:cf:a4:cb:
                    36:6a:9f:86:14:4a:6d:af:c0:38:dd:30:3c:79:b2:
                    e1:bf:1c:34:d9:ff:90:d8:16:1e:19:0c:c4:94:f9:
                    99:44:18:49:fc:32:39:20:1f:28:40:f1:ff:d9:90:
                    8f:02:a2:13:dc:38:36:6d:ab:1c:8f:64:9f:3e:a2:
                    6a:1f:f3:ee:c7:71:e9:a9:95:e6:07:7e:ab:56:66:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6E:55:D3:3D:85:A5:FA:C6:AC:5F:7C:1B:55:AE:83:C9:A8:84:D2
            X509v3 Authority Key Identifier:
                keyid:6C:22:97:F8:2E:21:83:74:94:13:92:65:2C:9C:8B:30:55:C8:63:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bCKX-C4hg3SUE5JlLJyLMFXIY6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912781D/2766763EA36411F0BD13673CC4F9AE02/bCKX-C4hg3SUE5JlLJyLMFXIY6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d2:6d:c6:a3:db:ef:d9:4d:ca:65:4e:e5:07:37:11:25:12:
         55:1c:06:92:d7:bc:6e:4a:a4:3f:96:2a:84:be:fc:7c:fc:c7:
         2e:29:bf:71:8a:21:10:1d:8b:ca:a4:34:79:3b:e1:3d:8c:ea:
         91:59:fd:06:8f:14:9c:75:81:e8:b9:ee:f3:65:2b:cc:3d:6c:
         43:f8:6b:c1:c4:6d:28:f6:9e:35:f9:ad:7e:6e:0b:8c:a8:7a:
         0e:3f:b7:ce:3c:44:86:dc:75:60:50:39:7b:70:88:0b:f2:10:
         17:bd:de:15:7e:ca:98:a0:7d:78:73:27:e4:bf:bb:70:5e:d7:
         de:74:5f:0d:58:14:a9:6d:d2:eb:87:d3:2b:bd:c4:e0:87:17:
         3b:54:fe:04:b7:5e:b8:3c:8d:a0:0b:13:29:ec:d0:d1:ab:c3:
         d2:81:3b:3a:5e:36:e5:53:10:b9:48:85:23:11:e3:27:df:4c:
         fe:03:e2:66:da:c7:6f:45:09:4a:cd:30:e2:b2:ef:74:ef:4b:
         68:81:a1:83:9c:1d:8e:ac:6a:18:74:0c:79:6c:b6:85:70:5a:
         1e:da:0d:b8:26:bb:18:dd:04:cc:3b:96:b8:0d:44:dc:81:47:
         91:4b:1f:f6:d8:d3:ba:a4:25:e3:30:61:1f:12:22:d1:e7:8f:
         7e:8d:48:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:00 2026 by rpki-client