Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
File:                     BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json)
Hash identifier:          0stj8mG+OnkAKVRGahWoVIqyweSIcHBI4o9kRI7fWVs=
Subject key identifier:   D5:D3:49:32:80:C8:F9:85:08:60:D8:D1:0D:BB:BB:44:34:24:9E:03
Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A
Certificate issuer:       /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
Certificate serial:       1DD8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
Manifest number:          1DB9
Signing time:             Fri 24 Jul 2026 01:31:05 +0000
Manifest this update:     Fri 24 Jul 2026 01:31:04 +0000
Manifest next update:     Fri 31 Jul 2026 01:31:04 +0000
Files and hashes:         1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: woM+AS2ASvBnHFGkzMQmMVGY0EAGGJMaxToBB0T8/Fs=)
                          2: 4CBDBA5E3F0011F18130B663C8833773.roa (hash: MYIZdYIrRMX8GOTnK8Yq+Fr2Q47kM6T/tbwrjmOwZ2A=)
                          3: 52F3327C86FF11F194514C90ABEE528E.roa (hash: 1w8W/4m7mLE7LxDR59hH2lCRVs2OIycHF+NjBW+Eagc=)
                          4: 6C2E2E523E6311F18F888BA6CC833773.roa (hash: in8CGxxlDGfml/aUO9WdoJzjfkkSWplEb1DnwBMfsmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl
                          rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 01:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7640 (0x1dd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A
        Validity
            Not Before: Jul 24 01:31:04 2026 GMT
            Not After : Jul 31 01:31:04 2026 GMT
        Subject: CN=6a62c059-d036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:36:46:4f:c8:d0:7e:47:41:b8:b7:f0:34:
                    e7:60:bf:3b:24:81:5f:e0:ea:1d:f0:14:64:6b:e2:
                    9f:2f:cd:f1:65:79:b1:69:71:9d:de:fd:c8:de:dc:
                    62:89:c8:7d:6d:0a:4a:3a:b9:76:7f:01:f6:a4:86:
                    f4:bb:47:e8:eb:91:43:e0:24:5b:59:5d:94:5c:cf:
                    f7:07:95:70:0b:01:db:44:42:5b:4d:eb:56:1a:21:
                    be:8f:79:3c:7e:c8:ac:c4:3d:09:d6:05:c3:ff:98:
                    60:7d:df:54:40:a0:ba:67:62:93:22:52:80:8a:f6:
                    83:69:05:87:41:9f:8c:4b:fc:6a:81:6a:3d:f7:aa:
                    c8:cb:a2:4f:04:6c:42:b0:56:ac:2c:3a:31:4e:b6:
                    82:59:0c:3a:08:ed:bf:43:6f:8b:00:cc:e8:c6:5c:
                    d1:8d:3e:23:8c:86:48:71:29:67:bc:50:a2:f2:7c:
                    cc:40:50:91:35:8d:a0:a5:42:54:9f:85:90:fd:89:
                    7c:98:a9:f1:ab:92:80:34:1e:64:0f:60:35:74:f6:
                    63:27:78:d9:36:b6:74:bc:0a:44:be:de:ae:50:f0:
                    b7:57:82:4f:8d:07:7b:39:2f:2f:c6:62:68:7f:73:
                    e5:06:0e:69:40:f7:61:62:2b:24:f9:dd:8b:e1:10:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:49:32:80:C8:F9:85:08:60:D8:D1:0D:BB:BB:44:34:24:9E:03
            X509v3 Authority Key Identifier:
                keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f4:83:18:52:11:18:da:8c:3c:32:b7:bc:26:fe:f1:01:01:
         55:ae:79:73:38:58:61:a5:bf:ee:e6:b2:0d:c7:a4:c1:78:e7:
         c6:32:d2:88:1a:2a:e8:b7:6b:89:62:d4:93:94:2f:37:4c:e3:
         45:27:6d:8f:06:f7:17:73:8a:8c:3e:a5:6f:c5:58:f8:7a:c2:
         ce:e0:62:00:d2:38:ed:d9:2b:d1:ec:ba:a5:45:11:9a:3d:82:
         18:bd:c1:a1:16:f0:76:ca:3a:b2:3b:d4:3c:1f:93:86:7b:3a:
         d4:a3:16:9a:2f:85:11:af:bd:24:52:3b:21:13:4d:8b:04:cb:
         fd:4e:22:b8:cb:f5:fc:cb:e5:40:65:61:b3:75:e3:58:4f:b0:
         55:ee:40:40:ba:ce:ba:2c:8b:41:a9:67:d9:02:6c:47:ed:bd:
         a4:33:ea:b3:7b:50:c3:23:65:6c:6f:c9:4e:77:40:24:90:a5:
         0e:75:68:0b:a7:92:8d:ed:1c:47:42:86:5d:d3:d7:f1:f1:f3:
         75:98:c2:56:e8:68:9e:71:bd:51:31:93:33:5f:d3:75:46:37:
         36:3c:34:e3:e4:e4:c5:de:e7:0f:bd:d9:cc:70:6a:8d:02:ee:
         73:67:e1:c1:3d:e8:53:7e:b8:46:96:84:6b:2a:db:fa:86:4d:
         18:22:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:42:12 2026 by rpki-client