Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
File:                     BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json)
Hash identifier:          5CV0osP1u9poeszVDZBFneLd30K7MBumB2kAyBf1AAY=
Subject key identifier:   1D:BD:E1:D3:9F:59:BB:D2:69:B6:18:8D:DD:74:43:BB:16:BA:4A:CA
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Certificate issuer:       /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
Manifest number:          02A6
Signing time:             Thu 23 Jul 2026 02:41:12 +0000
Manifest this update:     Thu 23 Jul 2026 02:41:11 +0000
Manifest next update:     Thu 30 Jul 2026 02:41:11 +0000
Files and hashes:         1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: cvAydrx3bAI+AELpUTvk7/9r7EXj3c5R0XUULCC59Ig=)
                          2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: WN4BlerUnjkJI10IF9VqKFEGkz0wyD5uEhdsLHHMXfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
                          rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 02:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
        Validity
            Not Before: Jul 23 02:41:11 2026 GMT
            Not After : Jul 30 02:41:11 2026 GMT
        Subject: CN=6a617f48-ca5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:2e:1b:68:5f:ca:12:ac:be:2e:93:33:8a:
                    66:81:1c:68:eb:2e:d8:08:dd:aa:f1:3b:e0:c0:1b:
                    03:a9:0c:b2:6b:ce:8b:52:82:cb:e8:39:ee:f2:f3:
                    3d:db:97:39:af:93:dd:e6:43:75:5e:0a:64:c5:40:
                    b5:07:8f:65:27:a3:bf:e1:81:05:bf:20:ce:0f:e3:
                    c1:b6:17:21:07:1c:47:b7:8f:07:8a:ce:00:1b:44:
                    6b:64:11:d1:0c:b7:5f:94:86:aa:5a:01:0b:89:11:
                    74:eb:98:9a:4f:cd:0e:b7:42:f6:1f:03:39:de:ad:
                    88:d0:a4:3e:81:53:0e:7d:e6:17:23:65:ed:22:1d:
                    fa:de:ad:9f:da:00:2a:fc:87:2a:0d:e1:64:7f:02:
                    a0:c0:e8:b4:fb:6b:bf:6b:c7:fe:4d:34:6d:2c:72:
                    6d:34:b7:f5:ba:27:24:4d:b3:a1:ff:05:13:4a:3e:
                    bb:d0:18:68:88:38:4b:63:21:96:95:25:a9:bb:6d:
                    29:fb:0b:de:ad:26:35:f7:48:3e:51:5a:01:d8:f6:
                    60:1e:9d:d3:80:32:21:cc:42:c1:e7:12:bd:9e:96:
                    1d:02:24:67:31:98:42:4f:c2:a2:59:b9:60:38:94:
                    a2:09:7b:ee:57:31:3a:f9:bd:46:30:c5:87:82:51:
                    3c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:E1:D3:9F:59:BB:D2:69:B6:18:8D:DD:74:43:BB:16:BA:4A:CA
            X509v3 Authority Key Identifier:
                keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:57:1a:50:40:6b:ff:a5:8c:ae:41:1e:e1:9b:21:71:37:
         52:75:e5:7c:0e:61:72:9a:16:c0:7e:3a:86:db:b4:de:16:e9:
         24:d3:87:1f:5f:b8:e1:b0:6c:e4:3a:b9:f6:1f:97:56:4e:89:
         ec:43:22:71:3b:95:ff:42:77:65:1b:1a:3f:09:9b:e7:85:b6:
         d3:79:3e:24:56:51:31:09:a5:c9:27:94:38:f5:de:35:17:03:
         ca:a8:55:a6:d1:7b:b6:cc:5b:63:3e:eb:2d:1c:e7:f2:ce:b5:
         1e:40:92:87:88:a1:f3:81:c2:8d:41:d2:a8:3c:30:73:be:4c:
         5a:00:96:b6:de:27:df:17:45:77:4f:5c:ec:b8:5c:ed:6c:95:
         84:1e:98:54:fd:d7:6a:e8:c8:c5:00:df:9a:f9:ff:fd:19:46:
         6f:10:24:4e:ed:2a:5d:1e:68:1e:26:36:11:b4:38:18:2d:cd:
         2d:63:75:f8:ed:80:c6:ed:ee:95:58:cb:d4:59:8d:29:76:a3:
         5c:fa:a4:bf:64:2b:37:54:40:86:8d:c3:d8:5b:03:ee:b8:a8:
         b5:8d:af:f7:99:c6:4d:3a:92:b2:72:8e:3e:a8:d8:24:9a:65:
         f1:7e:0d:6c:d9:5f:c8:2b:d8:d2:90:48:e7:04:b8:29:b8:54:
         ce:27:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:24:20 2026 by rpki-client