Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
File:                     BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json)
Hash identifier:          njWm9GhCWlGlTiGdbwwPIvRJ0E6V635X8OBQg8EB5jI=
Subject key identifier:   06:46:4E:AC:36:28:5E:22:88:B2:64:C7:A7:8C:8F:0C:2C:3E:8A:FB
Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1
Certificate issuer:       /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
Certificate serial:       2575
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
Manifest number:          2565
Signing time:             Tue 12 May 2026 15:45:15 +0000
Manifest this update:     Tue 12 May 2026 15:45:14 +0000
Manifest next update:     Tue 19 May 2026 15:45:14 +0000
Files and hashes:         1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: 4VL9D4+w9AC9beg7eh7hg3quJ+1d19/A1Mu9cRCmoF4=)
                          2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: xPwsKwL7UMt7l1oT80YMCI87GVus5Det22vCaaPYrAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl
                          rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9589 (0x2575)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1
        Validity
            Not Before: May 12 15:45:14 2026 GMT
            Not After : May 19 15:45:14 2026 GMT
        Subject: CN=6a034b0b-a027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:18:a8:26:d2:7b:b8:a6:e5:8c:0f:ba:67:f6:
                    ab:71:e4:74:3f:1e:22:ab:4f:75:a5:6a:27:c6:76:
                    41:01:6f:be:57:27:95:b4:68:b0:df:58:e8:28:79:
                    b6:48:02:37:eb:8a:99:d8:87:55:9f:14:0d:0f:9a:
                    1e:e2:8b:9c:aa:d3:07:39:3a:ff:42:ba:4a:0c:4a:
                    63:7c:2a:05:5f:bc:50:35:1a:1a:66:ed:13:59:a7:
                    a0:a8:ac:70:1c:64:b1:20:f9:65:cd:b6:92:77:3e:
                    bf:93:c4:3b:14:3d:4b:c6:fd:e9:5f:b7:27:3e:77:
                    9c:8f:58:c7:ae:0c:07:9e:d8:a5:ec:ef:2c:93:6e:
                    aa:31:e8:af:63:ed:75:36:63:4f:7d:a7:df:60:95:
                    91:86:0c:25:89:2b:21:a6:dd:50:07:85:53:49:74:
                    6d:c0:11:fc:cd:6e:70:cd:ba:82:b4:04:65:e1:d8:
                    48:e7:ca:e2:52:4a:ac:53:4f:44:ba:c0:0a:6a:52:
                    66:78:01:f3:68:29:e8:02:ba:96:c2:47:4b:bf:cf:
                    62:4c:26:74:d1:88:49:c5:b6:8e:76:a9:d2:95:0c:
                    8d:71:fe:38:ca:3e:25:e4:e0:c7:51:e1:5f:a3:26:
                    27:53:bb:65:41:f1:1f:59:e3:73:f4:7f:ae:ba:23:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:4E:AC:36:28:5E:22:88:B2:64:C7:A7:8C:8F:0C:2C:3E:8A:FB
            X509v3 Authority Key Identifier:
                keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:67:81:8d:12:8b:c7:f9:d3:30:9c:98:ce:f7:e3:fb:cd:fc:
         82:f7:92:3d:93:6d:9e:1a:de:68:b0:35:6d:ac:24:be:4b:54:
         85:dd:44:03:30:50:f0:08:0a:af:6e:55:5a:26:eb:32:e4:61:
         a4:03:0d:2a:43:17:5a:42:0e:a7:26:d4:a4:e7:21:0c:bf:3b:
         1d:19:ec:5f:71:66:69:0e:fe:ca:77:bd:64:09:04:24:fa:80:
         91:3b:e7:1a:cd:db:b8:2b:93:66:b2:0b:e7:49:e4:73:85:fa:
         e4:8f:ce:e4:48:e0:a4:20:10:37:09:76:de:8f:81:d5:48:e6:
         a2:46:d4:d1:6a:95:05:86:0d:0d:59:84:5a:47:af:ea:c4:fd:
         72:c4:65:e7:c9:fe:4a:06:50:52:95:05:48:80:2c:50:04:77:
         50:11:dd:49:76:f0:e0:24:32:5d:1d:9d:86:66:91:5e:09:57:
         8a:2d:ed:28:c8:4d:5b:8a:0b:11:f1:c2:4b:5a:bb:e1:3e:24:
         23:eb:7d:84:fc:8a:3e:1b:c9:38:64:62:7d:7c:dc:fa:da:7e:
         1e:11:a3:59:e1:56:ac:77:32:53:b5:9a:af:f3:43:1d:d0:75:
         8a:1d:f7:f5:55:1f:0d:a5:91:8c:92:9e:7c:b9:92:ef:d8:d3:
         78:8a:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:34:16 2026 by rpki-client