Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
File:                     bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft (raw, json)
Hash identifier:          49tMmjWmwBzAkT1cJDb+HZyqX9USjj+PMydQrZehcMs=
Subject key identifier:   0D:AA:A6:AC:2E:F5:0F:07:D4:2B:7F:E4:31:7C:61:8F:0C:27:B6:7D
Authority key identifier: 6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86
Certificate issuer:       /CN=A916103C/serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
Manifest number:          BC
Signing time:             Wed 23 Sep 2026 06:42:30 +0000
Manifest this update:     Wed 23 Sep 2026 06:42:30 +0000
Manifest next update:     Wed 30 Sep 2026 06:42:30 +0000
Files and hashes:         1: bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl (hash: GeDrBWDIwhHM2N/8l7b7SZBNtBJEAQ9UBthoRC0Gay4=)
                          2: 6F8F75C49A0811F0AB023487C4F9AE02.roa (hash: /b5wosAPirzR7z8l8ddHa+xhWDIj0SNlWEAWkIZ6EwY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl
                          rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916103C, serialNumber=6E9A98D9BD66387F483D06B6833DA2DC4A7F3686
        Validity
            Not Before: Sep 23 06:42:30 2026 GMT
            Not After : Sep 30 06:42:30 2026 GMT
        Subject: CN=6ab374d6-471f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:2d:ca:fe:50:e9:9c:c5:74:76:4b:d8:e7:
                    0a:6f:7b:0c:e3:27:e9:3f:fc:7d:45:c3:68:41:c0:
                    d9:a3:0f:fc:15:03:95:36:8e:71:df:4a:ae:7d:86:
                    d1:94:25:4e:b6:c3:9c:21:c1:8a:40:d9:34:10:19:
                    92:bc:1e:10:7e:5d:e9:7b:dc:90:9d:07:4c:24:26:
                    23:41:d9:72:9c:d0:0b:f6:69:35:3b:7d:dc:95:0f:
                    d9:bf:03:10:18:ec:69:96:66:7b:fe:c2:88:36:ef:
                    79:fd:2b:34:c8:bf:0d:e9:c9:c0:14:3e:56:69:6a:
                    c1:3d:fc:77:f1:61:44:21:d1:54:d4:23:03:93:66:
                    67:aa:ed:a6:ed:7a:9c:8d:9e:db:8f:a6:19:5c:20:
                    77:74:dc:dc:e0:d2:ec:1e:5d:25:66:70:76:c0:15:
                    17:b0:59:72:88:44:3a:db:07:ee:a3:60:6e:e0:49:
                    39:c3:bb:d6:b2:d7:c9:15:23:99:f8:d5:d1:aa:b4:
                    f0:d0:08:ae:ad:05:87:0a:4a:ec:43:ab:b0:41:e1:
                    29:a1:eb:7d:bd:39:b3:9c:f3:6a:90:20:e0:b8:da:
                    5e:fa:00:71:08:2d:ff:76:2e:88:62:d1:0a:ad:7e:
                    3a:66:ad:af:ba:67:30:22:41:6e:02:77:ef:55:09:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:A6:AC:2E:F5:0F:07:D4:2B:7F:E4:31:7C:61:8F:0C:27:B6:7D
            X509v3 Authority Key Identifier:
                keyid:6E:9A:98:D9:BD:66:38:7F:48:3D:06:B6:83:3D:A2:DC:4A:7F:36:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916103C/FA428F549A0711F081017E86C4F9AE02/bpqY2b1mOH9IPQa2gz2i3Ep_NoY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:c6:a0:d4:b5:69:33:f9:83:ca:e5:53:4b:bf:c3:12:63:
         7d:67:c4:4f:e1:83:02:b6:bc:a9:c4:f0:94:83:65:8d:fa:1b:
         72:08:fa:f2:ae:28:f4:d0:70:98:87:8a:29:37:6f:2b:a2:83:
         d2:15:46:66:12:3d:1b:68:61:90:88:88:52:28:d8:9a:76:6f:
         7b:67:a2:8e:bf:a1:a8:ea:37:c2:8e:1b:4e:3e:a1:20:83:37:
         da:85:f4:ea:d2:c4:51:2e:4e:7a:19:56:c2:54:44:31:c7:b8:
         fb:4d:f1:50:88:64:a9:6c:ee:99:4e:7b:7c:e1:ce:28:b1:7b:
         42:68:16:f9:4d:86:f7:ad:f9:a2:ad:49:aa:fb:40:ac:33:c5:
         a2:54:b5:fa:61:a2:ec:6c:4e:2a:73:8d:2d:6b:0a:28:99:a0:
         ee:92:ff:a2:7d:4b:de:d7:c4:6b:a8:04:b9:55:6d:d4:a5:be:
         1e:f6:55:a1:d1:dd:bf:45:70:1e:12:82:0e:e1:dd:ff:24:87:
         7f:06:46:c6:59:6e:c4:73:b0:8e:3c:b9:1f:fd:70:15:65:e4:
         ef:4a:27:5e:c4:d4:fe:a4:73:c1:44:42:84:56:d5:a1:24:1d:
         64:c7:04:04:27:c4:bf:4e:bb:65:12:a9:22:ef:5c:90:87:f2:
         db:33:9c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:45:24 2026 by rpki-client