Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
File:                     BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json)
Hash identifier:          5T3rtuihRxG15TKL7QnLbyOHj4ln2r1x2Tny6hJFM2A=
Subject key identifier:   27:40:4C:F2:0C:78:14:05:B1:D9:54:84:BA:8D:B6:3A:FC:B2:2C:E8
Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B
Certificate issuer:       /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
Certificate serial:       0174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
Manifest number:          0171
Signing time:             Wed 25 Mar 2026 03:58:54 +0000
Manifest this update:     Wed 25 Mar 2026 03:58:54 +0000
Manifest next update:     Wed 01 Apr 2026 03:58:54 +0000
Files and hashes:         1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: nUVgS4X0TaEXP+48ShCOWRTwEYUkUFawcUgNh+bCGRw=)
                          2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: qQ2xP1GvsecEoNe5H6sf4MiSWLqhNRPkeVi4L/fs0d4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl
                          rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B
        Validity
            Not Before: Mar 25 03:58:54 2026 GMT
            Not After : Apr  1 03:58:54 2026 GMT
        Subject: CN=69c35d7e-3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:34:fa:53:2b:71:07:f3:50:4f:c3:5b:f8:
                    34:9c:8e:3c:39:28:c7:09:af:6d:99:b9:16:18:b4:
                    e8:c3:c2:34:c2:73:3d:54:db:28:44:52:d6:d2:ea:
                    d4:3d:cb:97:18:1c:c2:c2:96:35:48:2b:cc:6a:eb:
                    31:c3:2c:22:4e:9e:e5:34:9f:68:65:28:ae:93:7e:
                    38:39:60:6e:9d:b8:11:f5:1b:90:80:aa:b4:a0:d9:
                    5c:13:d2:0c:99:e8:56:40:5a:4d:41:b8:6e:51:5a:
                    a1:74:4d:8d:5a:a3:be:66:14:89:ee:bc:ed:0d:2f:
                    5f:86:96:01:11:f6:87:55:8e:16:49:37:1a:cf:f3:
                    20:8b:be:d3:7b:c8:bf:8d:90:cd:80:74:89:56:cd:
                    16:25:03:3f:76:73:97:6a:93:97:07:c0:af:b6:a6:
                    10:3a:1e:f3:4e:0c:ff:79:70:ee:7e:6b:66:6f:d4:
                    27:60:fe:03:c2:22:e6:99:7e:c8:e4:a9:ea:5c:e1:
                    d6:55:eb:74:1f:66:e4:f1:da:f3:c3:66:2b:de:6f:
                    32:58:e9:d7:e8:47:9f:ab:1f:f8:08:95:ad:a1:4c:
                    95:7e:cb:a4:8f:ab:f3:7f:c3:05:88:4d:69:38:a0:
                    1f:34:e7:d4:ad:b3:47:43:30:af:1e:bd:49:49:05:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:4C:F2:0C:78:14:05:B1:D9:54:84:BA:8D:B6:3A:FC:B2:2C:E8
            X509v3 Authority Key Identifier:
                keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:42:9a:3a:e4:32:f1:7e:bc:31:9d:3e:1b:8f:f8:49:7d:fd:
         8f:15:4b:5d:9c:08:43:42:16:a3:c9:ee:05:d7:e2:ee:38:66:
         59:a2:28:81:eb:1f:54:60:1b:cf:46:4d:00:5b:a7:e4:9d:dd:
         31:1a:0a:fa:4e:1a:28:47:22:a9:32:09:c8:06:28:47:db:0d:
         b0:fe:89:d6:26:17:67:31:bf:21:65:2e:e3:73:aa:4d:10:b8:
         d7:b1:88:21:d2:e7:3d:ec:f9:15:32:fb:c4:bb:48:32:d3:b6:
         41:c0:f3:fc:35:69:ed:8e:43:82:22:53:cf:d6:5b:4e:bb:b2:
         2f:f3:53:0d:e8:10:2c:ee:95:5c:01:a8:bb:c4:7a:be:7f:29:
         32:57:4c:90:79:a8:4e:c3:1e:5e:59:ab:8e:df:6d:da:90:1c:
         1e:5b:64:2c:0b:6c:d8:0f:82:66:29:e2:55:dc:8b:7f:7f:22:
         9d:80:05:a5:35:d5:2f:f4:16:02:7a:10:9a:9d:65:14:df:64:
         fd:ec:c9:2f:70:13:05:be:e2:d6:15:5d:dd:14:c2:34:a9:f0:
         49:4e:0e:ab:6a:8b:86:5d:93:e0:ab:8b:69:07:48:0d:b8:6b:
         21:d1:78:96:22:fc:fa:90:7a:a9:77:2e:f5:47:40:01:b0:0e:
         8d:40:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:36 2026 by rpki-client