Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
File:                     BFtcCGfeWB0rdIQv74BFwad76L0.mft (raw, json)
Hash identifier:          0HaA5Vh+Xn8ldErt3tmyXOXHzilbuPOrH1a1ScVON2E=
Subject key identifier:   4D:66:09:96:4D:1C:77:F5:77:43:9D:B0:25:C9:AC:E0:1D:E0:38:78
Authority key identifier: 04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD
Certificate issuer:       /CN=A917412F/serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
Certificate serial:       24B7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
Manifest number:          2471
Signing time:             Tue 12 May 2026 15:47:43 +0000
Manifest this update:     Tue 12 May 2026 15:47:42 +0000
Manifest next update:     Tue 19 May 2026 15:47:42 +0000
Files and hashes:         1: BFtcCGfeWB0rdIQv74BFwad76L0.crl (hash: hzOVzYxxAt2iykfMylWSbYT8T7dryK2r8X8x8FY3H28=)
                          2: F8623718B10D11E5894F4D1CC4F9AE02.roa (hash: 9UKqPa9JKqE1l+FN7ojVmWnQaIY82NV/TLwBomfY13s=)
                          3: 1C8D941432FB11F19CCB9904AA833773.roa (hash: Vdjw7w1PeyzPAqEcj94Cecz0zkFI9OWxcvUoO7uwc2g=)
                          4: FCF0A580B10D11E5894F4D1CC4F9AE02.roa (hash: fgkQu9zYl8v+YdDPYFaVt8Gxd9ayM4QqC3tGXp179rk=)
                          5: F9ED1B16B10D11E5894F4D1CC4F9AE02.roa (hash: yKFS2lDRLavWNVAAC4O6Qt5LfJC9TFZHBTUZI5P/HBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl
                          rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9399 (0x24b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917412F, serialNumber=045B5C0867DE581D2B74842FEF8045C1A77BE8BD
        Validity
            Not Before: May 12 15:47:42 2026 GMT
            Not After : May 19 15:47:42 2026 GMT
        Subject: CN=6a034b9f-9be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a1:25:14:8d:b6:12:b3:fc:b9:af:05:4e:c8:
                    1f:f3:33:c0:69:e2:e6:f2:2f:c2:c7:c4:32:81:59:
                    51:47:16:50:ec:21:4e:3a:bc:98:40:a6:97:36:71:
                    0a:4e:c0:cf:03:b0:27:f4:ba:b0:f8:6c:92:31:24:
                    af:cf:4f:e9:50:8c:43:d1:c9:54:a1:43:02:d4:1a:
                    31:2f:97:be:a8:b9:0e:1e:33:14:a2:55:d8:d4:9f:
                    a4:95:2e:49:a1:07:eb:c9:8f:92:55:63:f7:2a:f2:
                    ec:cc:bd:3e:5c:74:f7:6d:90:1a:77:dc:e4:5d:17:
                    91:24:1d:df:55:b7:74:48:c8:38:8a:e9:21:e2:24:
                    aa:d8:24:e7:33:98:af:08:c2:fa:14:20:cb:78:12:
                    3c:7f:ec:f8:d4:d2:80:af:30:75:40:35:b0:3e:b2:
                    b4:ee:af:d0:11:92:a8:8f:ad:7a:1f:19:c4:fc:4e:
                    85:5e:f7:6e:24:75:0c:ca:d2:ff:d2:ef:a2:1a:a7:
                    60:4d:e1:9e:35:1c:3a:1f:06:f1:44:e2:b7:76:ee:
                    10:dc:28:10:2f:a5:54:a4:1e:3a:d4:49:ed:be:49:
                    61:3f:61:b9:76:68:e7:91:69:b6:65:dc:44:66:28:
                    fb:42:b0:36:16:8c:6a:f2:6c:a8:ec:88:5e:67:4b:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:66:09:96:4D:1C:77:F5:77:43:9D:B0:25:C9:AC:E0:1D:E0:38:78
            X509v3 Authority Key Identifier:
                keyid:04:5B:5C:08:67:DE:58:1D:2B:74:84:2F:EF:80:45:C1:A7:7B:E8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BFtcCGfeWB0rdIQv74BFwad76L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917412F/D411414C6D5611E590D87472C4F9AE02/BFtcCGfeWB0rdIQv74BFwad76L0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:65:9e:5f:dc:7c:c7:37:7f:f9:70:8a:59:57:fe:31:b8:
         2d:ff:f7:24:82:40:cc:98:58:aa:f2:ed:c0:5b:9f:aa:5b:21:
         73:d9:ba:8d:01:d7:db:0a:00:20:d7:7b:ef:8e:b7:f8:6e:97:
         15:46:4b:08:66:80:a8:44:99:6b:95:c9:c1:e7:b2:f5:f3:bb:
         2e:54:2e:3f:22:ed:ae:28:63:c5:ae:18:eb:7b:18:65:03:98:
         39:7c:e2:52:dc:79:d2:63:a2:a0:e9:70:30:c9:46:53:6d:1e:
         fd:b7:90:90:2e:01:57:e1:7a:43:56:f8:b2:26:d5:c1:b5:46:
         82:98:98:29:cb:3f:68:5b:a3:4c:b7:60:79:99:c6:45:1b:cb:
         af:e5:4c:a9:a9:6e:dc:e2:df:58:01:e5:4f:bc:b2:cd:62:32:
         aa:e4:24:ac:3f:c8:08:7b:d0:63:96:43:1e:ac:83:1f:ef:c0:
         e0:58:92:1b:57:39:5e:21:6c:f0:db:04:36:9d:e0:91:42:89:
         31:1a:d4:07:9d:7d:73:9e:ff:28:b2:19:55:ad:0f:d6:9f:d3:
         c9:ca:f9:76:5c:52:a4:87:f6:a3:93:0b:44:1a:b4:0e:80:a7:
         94:d6:db:d8:8b:ec:02:35:8d:4a:5b:f7:8c:7e:88:d5:bf:3c:
         a5:aa:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:36 2026 by rpki-client