Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          BKjYZb3Xzv3qKpJHBgHlwOzCBCCs/SdDnHW//dM4X0U=
Subject key identifier:   5D:77:DC:19:2E:FA:BE:72:C7:93:57:11:33:99:2C:96:15:D7:F4:A8
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          2D
Signing time:             Mon 11 May 2026 06:29:10 +0000
Manifest this update:     Mon 11 May 2026 06:29:10 +0000
Manifest next update:     Mon 18 May 2026 06:29:10 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: MFMigmfoG90J3evcQj7O2oYBEyARVHMYW71fQR2as2o=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: May 11 06:29:10 2026 GMT
            Not After : May 18 06:29:10 2026 GMT
        Subject: CN=6a017736-d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:f9:19:ed:2e:2d:7b:19:8a:d0:9b:6c:70:
                    b1:f0:ce:26:96:d9:60:80:81:93:f5:91:ac:64:13:
                    d2:5d:f1:0b:15:1b:6d:d0:f7:76:9e:d9:0f:63:6e:
                    f1:69:a4:8b:16:16:78:fc:ea:8c:7e:44:76:7c:18:
                    28:4b:00:53:1f:7f:e2:5c:6c:8d:9e:82:f0:f8:47:
                    11:e9:48:51:ac:ee:1c:e4:65:19:67:0a:15:12:13:
                    dd:03:86:f9:d0:6d:7b:bf:67:3d:fd:b1:da:0a:d2:
                    b2:02:63:3e:f6:fb:1b:80:44:cc:e1:5d:0b:54:1a:
                    71:9b:a4:42:30:b2:27:e4:8d:05:e3:92:e0:27:b6:
                    20:ac:22:0d:54:f2:95:8d:6b:4e:27:23:e6:82:d1:
                    8b:06:77:cd:4d:6a:72:50:43:7d:9b:36:42:87:ce:
                    68:c7:8d:7e:26:8a:5f:37:60:94:13:70:ae:58:7c:
                    c3:f3:aa:a2:70:6d:76:c4:b6:94:d5:0f:cb:06:50:
                    7a:ee:fd:07:fc:56:8b:a9:ce:cd:fd:79:77:06:d8:
                    cb:d9:0b:ee:22:66:e6:e7:3e:f6:6d:de:27:b0:4b:
                    c5:68:7e:db:79:e3:a7:04:a0:f9:a9:a3:66:15:c8:
                    33:6b:0f:13:65:a4:df:b7:94:98:1f:ca:b3:c6:04:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:77:DC:19:2E:FA:BE:72:C7:93:57:11:33:99:2C:96:15:D7:F4:A8
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d2:01:82:ca:6c:4d:e3:73:8c:b9:be:4f:fd:c0:9c:9c:4e:
         90:63:d6:e5:b7:e2:91:97:d5:6d:ae:93:97:66:2c:e8:f8:91:
         33:60:81:e2:26:24:ac:22:81:ea:08:f4:81:13:d9:ba:8a:7b:
         96:ab:af:36:13:73:2d:c0:83:da:7f:1a:dc:24:41:0c:5f:c6:
         ee:b3:ed:e3:7a:25:74:8e:c4:f9:cd:0d:99:23:c9:66:a1:f0:
         61:87:3c:ac:82:ff:36:b5:75:02:19:5e:bb:f8:6b:8c:ca:4e:
         19:e6:79:dd:78:e0:70:47:fe:8e:1a:ba:67:86:97:86:35:85:
         d1:d3:90:84:e4:41:0a:6a:e6:a9:62:cd:0d:9a:08:43:a5:9f:
         cb:2f:79:a5:c1:52:1d:ca:13:a6:48:96:e1:1b:b6:52:af:84:
         65:2d:67:5d:a9:8b:ae:98:97:7d:b6:67:2c:46:95:87:96:d2:
         bb:b6:63:ba:d2:2d:d8:0c:bb:c8:d3:77:2d:db:20:6c:f3:70:
         85:f8:2e:ac:66:2f:76:e4:37:7e:a1:e2:39:74:91:5b:6d:7e:
         b6:4d:e0:a1:24:23:27:7f:fe:95:1b:f0:44:40:ad:56:d7:a7:
         c5:15:83:63:09:43:1c:a2:91:42:a0:7a:81:34:89:8a:53:26:
         5b:d6:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:56 2026 by rpki-client