Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
File:                     BvzPtWLbIsed8IYyJBvx-uZ658E.mft (raw, json)
Hash identifier:          js2GauHb/leMKOUOhmb9FArRBqN71FA+hh7KuHoL9co=
Subject key identifier:   5C:23:AB:9D:D6:63:C3:A3:E1:FC:61:E9:0F:1D:F5:53:87:0F:F7:12
Authority key identifier: 06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1
Certificate issuer:       /CN=A917C512/serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
Manifest number:          51
Signing time:             Thu 23 Jul 2026 07:39:19 +0000
Manifest this update:     Thu 23 Jul 2026 07:39:19 +0000
Manifest next update:     Thu 30 Jul 2026 07:39:19 +0000
Files and hashes:         1: BvzPtWLbIsed8IYyJBvx-uZ658E.crl (hash: RrEuwXcdeBNpGH35AGr5R6QQJ2PmdmtBx5kqwThe5V0=)
                          2: 41FAA4E813B711F1A73F531B083D8C67.roa (hash: W6ELAQH0h71efzCgT0f/rl+LgjPtcikkCOm3gmjC49M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=06FCCFB562DB22C79DF08632241BF1FAE67AE7C1
        Validity
            Not Before: Jul 23 07:39:19 2026 GMT
            Not After : Jul 30 07:39:19 2026 GMT
        Subject: CN=6a61c527-3809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:cb:af:6d:1e:da:8f:45:24:93:aa:56:30:
                    e0:ed:77:ca:d0:ac:6d:eb:2f:34:ce:fb:8e:24:17:
                    1f:14:29:d1:79:d5:c5:02:f5:45:cf:eb:a1:b0:c9:
                    6e:7c:19:48:5f:fd:da:82:e2:f5:25:c1:9e:ab:07:
                    77:39:fe:4c:1f:0a:c5:37:8f:38:f4:9f:13:c1:44:
                    6d:ce:42:94:cf:fc:94:bf:7d:18:3f:35:26:7c:7d:
                    a9:8e:79:56:05:8b:05:e8:1d:d9:81:27:f3:f8:4f:
                    fd:81:ac:a2:42:7b:a7:b8:5e:b6:41:95:0f:dc:96:
                    47:7d:ec:d1:ea:70:8c:39:33:26:7a:02:c2:45:36:
                    70:55:56:bd:2d:a7:76:df:84:fa:d4:5e:1c:f2:03:
                    fa:33:73:37:cc:f8:dc:a7:c0:60:72:4e:50:ed:ae:
                    de:97:1d:56:39:d9:1a:9a:bb:c7:c7:ed:33:18:24:
                    80:8f:64:ef:88:bc:da:63:04:2c:c3:61:54:4e:b1:
                    81:da:2d:32:06:a9:ed:00:67:9d:99:d3:c7:15:44:
                    44:58:b8:0c:e0:67:35:c7:32:4a:c8:35:a6:ef:17:
                    5e:da:c3:32:0b:f5:f6:ea:24:69:22:72:ff:30:3d:
                    07:c5:65:50:44:64:69:ed:bb:c3:c4:e4:dd:7d:1c:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:23:AB:9D:D6:63:C3:A3:E1:FC:61:E9:0F:1D:F5:53:87:0F:F7:12
            X509v3 Authority Key Identifier:
                keyid:06:FC:CF:B5:62:DB:22:C7:9D:F0:86:32:24:1B:F1:FA:E6:7A:E7:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BvzPtWLbIsed8IYyJBvx-uZ658E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/22DBFEFA12A311F1A20FC6383D3D8C67/BvzPtWLbIsed8IYyJBvx-uZ658E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:9b:1c:c2:52:a3:d1:fa:fd:a3:8a:28:a4:de:e8:be:48:
         6c:ba:0c:a3:7b:d1:f8:52:05:42:5f:37:83:d3:ac:2c:39:c8:
         0a:29:42:64:40:8c:15:6f:47:7d:30:a0:66:2b:28:42:ea:66:
         7d:d2:cc:c0:0e:21:7e:1e:05:1c:8c:06:7c:8d:83:84:a6:35:
         77:d8:35:bf:f4:a4:eb:0e:d7:fc:b4:d8:ee:c7:94:eb:e6:60:
         fd:2e:d4:b3:7e:1d:af:5a:21:f1:89:b4:a9:97:f8:07:f8:25:
         99:86:fc:ae:e7:4c:3a:17:39:d0:7d:5f:fe:79:e0:9e:4c:da:
         82:a5:11:9d:d3:1f:b7:99:5a:f7:ca:cd:38:ab:77:df:70:68:
         1b:da:63:52:1b:8f:a0:32:0b:39:2b:bc:3b:f0:36:bf:90:ac:
         ec:bb:af:99:82:f4:d3:b0:3e:9b:fc:43:05:b5:ad:70:22:d2:
         79:0f:dc:a0:a6:6f:11:e4:d6:cc:2c:83:67:10:72:41:56:ea:
         a9:cc:07:06:8f:60:9a:ce:97:55:03:e7:3a:28:dd:62:d1:c3:
         12:a7:16:81:e3:83:00:a7:22:1d:f8:90:e4:f1:22:77:23:35:
         59:4d:c2:d9:3c:7d:02:d1:4e:83:7d:c5:2e:16:d3:3e:80:cd:
         f1:b9:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:55 2026 by rpki-client