Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
File:                     BL27YPamYNHS0BJzSQ_PCcw1m3M.mft (raw, json)
Hash identifier:          w72tkzKRJEs+LypKHfsWmJABAIP6tJDy4o2ZF81QM7Q=
Subject key identifier:   99:C7:5F:C2:FB:0B:98:C4:98:29:97:97:42:75:16:90:6E:65:3F:21
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       0974
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
Manifest number:          095C
Signing time:             Wed 22 Jul 2026 20:35:24 +0000
Manifest this update:     Wed 22 Jul 2026 20:35:24 +0000
Manifest next update:     Wed 29 Jul 2026 20:35:24 +0000
Files and hashes:         1: BL27YPamYNHS0BJzSQ_PCcw1m3M.crl (hash: s6NOKGNi2IfCsHjF3CtfqOyBBCSynJgrH0/jv2ck6rM=)
                          2: 12482BA205A211ED81E44F6DC4F9AE02.roa (hash: EaqsJvq9+kP/CsXJtpGYmUR7366ySfmmfcAxsNNsEdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Jul 22 20:35:24 2026 GMT
            Not After : Jul 29 20:35:24 2026 GMT
        Subject: CN=6a61298c-35c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c3:15:f6:b7:34:82:d1:e7:37:1e:a0:ad:ee:
                    9b:a7:ac:80:b4:d7:f9:ef:7b:58:04:eb:a7:e4:07:
                    37:2b:a0:53:74:e8:76:af:7f:0f:62:0f:13:20:8b:
                    3a:a6:39:31:46:bd:64:cc:d7:e9:af:e3:31:f2:c8:
                    ff:0b:a9:f1:96:0e:83:8b:33:a3:0f:60:e3:b1:59:
                    07:3a:fa:2c:61:ee:e4:e6:05:d9:a8:9a:55:9f:cf:
                    83:b5:23:5f:93:2d:a9:bb:ac:d9:0c:89:75:39:21:
                    c2:b0:92:67:c7:b9:df:66:30:ab:fd:a6:df:35:91:
                    9f:50:c2:6b:06:7a:22:ea:94:dc:a7:b7:d9:1c:f0:
                    73:a5:28:5c:af:18:f6:84:85:73:68:d5:e7:80:5a:
                    d6:41:a0:94:77:a8:ed:72:a0:86:21:6e:07:69:60:
                    f0:c9:57:88:6e:2e:16:11:fc:8a:00:2d:95:ac:98:
                    5d:bc:38:10:56:bf:88:ca:0f:d3:b8:d5:6a:30:eb:
                    62:ed:e7:e2:60:d3:17:f4:86:a5:7e:45:43:47:4e:
                    1c:82:df:24:d1:5d:7e:d4:48:3e:1a:86:99:93:f4:
                    f9:2c:fe:73:81:f0:7c:1a:6d:a8:c6:37:b9:6d:62:
                    6c:45:dd:7b:3b:18:a2:72:57:70:e5:16:87:42:69:
                    ff:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:5F:C2:FB:0B:98:C4:98:29:97:97:42:75:16:90:6E:65:3F:21
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:4e:fd:4b:19:0a:85:99:b7:aa:45:4e:0e:4b:bf:09:ab:
         6f:24:0c:e3:fb:ca:f2:48:2a:c9:0e:1b:1e:6b:4a:3a:ed:28:
         db:30:0e:de:a2:84:70:c8:64:52:27:83:59:c9:ff:49:06:9d:
         20:24:f2:51:2e:67:13:0b:2f:d7:98:12:db:f3:0f:1d:17:7a:
         20:88:b8:10:5c:81:e1:1a:6c:b8:10:00:f0:5c:a3:dc:80:a0:
         ad:cf:44:7a:3c:e5:59:df:69:fb:3c:45:a3:33:a8:db:e7:0d:
         77:08:1f:1f:13:d2:75:8d:71:9c:0c:f2:b5:e3:4b:b9:ce:8c:
         80:16:fb:85:d6:24:8b:61:ab:72:56:c9:34:9e:cd:a6:9b:1f:
         6e:4e:af:71:43:df:8d:2e:51:a5:a3:74:a8:f9:61:be:f0:8b:
         77:02:56:0b:e9:64:4b:3f:80:79:6c:bf:84:24:28:15:8f:d7:
         f7:26:4f:87:f9:a7:0d:de:3f:e5:47:63:fd:32:66:42:11:df:
         2b:3f:38:e8:f5:d1:df:7c:88:b8:78:71:a9:c7:5c:fc:c6:30:
         49:60:b0:51:01:ee:92:34:af:d5:a1:7d:70:b4:3d:48:78:b4:
         49:a4:46:bd:fd:3e:fc:fa:6d:34:84:e9:97:66:e3:92:e6:2a:
         77:63:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:31 2026 by rpki-client